mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-29 17:01:02 +00:00
0xMarcio
56a945f9bb
Unquoted words were scored independently, so "active directory" matched a description holding "active session" and "working directory" as strongly as a real AD advisory, and the newest-first tie-break then put the wrong one on top. Reward the words appearing together. Plain substring matching also meant "rce" hit "open source" and "sudo" hit "pseudo"; require a term to start a word, while still allowing it to match into one so "word" finds "wordpress". Weight matches near the start of a description, in coarse buckets so a few characters never outweigh recency: "log4j rce" now leads with Log4j2 rather than GeoTools.