Consider vulners as an additional data source

[pombredanne]

@vulnersCom https://vulners.com/ is not FOSS code, but as close as it gets to open data from what I can see. It may be a good addition to cve-search?

[adulau]

Sure (for via4cve) good idea. Where is the link to download the dataset?

[vulnersCom]

https://vulners.com/docs
https://avleonov.com/2017/02/28/vulners-com-and-ranges-of-dates/

This can help ^)

[vulnersCom]

May I help in any way to perform better experience with our tool?

[adulau]

@vulnersCom Is the full dataset available as download to permit users to make local search? if yes, can we bundle it with cve-search and VIA4CVE? Thank you.

[vulnersCom]

Yes, it is available for download.
Feel free to bundle it.
All dataset is separated by "types".
You can download whole dataset of the "type" in JSON using this call:

https://vulners.com/api/v3/archive/collection/?type=cve
https://vulners.com/api/v3/archive/collection/?type=exploitdb
https://vulners.com/api/v3/archive/collection/?type=centos

And so on. Check possible "type" values by this call:
https://vulners.com/api/v3/search/suggest/?fieldName=type&type=distinct

To make a good linkage to CVE check "cvelist" key. It holds link to the CVE for each element.
For better correlation you may integrate this online calls:

Search all data for CVE:
https://vulners.com/api/v3/search/lucene?query=cvelist:CVE-2014-0160
Abstract vulnerability search:
https://vulners.com/api/v3/search/lucene?query=Your_cool_query
Data for element + dynamic references search:
https://vulners.com/api/v3/search/id/?id=CVE-2014-0160&references=True

P.S.
Search query syntax and examples are here:
https://vulners.com/help

[adulau]

@vulnersCom Looks cool. Thanks for the hint. We will add it in VIA4CVE.

[PidgeyL]

Closing it here since the entry is taken up in via4 (and I'm working on it). Thanks all!