issues
search
bugcrowd
/
vulnerability-rating-taxonomy
Bugcrowd’s baseline priority ratings for common security vulnerabilities
https://bugcrowd.com/vrt
Apache License 2.0
446
stars
85
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
VRT Addition - Blockchain Security
#426
nnons
opened
3 days ago
1
SAML Replay
#425
TimmyBugcrowd
opened
5 days ago
0
1.14.2 Release Q3 2024
#424
abhinav-nain
closed
4 weeks ago
0
AI Application Security - Subcategories
#422
BC-Lucille
opened
1 month ago
1
STO-Update
#421
TimmyBugcrowd
closed
3 weeks ago
1
What priority is account takeover without user interaction?
#420
NoPurposeInLife
closed
2 months ago
1
adding changelog and release date for v1.14.1 release
#419
rohit-bugcrowd
closed
4 months ago
0
Update vulnerability-rating-taxonomy.json
#418
TimmyBugcrowd
closed
4 months ago
0
Adding Changelog and release date for v1.14 release
#417
abhinav-nain
closed
4 months ago
0
Biases entries
#416
TimmyBugcrowd
closed
4 months ago
6
VRT-release-changes
#415
TimmyBugcrowd
closed
4 months ago
2
VRT Addition - SAML Replay
#414
adamdyche
opened
5 months ago
2
Update vulnerability-rating-taxonomy.json
#413
priyanshukumar397
closed
5 months ago
2
Reconsider severity for "Indicators of compromise"
#412
sw33tLie
closed
7 months ago
1
Adding Changelog and Release Date
#411
abhinav-nain
closed
7 months ago
0
VRT Addition - Hardware and Physical Security
#410
TimmyBugcrowd
closed
7 months ago
1
1.3 stable
#409
TimmyBugcrowd
closed
8 months ago
0
VRT Addition - Hardware and Physical Security
#408
evildaemond
closed
2 months ago
5
What priority is account takeover?
#407
thepoorhacker
closed
9 months ago
2
Edit/Modify Non-Sensitive Information IDOR should be categorzed as P4
#406
georgedevasia0
opened
9 months ago
1
P5 - Server Security Misconfiguration -> Missing Subresource Integrity (SRI) Checks
#405
Cache-Bounty
closed
2 months ago
1
Update VRT language to remove ambiguity between subcategories
#404
danzajork
opened
10 months ago
1
read-only IDOR P3 requires differentiation
#403
foobar7
opened
10 months ago
3
Server side Language And Configured Sensitive Data Blank Files > Disclosure of Secrets > For Public Accessable Assets
#402
galactghost
closed
10 months ago
1
SCW update for AI security for v1.12 release
#401
jhas3c
closed
11 months ago
1
Server Security Misconfiguration > Unsafe File Upload > File Extension Filter Bypass should be higher severity
#399
blischalk
closed
5 days ago
6
Llm vrt additions
#398
drunkrhin0
closed
10 months ago
1
deprecated-node-json-fix
#397
jhas3c
closed
1 year ago
0
Fixing-errors
#396
TimmyBugcrowd
closed
1 year ago
0
IDOR category changed to subcategory
#395
jhas3c
closed
1 year ago
0
scw-update for v1.11
#394
jhas3c
closed
1 year ago
0
Fixing duplicate error
#393
TimmyBugcrowd
closed
1 year ago
0
V1.11
#392
TimmyBugcrowd
closed
1 year ago
0
V1.11
#391
TimmyBugcrowd
closed
1 year ago
0
v1.11
#390
TimmyBugcrowd
closed
1 year ago
0
AI Application Security(LLM)
#389
TimmyBugcrowd
closed
11 months ago
2
AI Application Security(LLM)
#388
TimmyBugcrowd
closed
1 year ago
0
AI Application Security(LLM)
#387
TimmyBugcrowd
closed
1 year ago
0
hypens to underscores in vrt items
#386
TimmyBugcrowd
closed
1 year ago
0
Hyphens to Underscores on files names
#385
TimmyBugcrowd
closed
1 year ago
0
Removing hyphens and replacing with underscores in VRT
#384
TimmyBugcrowd
closed
1 year ago
0
Removing hyphens and replacing with underscores in file names
#383
TimmyBugcrowd
closed
1 year ago
0
Removing hyphens and replacing with underscores in file names #1
#382
TimmyBugcrowd
closed
1 year ago
0
1.20 stable -> master for VRT release version 1.11
#381
jhas3c
closed
1 year ago
2
json formatting and parsing error fix
#380
jhas3c
closed
1 year ago
1
1.20 stable
#379
TimmyBugcrowd
closed
1 year ago
0
Ldap injection
#378
TimmyBugcrowd
closed
1 year ago
0
Add LLM VRT Entries
#377
drunkrhin0
closed
11 months ago
11
Add unnecessary open port on server misconfiguration in P1
#376
galactghost
closed
1 year ago
1
Change of "Sensitive Data Exposure > Disclosure of Secretes > Intentionally Public, Sample or Invalid"
#375
FrentzenX
closed
11 months ago
0
Next