Skip to content

Shell script searching for known CVE & Exploit associated with a product name/version

License

Notifications You must be signed in to change notification settings

Beijaflore-Security-LAB/cveexposer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

14 Commits
 
 
 
 
 
 

Repository files navigation

DESCRIPTION

This Script searches in cve.circl.lu known CVE & Exploit and qualify them with the following rules :

   Critical when CVSS >= 9 
   High when CVSS < 9 & >= 7 
   Medium when CVSS <= 4 & > 7 
   Low when CVSS < 4 

This script uses jq and bc.

GUIDE

To launch the script :

 cveexposer -p <product> -v <version>

   -h : help
   -p : for the product
   -v : for version because fuck verbose

Examples :

foo@bar:~$ cveexposer -p nginx -v 1.3.10
Detect 6 CVE for nginx 1.3.10 : [0 critical,3 high,3 medium,0 low]
foo@bar:~$ cveexposer -p drupal -v 8
Detect 18 CVE for drupal 8 : [0 critical,2 high,16 medium,0 low] and 3 public exploits [CVE-2018-7600 CVE-2018-7600 CVE-2018-7600]

About

Shell script searching for known CVE & Exploit associated with a product name/version

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Languages