> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/vulnerability-assessment/vulnerability.md).

# Vulnerability

### Vulnerabilities

What is a Vulnerability ?

* A **weakness** is the computational logic (e.g. **code**) found in software and hardware components that, **when exploited**, results in a negative impact to **Confidentiality**, **Integrity**, or **Availability**.
* CyberSecurity is like a heist.
* Vulnerabilities comes from Software or Operating System or Service running on PC

Who founds it ?

* DevSecOps Engineers
* Security Researchers
* Pentesters
* Software Developers
* Users, on accident?

**CVE (Common Vulnerabilities and Exposures**

* Reference-method for publicly known vulnerabilities and exposures. 
* National Cybersecurity Division of US Department funds MITRE, which manages the CVE site 

**NVD (National Vulnerability Database)**

* U.S. government repository of vulnerability management data

**CVE Identifiers**

* Also called as
  * CVE names
  * CVE numbers
  * CVE-IDs
  * CVEs
* Unique, common identifier
* Examples:
  * CVE-2021-44228 (Log4j)
  * CVE-2014-0160 (HeartBleed Vulnerability)
  * CVE-2017-0143 (Eternal Blue part of Wannacry ransomware)

Understanding Vulnerability Detail Pages

* Descriptions
* Severity
* References
* Weakness Enumeration
* Known Affected Software Configurations

#### Sites for CVE 

{% embed url="<https://cve.mitre.org/>" %}

{% embed url="<https://www.cvedetails.com/>" %}

{% embed url="<https://nvd.nist.gov/>" %}

*Note:*&#x20;

* *CWE- Common Weakness Enumeration*&#x20;
* *CPE - Common Platform Enumeration*
* ZeroDays
* Not all vulnerabilities are in computer code

Risk Management -> Vulnerability Management -> Vulnerability Assessment -> Penetration Test

How to find our vulnerabilities ?&#x20;

* Scanning
* Asset Identification + Research
* Fuzz Testing (Input/handling Validation)

***