CVE数据集搜索与查询神器

NVD (NIST) CVE 数据库CISA CVE 和已知利用漏洞 (KEV) 数据库来自 HackerOne 的 CVE Discovery 的有关其系统中最常报告的 CVE 的数据有关 EPSS 评分的数据以及到通用平台枚举 (CPE) 的映射有关 GitHub 上可能提供的公共 PoC 的数据以及用于对 CVE 进行指纹识别的任何 Nuclei 模板的状态

CVE数据集搜索和查询CVE到EPSS映射CVE到KEV映射CVE到CPE映射CVE到GitHub POC的映射CVE到Nucleic模板映射CVE到HackerOne报告映射CVE数据上的可定制过滤器STDIN输入/JSONL输出

go install github.com/projectdiscovery/cvemap/cmd/cvemap@latest

cvemap -hUsage:  cvemap [flags]Flags:CONFIG:   -auth  configure projectdiscovery cloud (pdcp) api keyOPTIONS:   -id string[]                    cve to list for given id   -v, -vendor string[]            cve to list for given vendor   -p, -product string[]           cve to list for given product   -eproduct string[]              cves to exclude based on products   -s, -severity string[]          cve to list for given severity   -cs, -cvss-score string[]       cve to list for given cvss score   -c, -cpe string                 cve to list for given cpe   -es, -epss-score string         cve to list for given epss score   -ep, -epss-percentile string[]  cve to list for given epss percentile   -age string                     cve to list published by given age in days   -a, -assignee string[]          cve to list for given publisher assignee   -vs, -vstatus value             cve to list for given vulnerability status in cli output. supported: unknown, new, confirmed, unconfirmed, modified, rejectedUPDATE:   -up, -update                 update cvemap to latest version   -duc, -disable-update-check  disable automatic cvemap update checkFILTER:   -q, -search string  search in cve data   -k, -kev            display cves marked as exploitable vulnerabilities by cisa (default true)   -t, -template       display cves that has public nuclei templates (default true)   -poc                display cves that has public published poc (default true)   -h1, -hackerone     display cves reported on hackerone (default true)OUTPUT:   -f, -field value         fields to display in cli output. supported: age, kev, template, poc, cwe, epss, assignee, product, vendor, vstatus   -fe, -exclude value      fields to exclude from cli output. supported: age, kev, template, poc, cwe, epss, assignee, product, vendor, vstatus   -lsi, -list-id           list only the cve ids in the output   -l, -limit int           limit the number of results to display (default 50)   -offset int              offset the results to display   -j, -json                return output in json format   -epk, -enable-page-keys  enable page keys to navigate resultsDEBUG:   -version  Version   -silent   Silent   -verbose  Verbose