cve-search - a tool to perform local searches for known vulnerabilities
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
A suite of utilities to help with software supply chain challenges on nix targets
PatrowlHears - Vulnerability Intelligence Center / Exploits
Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds
Tool to guess CPE name based on common software name
Repository for the IPvSeeYou talk at Black Hat 2021
IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.
Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.
The knife of the Admin & Security auditor
This repository contains the container image scanning tool ORCA
This project contains programs that will create a database of the programs installed on your PC, and match them against the NIST's CPEs (identification of software) and CVEs (vulnerabilities of software) dictionaries.
A search engine on information delivered by OSINT sources to support Vulnerability Assessment
Vulmatch is a database of CVEs in STIX 2.1 format with a REST API wrapper to access them.
[ARCHIVED -- USE CVE2STIX] A small Python wrapper to download data using cve2stix and cpe2stix.
Add a description, image, and links to the cpe topic page so that developers can more easily learn about it.
To associate your repository with the cpe topic, visit your repo's landing page and select "manage topics."