Common Vulnerability Scoring System (CVSS)

wikipedia:Common Vulnerability Scoring System

Textual severity ratings of None (0)

• Low (0.1-3.9)
• Medium (4.0-6.9)
• High (7.0-8.9): Polkit (pkexec)
• Critical (9.0-10.0): Log4Shell

Adoption

• The National Vulnerability Database (NVD)
• The Open Source Vulnerability Database (OSVDB)
• CERT Coordination Center

Related

• NVD
• https://www.cvedetails.com/vulnerability-list.php?vendor_id=0&product_id=0&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=9&cvssscoremax=10&year=0&month=0&cweid=0&order=1&trc=19354&sha=c560d509f935c26128bfb13d2f2dadfcea62215b

See also

• CVE, CWE, CVSS, Mitre, NVD, Log4Shell, Dirty Pipe, GHSA, RHSA
• NIST, SHA, AES, DSA, FIPS, NVD, CVSS, NIST Cybersecurity Framework, AAL3, SWID
• Security organizations: MITRE, NIST, NSA, SANS, OWASP, CERT, Mitre Corporation