VUPEN Security - Explanation of terms used within Security Advisories and Alerts

	About Us \| Contact Us

VUPEN Free Resources

VUPEN Security Advisories

Explanation of terms used within VUPEN Security Advisories

Information published by VUPEN Security is identified as follows :

VUPEN/A-B-C
A	Information Type	ADV for Security Advisories (vulnerabilities) ALRT for Alerts (worms, threats, attacks) INFO for Useful Informations (news)
B	Year (4 digits)
C	Identifier (4 digits for ADVs and 5 digits for ALRTs)

Security Advisories and Vulnerabilities

- Critical Risk (4/4) :	Remotely exploitable flaws, which could lead to system compromise (without user interaction).
- High Risk (3/4) :	Remotely exploitable flaws, which could lead to system compromise (user interaction needed).
- Moderate Risk (2/4) :	Remotely and locally exploitable flaws, which could lead to denial of Service or privilege escalation.
- Low Risk (1/4) :	Locally exploitable flaws, which could not lead to system compromise (e.g. information disclosure)

Security Alerts (Worms, Threats, Trojans)

- Critical Risk (4/4) :	Highest level alert. Extremely dangerous threat and very difficult to contain.
- High Risk (3/4) :	Highly dangerous threat or very difficult to contain.
- Moderate Risk (2/4) :	Potentially dangerous but containable threat.
- Low Risk (1/4) :	Harmless and containable threat.

Monthly Statistics

VUPEN Security Advisories By Criticality: Sep 2011
Critical Risk	: 27%
High Risk	: 9%
Moderate Risk	: 45%
Low Risk	: 19%