萧过无痕

ThreadFix 是软件漏洞聚合和管理系统, 可让你减少修复软件漏洞所花费的时间。它从动态、静态、手动测试的数据中导入结果，然后提供一个集中的视图来展示软件安全缺陷。

ThreadFix 1.1 发布了，主要改进内容包括：

• Support for IBM Security AppScan Enterprise Scans (#166)
• Support for IBM Security AppScan Source Scans (#115)
• Significant improvements to JIRA integration/support (#204, #205, #210)
• Support for NTObjectives NTO Spider scans (#162)
• Support for Microsoft Team Foundation Server (TFS) as a defect tracker (#117)
• Adding user comments for vulnerabilities (#55)
• Editing of manually-entered vulnerabilities (#160)
• "Filter by CWE" for vulnerabilities (#163)
• Updated to CWE 2.4 (#167)
• Updated security model to allow for fine-grained user permissions (#56) (this was a huge priority for larger enterprises deploying ThreadFix)
• Update 'Importing Self-Signed Certificates' Wiki Page (#209)
• Updated Snort rule generation (#113)
• Updated Brakeman Importer (#236)
• Updated open source license from Mozilla Public License 1.1 to Mozilla Public License 2.0 (#181)
• Various updates and bug fixes and enhancements (#159, #168, #176, #179, #180, #189, #190, #196, #201, #203, #206, #207, #208, #211, #213, #216, #217, #219, #221, #222, #223, #225, #227, #228, #229, #230, #236, #238, #240)
  

官方网站https://code.google.com/p/threadfix/

leyoutt

这些都是漏洞吗？

a263007054

xiexie！！