Zed will act as a clearing house? There's no danger scale (CVSS or whatever) for customers and no comp for, ahh, researchers. I don't understand how this will work.
Also clearly demonstrated that it's easy to submit reports. So...
1. Spam vulnarb.com with vulns in my competitor's software.
2. Spam vulnarb.com with vulns in my own company (maybe I can spin this... "1239801211 vuln reports against us... vulnarb clearly not to be trusted... our robust and mature security team always available...". Any press is good press right?)
3. Spam anybody I like in there, bury my product's issues. How exactly does Joe Customer realistically compare software using this? ("I want to view PDFs, should I use Acrobat, Foxit, evince, xpdf?").
3b. Spam vulnarb.com with faux vulnarb.com vulns :-p
Also clearly demonstrated that it's easy to submit reports. So...
1. Spam vulnarb.com with vulns in my competitor's software.
2. Spam vulnarb.com with vulns in my own company (maybe I can spin this... "1239801211 vuln reports against us... vulnarb clearly not to be trusted... our robust and mature security team always available...". Any press is good press right?)
3. Spam anybody I like in there, bury my product's issues. How exactly does Joe Customer realistically compare software using this? ("I want to view PDFs, should I use Acrobat, Foxit, evince, xpdf?").
3b. Spam vulnarb.com with faux vulnarb.com vulns :-p