Exploit Check

This project was originally designed to compared CVSS scores with EPSS data via a simple command-line interface

Download the scanner and convert it to executable:

wget https://raw.githubusercontent.com/ndouglas-cloudsmith/exploit-check/refs/heads/main/exploit-check.sh
chmod +x epss_scanner.sh

If you need to update the scanner (EPSS records are refreshed daily), run the below command:

./epss_scanner.sh update

To query a specific CVE (for example, CVE-2021-44228), run the below command:

./epss_scanner.sh query CVE-2021-44228

For a full output of KEV findings, use the --full flag

./epss_scanner.sh query CVE-2021-44228 --full

List all KEV CVEs (short form):

./epss_scanner.sh list

List all KEV CVEs with details:

./epss_scanner.sh list --full

Comparing CVSS scores with EPSS percentiles and check for Known Exploits

CVE ID	CVSS Severity	CVSS Score	EPSS Percentile	KEV Listing
CVE-2024-0646	HIGH	7.0	0.02722	❌
CVE-2024-25062	HIGH	7.5	0.30165	❌
CVE-2021-44228	CRITICAL	10.0	0.99957	✅