How to Detect Security Vulnerabilities

Exploiters on the Internet have caused billions of dollars in damages.

These exploiters are intelligent cyber terrorists, criminals and hackers who have a plethora of tools available in their war chests ranging from spyware, rootkits, Trojans, viruses, worms, bots, and zombies as well as various other blended threats.

Exploits can be grown and harvested the same day a security hole is announced-in so-called “zero-day attacks”- so they are getting much harder to stop. Open source malware code, freely available on the Internet is enabling this phenomenon and cannot be reversed.

Not all exploits are created equal. Most are evolutionary improvements on existing exploits. What's very interesting is that the average exploit currently has a dozen names.
With the advent of the Common Malware Enumeration (CME) standard, there will be one shared, neutral indexing capability for malware.
Hackers, viruses and worms cause billions in damages by using CVEs against us, and the damages are growing annually.

Knowing if you have any CVEs is the only way to find out and is considered due diligence. Removing critical CVEs is considered due care.

Frequent and consistently scheduled security audits for CVEs and their removal is the only prudent thing to do as a proactive information security manager.