NSFOCUS has performed great achievements in vulnerability research, which makes it a network security provider that has released the most vulnerability information in China.

According to statistics, NSFOCUS has released 36 CVE vulnerabilities in total and 8 CVE vulnerabilities in 2006. Most of them, critical in severity, have been confirmed and given solutions by the vendors. Users may retrieve the vulnerability details and associated URLs on the CVE website. NSFOCUS’ vulnerability achievements help users avoid the damages brought by hacker attacks.

As the earliest vulnerability research organization in China, NSFOCUS has fully represented its research capacities. All the CVE vulnerabilities discovered by NSFOCUS have been referenced by the influential vulnerability database Securityfocus, and most of them have also been referenced by other organizations or institutions dedicating to vulnerability information collection and releasing, including CERT, Secunia, Frsirt, OSVDB, XForce and Securitytracker. The vulnerabilities involved multiple operating systems and platforms, including Windows, HP-UX, AIX, Solaris, Cisco etc.

It is worthy mentioning that NSFOCUS has made greater achievements in the vulnerability discovery in 2006. The security team has discovered 8 CVE vulnerabilities, in which three entries, MS06-037, MS06-039 and MS06-059 are evaluated as "serious" or "critical" in severity by Microsoft and two entries, CVE-2006-3869 and CVE-2006-0007, are assigned with the CERT-VN. Generally speaking, a vulnerability cannot be referred to by CERT unless it is very critical, such as the Blaster, and the Sasser Internet worms.

Powered by its years of security vulnerability research and security product development capacity, NSFOCUS provides security research reports for those internationally well-known vendors including Microsoft, Sun, Cisco, HP, etc., as well as top-level security products and comprehensive security solutions for government agencies, telecom, financial, energy and other industries, in an attempt to help the customers build a reliable and peaceful network environment.

At present, NSFOCUS maintains the globally largest Chinese vulnerability bugtraq, which contains almost 10,000 security vulnerabilities and corresponding solution information. The NSFOCUS Security Team closely follows the world trend of security vulnerability development and real-time updates the bugtraq, ensuring to deliver comprehensive and timely vulnerability supports.

NSFOCUS guards the network security taking advantage of its outstanding vulnerability research and development achievements.

Tips:

The Common Vulnerabilities and Composures (CVE) initiative is maintained by the MITRE Corporation and is a list of standardized names for vulnerabilities and other information security exposures. CVE aims to standardize the names for all publicly known vulnerabilities and security exposures.  

CVE has an Editorial Board which is responsible for the routine CVE confirmation. The board is comprised of world famous, authoritative security researchers. Established practices are followed when a potential security vulnerability is discovered. First a CVE candidate is created, then if the Editorial Board accepts the candidate, an official CVE entry is created that includes the description and references. The candidate number is converted into a CVE name by replacing the "CAN" with "CVE." The “CAN” and “CVE” entries are separately assigned on the CVE website.

A CVE entry fully displays its value when the concerning vendor conforms the vulnerability and releases a fix.

List of CVE Entries from NSFOCUS:

About NSFOCUS
NSFOCUS is a leading network security vendor in China that is devoted to network and system security research, as well as R&D, sales and service of high-level network security products. NSFOCUS is capable of providing IDS/IPS, remote assessment, DDoS prevention and other advanced products with internationally competitive advantages, and is the most experienced professional security service vendor in China.