A ruby gem for creating a static NVD filesystem repository Currently it only supports parsing of the v1.2.1 XML feed format.
- Populate a file system tree with all existing NVD/CVE entries.
- Provide entry files in JSON and XML format.
- Track history of modifications.
- Provide concise summaries of changes since last update.
- Simple bash scripts to get entry and search.
The goal of this project is to have a filesystem structure that contains a repository of NVD/CVE entries. It's a setup that doesn't require rails or a database. A Rails developer using a service like Heroku can use this gem offline to get daily NVD updates, then commit and push. The Rails app can then provide quick access to CVE entries and change with minimal or no load on the database.
Example files for an entry that has history.
./data/nvd/2015/CVE-2015-5343/ - entry-2016-04-14.json - entry-2016-04-14.xml
To populate the initial filesystem, run:
rake nvd:populate
rake nvd:update
TODO bin/nvd_cat [cve_name] bin/nvd_for_prod [year] [vendor_product_id] where: year is a single 4-digit year or '-' vendor_product_id [vendor]:[product_name] e.g. microsoft:windows_10