CVE-Search Structure
12 |Mongo Database Structure
13 |
14 | This section describes the structure of the Mongo database. There are two types of collections, data and management.
15 | The data collections, which are listed below, are the collections that are filled by the sources CVE-Search uses.
16 | By default, these are the official sources.
17 |
18 | These are the data collections:
19 |
| Collection | Source | Description |
| cves | NVD NIST | All the official vulnerabilities, released by NIST. Items in this collection have all info related to each CVE |
| cpe | NVD NIST | All the official products, released by NIST. Some of these have a human readable title. |
| cpeother | CVE-Search | CVE-Search has a script to fill this database, using the original CPE's and generating titles for them. |
| cwe | NVD NIST | Information about Common Weaknesses, as published by NIST |
| d2sec | d2sec.com | Information about CVE's, as released by d2sec |
| vendor | NVD NIST | Vendor statements, released by NIST |
| info | CVE-Search | Information about the Mongo Database updates. |
32 | These are the management collections: 33 |
| Collection | Description |
| ranking | Self-set ranking for specific CPE's that are more important to specific groups |
| mgmt_blacklist | List of CPE's that have to be excluded from the web view. More about this here |
| mgmt_whitelist | List of CPE's that have to be marked in the web view. More about this here |
| mgmt_users | List of users who have access to the administrative panel. More about this here |
43 | By default, the Mongo database name is cvedb. This connection for the database is made on localhost, port 27017. 44 | 45 | 46 |
Redis Cache Database
47 |
48 | The Redis Caching server is used to speed up the searches in the web component. It is also used for the notifications script.
49 | By default, The database used for speeding up the searches is database number 10, and the vendor database is database 11.
50 | The vendor database (database 10) contains four collections. These are:
51 |
-
52 |
- prefix 53 |
- types 54 |
- vendors 55 |
- Products 56 |
59 |
60 | The notifications cache has a structure where it keeps track of: 61 |
-
62 |
- Organisations 63 |
- CPE's 64 |
- MailTo destination 65 |
67 | 68 | 69 | 70 | -------------------------------------------------------------------------------- /doc/html/css/style.css: -------------------------------------------------------------------------------- 1 | body{ 2 | margin-left: auto; 3 | margin-right: auto; 4 | width: 80%; 5 | background-color: #FDEAD7; 6 | } 7 | table{ 8 | border-collapse: collapse; 9 | } 10 | thead{ 11 | font-weight: bold; 12 | } 13 | table, th, td{ 14 | padding: 7px; 15 | border: solid 1px black; 16 | } 17 | span{ 18 | border-bottom: 1px solid; 19 | } 20 | .code{ 21 | border-bottom: none; 22 | color: #123212; 23 | font-family: Courier; 24 | font-weight: bold; 25 | } 26 | .highlight{ 27 | color: #B30000; 28 | } 29 | .example{ 30 | border-bottom: none; 31 | font-style: italic; 32 | } 33 | -------------------------------------------------------------------------------- /doc/markdown/api.md: -------------------------------------------------------------------------------- 1 | ## cve-search HTTP API 2 | 3 | The HTTP API outputs JSON. The API accessible if you run at least minimal-web.py. 4 | 5 | 6 | ### Browse vendor and product 7 | 8 | 9 | To get a JSON with all the vendors: 10 | 11 | ~~~ 12 | curl http://
36 | By default, The database used for speeding up the searches is database 37 | number 10, and the vendor database is database 11.
38 | The vendor database (database 10) contains four collections. These are: 39 | 40 | * prefix 41 | * types 42 | * vendors 43 | * Products 44 | 45 | These lists get filled by the *db_cpe_browser.py* script, and create 46 | "links" to each other. Feel free to take a look at *db_cpe_browser.py* 47 | to learn how it works.
48 | The notifications cache has a structure where it keeps track of: 49 | 50 | * Organisations 51 | * CPEs 52 | * MailTo destination 53 | 54 | Feel free to take a look at *db_notifications.py* to learn how it works. 55 | -------------------------------------------------------------------------------- /etc/auth.txt.sample: -------------------------------------------------------------------------------- 1 | # Module required/sufficient args 2 | #LDAP required domain=example server=server.example.internal sync=True 3 | -------------------------------------------------------------------------------- /etc/configuration.ini.sample: -------------------------------------------------------------------------------- 1 | [Redis] 2 | Host: localhost 3 | Port: 6379 4 | VendorsDB: 10 5 | NotificationsDB: 11 6 | RefDB: 12 7 | [Mongo] 8 | Host: localhost 9 | Port: 27017 10 | DB: cvedb 11 | [dbmgt] 12 | Tmpdir: ./tmp/ 13 | [FulltextIndex] 14 | Indexdir: ./indexdir/ 15 | [Webserver] 16 | Host: 127.0.0.1 17 | Port: 5000 18 | Debug: True 19 | PageLength: 50 20 | LoginRequired: False 21 | SSL: True 22 | Certificate: ssl/cve-search.crt 23 | Key: ssl/cve-search.key 24 | [Logging] 25 | Logging: True 26 | Logfile: log/cve-search.log 27 | MaxSize: 150MB 28 | Backlog: 5 29 | [CVE] 30 | DefaultCVSS: 5 31 | StartYear: 2002 32 | -------------------------------------------------------------------------------- /etc/plugins.txt.sample: -------------------------------------------------------------------------------- 1 | # Plugin Location load/default/pass 2 | # path/to/plugin setting 3 | -------------------------------------------------------------------------------- /etc/sources.ini.sample: -------------------------------------------------------------------------------- 1 | [Sources] 2 | CVE: https://static.nvd.nist.gov/feeds/xml/cve/ 3 | CPE: https://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.2.xml.zip 4 | CWE: http://cwe.mitre.org/data/xml/cwec_v2.8.xml.zip 5 | Vendor: https://nvd.nist.gov/download/vendorstatements.xml.gz 6 | CAPEC: http://capec.mitre.org/data/xml/capec_v2.6.xml 7 | VIA4: http://www.cve-search.org/feeds/via4.json 8 | -------------------------------------------------------------------------------- /lib/Authentication.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Plugin manager 5 | # 6 | # Software is free software released under the "Modified BSD license" 7 | # 8 | # Copyright (c) 2016 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 9 | 10 | # Imports 11 | import datetime 12 | import importlib 13 | import os 14 | import sys 15 | import uuid 16 | 17 | runPath = os.path.dirname(os.path.realpath(__file__)) 18 | sys.path.append(os.path.join(runPath, "..")) 19 | 20 | import lib.DatabaseLayer as db 21 | from lib.Config import Configuration as conf 22 | from lib.Singleton import Singleton 23 | 24 | # Constants 25 | UNREACHABLE = -1 26 | WRONG_CREDS = 0 27 | AUTHENTICATED = 1 28 | 29 | class AuthenticationMethod: 30 | # Force users to override this 31 | def validateUser(self, user, pwd): 32 | return WRONG_CREDS 33 | 34 | class AuthenticationHandler(metaclass=Singleton): 35 | def __init__(self, **kwargs): 36 | self.methods = [] 37 | self._load_methods() 38 | self.api_sessions = {} 39 | 40 | def _load_methods(self): 41 | self.methods = [] 42 | if not os.path.exists(conf.getAuthLoadSettings()): 43 | print("[!] Could not find auth loader file!") 44 | return 45 | # Read and parse plugin file 46 | data = open(conf.getAuthLoadSettings(), "r").read() 47 | data = [x.split(maxsplit=2) for x in data.splitlines() if not x.startswith("#") and x] 48 | for x in [x for x in data if len(x) in [2, 3]]: 49 | try: 50 | x.extend(['']*(3-len(x))) # add empty args if none exist 51 | method, authType, args = x 52 | if authType.lower() not in ["required", "sufficient"]: # Skip if authType not known 53 | continue 54 | # Create object 55 | args = {y.split("=")[0]: y.split("=")[1] for y in args.split()} 56 | i = importlib.import_module("lib.authenticationMethods.%s"%method) 57 | authMethod = getattr(i, method.split("/")[-1])(**args) 58 | # Add object to list 59 | self.methods.append((method, authType.lower(), authMethod)) 60 | print("[+] Loaded Auth Method %s"%x[0]) 61 | except Exception as e: 62 | print("[!] Failed to load Auth Method %s: "%x[0]) 63 | print("[!] -> %s"%e) 64 | 65 | def isCVESearchUser(self, user): 66 | return db.userExists(user) 67 | 68 | def validateUser(self, user, password): 69 | user_obj = db.getUser(user) 70 | if not user_obj: return False 71 | # 'local_only' users bypass other auth methods. If the user is not, 72 | # we try the other auth methods first 73 | if (not "local_only" in user_obj.keys() 74 | or user_obj["local_only"] is False): 75 | for name, authType, method in self.methods: 76 | try: 77 | result = method.validateUser(user, password) 78 | if result is UNREACHABLE: continue # Skip to next 79 | if result is AUTHENTICATED: return True # Successful 80 | if (authType == "required" and result is WRONG_CREDS): return False 81 | if (authType == "sufficient" and result is WRONG_CREDS): continue 82 | except Exception as e: 83 | print("[!] Exception trying to authenticate user: %s: "%name) 84 | print("[!] -> %s"%e) 85 | # If we reach here, all methods (if any) failed to authenticate the user 86 | # so we check the user against the local database. 87 | return db.verifyUser(user, password) 88 | 89 | def new_api_session(self, user): 90 | self.api_sessions[user] = (uuid.uuid4().hex, datetime.datetime.now()) 91 | return self.api_sessions[user][0] 92 | 93 | def get_api_session(self, user, extend=True): 94 | return self.api_sessions.get(user) 95 | -------------------------------------------------------------------------------- /lib/CVEs.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Minimal class to get the last entries from the CVE database. 5 | # 6 | # Ranking and CPE lookup are optional. 7 | # 8 | # Software is free software released under the "Modified BSD license" 9 | # 10 | # Copyright (c) 2012-2015 Alexandre Dulaunoy - a@foo.be 11 | # Copyright (c) 2015-2016 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 12 | 13 | # Imports 14 | import os 15 | import sys 16 | runPath = os.path.dirname(os.path.realpath(__file__)) 17 | sys.path.append(os.path.join(runPath, "..")) 18 | 19 | import itertools 20 | import math 21 | 22 | from lib.Config import Configuration 23 | from lib.Toolkit import exploitabilityScore,impactScore 24 | import lib.DatabaseLayer as db 25 | 26 | class last(): 27 | def __init__(self, collection="cves", rankinglookup=False, 28 | namelookup=False, capeclookup=False, via4lookup=False, 29 | subscorelookup=False): 30 | 31 | self.collectionname = collection 32 | self.rankinglookup = rankinglookup 33 | self.namelookup = namelookup 34 | self.capeclookup = capeclookup 35 | self.subscorelookup = subscorelookup 36 | self.via4lookup = via4lookup 37 | 38 | self.collection = collection 39 | 40 | def getcapec(self, cweid=None): 41 | if cweid is None or not self.capeclookup: 42 | return False 43 | e = db.getCAPECFor(cweid) 44 | capec = [] 45 | for f in e: 46 | capec.append(f) 47 | return capec 48 | 49 | def getcpe(self, cpeid=None): 50 | if not(self.namelookup): 51 | return cpeid 52 | e = db.getCPE(cpeid) 53 | if e is None: 54 | e = db.getAlternativeCPE(cpeid) 55 | if e is None: 56 | return cpeid 57 | if 'id' in e: 58 | return e['title'] 59 | 60 | def getVIA4(self, cveid=None): 61 | if not(self.via4lookup): 62 | return cveid 63 | e = db.getVIA4(cveid) 64 | return e if e else cveid 65 | 66 | def getcve(self, cveid=None): 67 | if cveid is not None: 68 | e = db.getCVE(cveid, collection=self.collection) 69 | if e is None: 70 | return None 71 | if "cwe" in e and self.capeclookup: 72 | if e['cwe'].lower() != 'unknown': 73 | e['capec'] = self.getcapec(cweid=(e['cwe'].split('-')[1])) 74 | if "vulnerable_configuration" in e: 75 | vulconf = [] 76 | ranking = [] 77 | for conf in e['vulnerable_configuration']: 78 | vulconf.append({'id': conf, 'title': self.getcpe(cpeid=conf)}) 79 | if self.rankinglookup: 80 | rank = self.getranking(cpeid=conf) 81 | if rank and rank not in ranking: 82 | ranking.append(rank) 83 | e['vulnerable_configuration'] = vulconf 84 | if self.rankinglookup and len(ranking) > 0: 85 | e['ranking'] = ranking 86 | if self.via4lookup: 87 | f = self.getVIA4(cveid) 88 | if isinstance(f, dict): 89 | e = dict(itertools.chain(e.items(), f.items())) 90 | if self.subscorelookup: 91 | exploitCVSS=exploitabilityScore(e) 92 | impactCVSS =impactScore(e) 93 | e['exploitCVSS']=(math.ceil(exploitCVSS*10)/10) if type(exploitCVSS) is not str else exploitCVSS 94 | e['impactCVSS']=(math.ceil(impactCVSS*10)/10) if type(impactCVSS) is not str else impactCVSS 95 | else: 96 | e = None 97 | 98 | return e 99 | 100 | def getranking(self, cpeid=None, loosy=True): 101 | 102 | if cpeid is None: 103 | return False 104 | 105 | result = False 106 | 107 | if loosy: 108 | for x in cpeid.split(':'): 109 | if x is not '': 110 | i = db.findRanking(x, regex=True) 111 | if i is None: 112 | continue 113 | if 'rank' in i: 114 | result = i['rank'] 115 | else: 116 | i = db.findRanking(cpeid, regex=True) 117 | if i is None: 118 | return result 119 | if 'rank' in i: 120 | result = i['rank'] 121 | 122 | return result 123 | 124 | def get(self, limit=5, skip=0): 125 | entries = [] 126 | for item in db.getCVEs(limit=limit, skip=skip, collection=self.collection): 127 | if not(self.namelookup) and not(self.rankinglookup): 128 | entries.append(item) 129 | elif self.namelookup or self.rankinglookup: 130 | if "vulnerable_configuration" in item: 131 | vulconf = [] 132 | ranking = [] 133 | for conf in item['vulnerable_configuration']: 134 | vulconf.append(self.getcpe(cpeid=conf)) 135 | if self.rankinglookup: 136 | rank = self.getranking(cpeid=conf) 137 | if rank and rank not in ranking: 138 | ranking.append(rank) 139 | item['vulnerable_configuration'] = vulconf 140 | if self.rankinglookup: 141 | item['ranking'] = ranking 142 | if "ranking" in item: 143 | if len(item['ranking']) == 0: 144 | del(item['ranking']) 145 | if "cwe" in item and self.capeclookup: 146 | if item['cwe'].lower() != 'unknown': 147 | item['capec'] = self.getcapec(cweid=(item['cwe'].split('-')[1])) 148 | entries.append(item) 149 | 150 | return (entries) 151 | 152 | def __exit__(self, type, value, traceback): 153 | self.dbname.disconnect() 154 | -------------------------------------------------------------------------------- /lib/Plugins.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Plugin Classes 5 | # Classes for all plug-ins to be based on 6 | # 7 | # Software is free software released under the "Modified BSD license" 8 | # 9 | # Copyright (c) 2016 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 10 | 11 | class Plugin(): 12 | def __init__(self): 13 | self.name = None 14 | self.uid = None 15 | self.requiresAuth = False 16 | self.loadstate = "default" 17 | 18 | # Get 19 | def getName(self): return self.name 20 | def getUID(self): return self.uid 21 | def getLoadState(self): return self.loadstate 22 | # Set 23 | def setUID(self, uid): self.uid = uid 24 | def setLoadState(self, state): self.loadstate = state 25 | # Don't override 26 | def isWebPlugin(self): return False 27 | # To override without returns 28 | def loadSettings(self, reader): pass 29 | def onDatabaseUpdate(self): pass 30 | # To override with returns 31 | def search(self, text, **args): pass 32 | 33 | 34 | class WebPlugin(Plugin): 35 | # Don't override 36 | def isWebPlugin(self): return True 37 | # To override with returns 38 | def getPage(self, **args): return (None, None) 39 | def getSubpage(self, page, **args): return (None, None) 40 | def getCVEActions(self, cve, **args): return [] 41 | def getFilters(self, **args): return [] 42 | def doFilter(self, filters, **args): return [] 43 | def cvePluginInfo(self, cve, **args): pass 44 | def mark(self, cve, **args): return (None, None) 45 | # To override without returns 46 | def onCVEAction(self, cve, action, **args): pass 47 | def onCVEOpen(self, cve, **args): pass 48 | -------------------------------------------------------------------------------- /lib/ProgressBar.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Progress bar by Michael Grünewald 5 | # 6 | # Software is free software released under the "Modified BSD license" 7 | # 8 | # Copyright (c) 2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 9 | 10 | import sys 11 | 12 | 13 | def progressbar(it, prefix="Preparing ", size=50): 14 | count = len(it) 15 | 16 | def _show(_i): 17 | if count != 0 and sys.stdout.isatty(): 18 | x = int(size * _i / count) 19 | sys.stdout.write("%s[%s%s] %i/%i\r" % (prefix, "#" * x, " " * (size - x), _i, count)) 20 | sys.stdout.flush() 21 | 22 | _show(0) 23 | for i, item in enumerate(it): 24 | yield item 25 | _show(i + 1) 26 | sys.stdout.write("\n") 27 | sys.stdout.flush() 28 | -------------------------------------------------------------------------------- /lib/Query.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Query tools 5 | # 6 | # Software is free software released under the "Modified BSD license" 7 | # 8 | # Copyright (c) 2014-2015 Alexandre Dulaunoy - a@foo.be 9 | # Copyright (c) 2014-2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 10 | 11 | import urllib.parse 12 | import requests 13 | 14 | import os 15 | import sys 16 | runPath = os.path.dirname(os.path.realpath(__file__)) 17 | sys.path.append(os.path.join(runPath, "..")) 18 | 19 | import lib.CVEs as cves 20 | import lib.DatabaseLayer as db 21 | import lib.Toolkit as tk 22 | 23 | from lib.Config import Configuration 24 | 25 | rankinglookup = True 26 | redisdb = Configuration.getRedisVendorConnection() 27 | 28 | def findranking(cpe=None, loosy=True): 29 | if cpe is None: 30 | return False 31 | result = False 32 | if loosy: 33 | for x in cpe.split(':'): 34 | if x is not '': 35 | i = db.findRanking(cpe, regex=True) 36 | if i is None: 37 | continue 38 | if 'rank' in i: 39 | result = i['rank'] 40 | else: 41 | i = db.findRanking(cpe, regex=True) 42 | print (cpe) 43 | if i is None: 44 | return result 45 | if 'rank' in i: 46 | result = i['rank'] 47 | return result 48 | 49 | def lookupcpe(cpeid=None): 50 | e = db.getCPE(cpeid) 51 | if e is None: 52 | return cpeid 53 | if 'id' in e: 54 | return e['title'] 55 | 56 | 57 | def lastentries(limit=5, namelookup=False, rankinglookup=True): 58 | entries = [] 59 | for item in db.getCVEs(limit): 60 | if not namelookup and rankinglookup is not True: 61 | entries.append(item) 62 | else: 63 | if "vulnerable_configuration" in item: 64 | vulconf = [] 65 | ranking = [] 66 | for conf in item['vulnerable_configuration']: 67 | if namelookup: 68 | vulconf.append(lookupcpe(cpeid=conf)) 69 | else: 70 | vulconf.append(conf) 71 | if rankinglookup: 72 | rank = findranking(cpe=conf) 73 | if rank and rank not in ranking: 74 | ranking.append(rank) 75 | item['vulnerable_configuration'] = vulconf 76 | if rankinglookup and len(ranking) > 0: 77 | item['ranking'] = ranking 78 | entries.append(item) 79 | return entries 80 | 81 | def apigetcve(api, cveid=None): 82 | if cveid is None: 83 | return False 84 | url = urllib.parse.urljoin(api, "api/cve/"+cveid) 85 | urltoget = urllib.parse.urljoin(url, cveid) 86 | r = requests.get(urltoget) 87 | if r.status_code is 200: 88 | return r.text 89 | else: 90 | return False 91 | 92 | def apibrowse(api, vendor=None): 93 | url = urllib.parse.urljoin(api, "api/browse") 94 | if vendor is None: 95 | r = requests.get(url) 96 | else: 97 | urlvendor = url + "/" + vendor 98 | r = requests.get(urlvendor) 99 | 100 | if r.status_code is 200: 101 | return r.text 102 | else: 103 | return False 104 | 105 | def apisearch(api, query=None): 106 | if query is None: 107 | return False 108 | url = urllib.parse.urljoin(api, "api/search/") 109 | url = url+query 110 | 111 | r = requests.get(url) 112 | if r.status_code is 200: 113 | return r.text 114 | else: 115 | return False 116 | 117 | 118 | 119 | # Lastly added 120 | def cvesForCPE(cpe): 121 | cpe = tk.toStringFormattedCPE(cpe) 122 | data = [] 123 | if cpe: 124 | cvesp = cves.last(rankinglookup=False, namelookup=False, via4lookup=True, capeclookup=False) 125 | for x in db.cvesForCPE(cpe): 126 | data.append(cvesp.getcve(x['id'])) 127 | return data 128 | 129 | def getBrowseList(vendor): 130 | result = {} 131 | if (vendor is None) or type(vendor) == list: 132 | v1 = redisdb.smembers("t:/o") 133 | v2 = redisdb.smembers("t:/a") 134 | v3 = redisdb.smembers("t:/h") 135 | vendor = sorted(list(set(list(v1) + list(v2) + list(v3)))) 136 | cpe = None 137 | else: 138 | cpenum = redisdb.scard("v:" + vendor) 139 | if cpenum < 1: 140 | return None 141 | p = redisdb.smembers("v:" + vendor) 142 | cpe = sorted(list(p)) 143 | result["vendor"] = vendor 144 | result["product"] = cpe 145 | return result 146 | 147 | def getVersionsOfProduct(product): 148 | p = redisdb.smembers("p:" + product) 149 | return sorted(list(p)) 150 | -------------------------------------------------------------------------------- /lib/Singleton.py: -------------------------------------------------------------------------------- 1 | class Singleton(type): 2 | _instances = {} 3 | def __call__(cls, *args, **kwargs): 4 | if cls not in cls._instances: 5 | cls._instances[cls] = super(Singleton, cls).__call__(*args, **kwargs) 6 | return cls._instances[cls] 7 | -------------------------------------------------------------------------------- /lib/Toolkit.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Toolkit for functions between scripts 5 | # 6 | # Software is free software released under the "Modified BSD license" 7 | # 8 | # Copyright (c) 2014-2016 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 9 | 10 | # Imports 11 | from dateutil import tz 12 | import dateutil.parser 13 | import re 14 | 15 | # Note of warning: CPEs like cpe:/o:microsoft:windows_8:-:-:x64 are given to us by Mitre 16 | # x64 will be parsed as Edition in this case, not Architecture 17 | def toStringFormattedCPE(cpe,autofill=False): 18 | cpe=cpe.strip() 19 | if not cpe.startswith('cpe:2.3:'): 20 | if not cpe.startswith('cpe:/'): return False 21 | cpe=cpe.replace('cpe:/','cpe:2.3:') 22 | cpe=cpe.replace('::',':-:') 23 | cpe=cpe.replace('~-','~') 24 | cpe=cpe.replace('~',':-:') 25 | cpe=cpe.replace('::',':') 26 | cpe=cpe.strip(':-') 27 | if autofill: 28 | e=cpe.split(':') 29 | for x in range(0,13-len(e)): 30 | cpe+=':-' 31 | return cpe 32 | 33 | # Note of warning: Old CPE's can come in different formats, and are not uniform. Possibilities are: 34 | # cpe:/a:7-zip:7-zip:4.65::~~~~x64~ 35 | # cpe:/a:7-zip:7-zip:4.65:-:~~~~x64~ 36 | # cpe:/a:7-zip:7-zip:4.65:-:~-~-~-~x64~ 37 | def toOldCPE(cpe): 38 | cpe=cpe.strip() 39 | if not cpe.startswith('cpe:/'): 40 | if not cpe.startswith('cpe:2.3:'): return False 41 | cpe=cpe.replace('cpe:2.3:','') 42 | parts = cpe.split(':') 43 | next = [] 44 | first= "cpe:/"+":".join(parts[:5]) 45 | last = parts[5:] 46 | if last: 47 | for x in last: 48 | next.append('~') if x == "-" else next.append(x) 49 | if "~" in next: 50 | pad(next,6,"~") 51 | cpe="%s:%s"%(first,"".join(next)) 52 | cpe=cpe.replace(':-:','::') 53 | cpe=cpe.strip(":") 54 | return cpe 55 | 56 | def impactScore(cve): 57 | score={'NONE':0,'PARTIAL':0.275,'COMPLETE':0.660} 58 | try: 59 | C=((cve['impact'])['confidentiality']).upper() 60 | I=((cve['impact'])['integrity']).upper() 61 | A=((cve['impact'])['availability']).upper() 62 | res = 10.41*(1-(1-score[C])*(1-score[I])*(1-score[A])) 63 | return 10.0 if res > 10.0 else res 64 | except: 65 | return '-' 66 | 67 | def exploitabilityScore(cve): 68 | cScore={'LOW':0.71,'MEDIUM':0.61,'HIGH':0.35} 69 | vScore={'NETWORK':1.0,'ADJACENT_NETWORK':0.646,'LOCAL':0.395} 70 | aScore={'NONE':0.704,'SINGLE_INSTANCE':0.56,'MULTIPLE_INSTANCES':0.45} 71 | try: 72 | C=((cve['access'])['complexity']).upper() 73 | V=((cve['access'])['vector']).upper() 74 | A=((cve['access'])['authentication']).upper() 75 | return 20* cScore[C]*vScore[V]*aScore[A] 76 | except: 77 | return '-' 78 | 79 | def pad(seq, target_length, padding=None): 80 | length = len(seq) 81 | if length > target_length: 82 | return seq 83 | seq.extend([padding] * (target_length - length)) 84 | return seq 85 | 86 | def currentTime(utc): 87 | timezone = tz.tzlocal() 88 | utc = dateutil.parser.parse(utc) 89 | output = utc.astimezone(timezone) 90 | output = output.strftime('%d-%m-%Y - %H:%M') 91 | return output 92 | 93 | def isURL(string): 94 | urlTypes= [re.escape(x) for x in ['http://','https://', 'www.']] 95 | return re.match("^(" + "|".join(urlTypes) + ")", string) 96 | 97 | def vFeedName(string): 98 | string=string.replace('map_','') 99 | string=string.replace('cve_','') 100 | return string.title() 101 | 102 | def mergeSearchResults(database, plugins): 103 | if 'errors' in database: 104 | results = {'data':[], 'errors':database['errors']} 105 | else: 106 | results = {'data': []} 107 | 108 | data = [] 109 | data.extend(database['data']) 110 | data.extend(plugins['data']) 111 | for cve in data: 112 | if not any(cve['id']==entry['id'] for entry in results['data']): 113 | results['data'].append(cve) 114 | return results 115 | 116 | def compile(regexes): 117 | if type(regexes) not in [list, tuple]: regexes = [regexes] 118 | r=[] 119 | for rule in regexes: 120 | r.append(re.compile(rule)) 121 | return r 122 | -------------------------------------------------------------------------------- /lib/User.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Admin creator script 5 | # 6 | # Creates an admin account in the database 7 | # Only master accounts are allowed to add and remove users 8 | # First account registered is the master account 9 | # 10 | # Software is free software released under the "Modified BSD license" 11 | # 12 | # Copyright (c) 2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 13 | 14 | # Imports 15 | import os 16 | runPath = os.path.dirname(os.path.realpath(__file__)) 17 | 18 | from flask_login import UserMixin 19 | 20 | from lib.Config import Configuration 21 | import lib.DatabaseLayer as db 22 | 23 | # Exception 24 | class UserNotFoundError(Exception): 25 | pass 26 | 27 | # Class 28 | class User(UserMixin): 29 | def __init__(self, id, auth_instance): 30 | '''Simple User class''' 31 | if not Configuration.loginRequired(): 32 | # dummy account for when logon is not required. 33 | self.id = "_dummy_" 34 | else: 35 | if not auth_instance.isCVESearchUser(id): 36 | raise UserNotFoundError() 37 | self.id = id 38 | self.authenticator = auth_instance 39 | 40 | def authenticate(self, password): 41 | return self.authenticator.validateUser(self.id, password) 42 | 43 | @classmethod 44 | def get(self_class, id , auth_instance): 45 | '''Return user instance of id, return None if not exist''' 46 | try: 47 | return self_class(id, auth_instance) 48 | except UserNotFoundError: 49 | return None 50 | -------------------------------------------------------------------------------- /lib/__init__.py: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /lib/authenticationMethods/readme.md: -------------------------------------------------------------------------------- 1 | # Authentication Modules 2 | Put your authentication modules in here. More information can be found 3 | [here](https://github.com/cve-search/Plugins/tree/master/auth) 4 | -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | click 2 | flask 3 | flask-login<=0.2.11 4 | flask-pymongo 5 | irc 6 | itsdangerous 7 | lxml 8 | passlib 9 | python-dateutil 10 | pytz 11 | redis 12 | requests 13 | six>=1.9.0 14 | sleekxmpp 15 | tornado 16 | whoosh 17 | xlrd 18 | 19 | Jinja2 20 | PyMongo>=2.7 21 | Werkzeug 22 | 23 | https://github.com/marianoguerra/feedformatter/archive/master.zip 24 | -------------------------------------------------------------------------------- /sbin/db_blacklist.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Blacklist feature to mark CVE's for CPE's of personal interest 5 | # 6 | # Software is free software released under the "Modified BSD license" 7 | # 8 | # Copyright (c) 2014-2016 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 9 | 10 | # Imports 11 | # make sure these modules are available on your system 12 | import os 13 | import sys 14 | runPath = os.path.dirname(os.path.realpath(__file__)) 15 | sys.path.append(os.path.join(runPath, "..")) 16 | 17 | import argparse 18 | 19 | from lib.cpelist import CPEList 20 | 21 | # parse command line arguments 22 | argparser = argparse.ArgumentParser(description='populate/update the blacklist used in webviews') 23 | argparser.add_argument('-a', metavar="CPE", nargs="*", help='Add one or more CPE to the blacklist') 24 | argparser.add_argument('-A', action='append', metavar="file", help='Read a file of CPEs and add them to the blacklist') 25 | argparser.add_argument('-r', metavar="CPE", nargs="*", help='Remove one or more CPE from the blacklist') 26 | argparser.add_argument('-R', action='append', metavar="file", help='Read a file of CPEs and remove them from the blacklist') 27 | argparser.add_argument('-t', metavar="type", default="cpe", help='Type of item to blacklist. Default: CPE') 28 | argparser.add_argument('-i', metavar="file", help='Import blacklist from file') 29 | argparser.add_argument('-e', metavar="file", help='Export blacklist to file') 30 | argparser.add_argument('-d', action='store_true', help='Drop the blacklist') 31 | argparser.add_argument('-f', action='store_true', help='Force') 32 | argparser.add_argument('-v', action='store_true', help='Verbose') 33 | args = argparser.parse_args() 34 | 35 | # Variables 36 | collection = "blacklist" 37 | 38 | # Functions 39 | def importBlacklist(importFile): 40 | oList = CPEList(collection, args) 41 | return oList.importList(importFile) 42 | 43 | 44 | def exportBlacklist(exportFile=None): 45 | oList = CPEList(collection, args) 46 | return oList.exportList(exportFile) 47 | 48 | 49 | def dropBlacklist(): 50 | oList = CPEList(collection, args) 51 | oList.dropCollection() 52 | 53 | 54 | def countBlacklist(): 55 | oList = CPEList(collection, args) 56 | return oList.countItems() 57 | 58 | 59 | def checkBlacklist(cpe): 60 | oList = CPEList(collection, args) 61 | amount = oList.check(cpe) 62 | return amount 63 | 64 | 65 | def insertBlacklist(cpe, cpeType): 66 | oList = CPEList(collection, args) 67 | return oList.insert(cpe,cpeType) 68 | 69 | 70 | def removeBlacklist(cpe): 71 | oList = CPEList(collection, args) 72 | return oList.remove(cpe) 73 | 74 | 75 | def updateBlacklist(cpeOld, cpeNew, cpeType): 76 | oList = CPEList(collection, args) 77 | return oList.update(cpeOld, cpeNew, cpeType) 78 | 79 | if __name__ == '__main__': 80 | oList = CPEList(collection, args) 81 | oList.process() 82 | -------------------------------------------------------------------------------- /sbin/db_cpe_browser.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Importing CPE entries in a Redis database to improve lookup 5 | # 6 | # Until now, this part is only used by the web interface to improve response time 7 | # 8 | # Software is free software released under the "Modified BSD license" 9 | # 10 | # Copyright (c) 2014-2015 Alexandre Dulaunoy - a@foo.be 11 | # Copyright (c) 2014-2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 12 | 13 | # Imports 14 | import os 15 | import sys 16 | import argparse 17 | runPath = os.path.dirname(os.path.realpath(__file__)) 18 | sys.path.append(os.path.join(runPath, "..")) 19 | 20 | from redis import exceptions as redisExceptions 21 | 22 | from lib.Config import Configuration 23 | from lib.Toolkit import pad 24 | import lib.DatabaseLayer as db 25 | 26 | argParser = argparse.ArgumentParser(description='CPE entries importer in Redis cache') 27 | argParser.add_argument('-v', action='store_true', default=False, help='Verbose logging') 28 | argParser.add_argument('-o', action='store_true', default=False, help='Import cpeother database in Redis cache') 29 | args = argParser.parse_args() 30 | 31 | if args.o: 32 | cpe = db.getAlternativeCPEs() 33 | else: 34 | cpe = db.getCPEs() 35 | 36 | try: 37 | r = Configuration.getRedisVendorConnection() 38 | except: 39 | sys.exit(1) 40 | 41 | for e in cpe: 42 | try: 43 | if args.o is not True: 44 | prefix = 'cpe_2_2' 45 | value = e[prefix] 46 | else: 47 | value = e['id'] 48 | if args.o is not True: 49 | if e[prefix].count(':') > 4: 50 | value = ":".join(value.split(':')[:5]) 51 | (prefix, cpetype, vendor, product, version) = pad(value.split(':'),5) 52 | else: 53 | (prefix, cpeversion, cpetype, vendor, product, version, *remaining) = pad(value.split(':'),6) 54 | except Exception as ex: 55 | print(ex) 56 | pass 57 | try: 58 | if args.v: 59 | print(value + " added") 60 | r.sadd("prefix:" + prefix, cpetype) 61 | r.sadd("t:" + cpetype, vendor) 62 | r.sadd("v:" + vendor, product) 63 | if version: 64 | r.sadd("p:" + product, version) 65 | except redisExceptions.ConnectionError: 66 | sys.exit("Redis server not running on %s:%s"%(Configuration.getRedisHost(),Configuration.getRedisPort())) 67 | -------------------------------------------------------------------------------- /sbin/db_fulltext.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Fulltext indexer for the MongoDB CVE collection. 5 | # 6 | # The fulltext indexer is relying on Whoosh. 7 | # 8 | # The indexing is done by enumerating all items from 9 | # the MongoDB CVE collection and indexing the summary text of each 10 | # CVE. The Path of each document is the CVE-ID. 11 | # 12 | # Software is free software released under the "Modified BSD license" 13 | # 14 | # Copyright (c) 2012-2015 Alexandre Dulaunoy - a@foo.be 15 | # Copyright (c) 2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 16 | 17 | # Imports 18 | import os 19 | import sys 20 | runPath = os.path.dirname(os.path.realpath(__file__)) 21 | sys.path.append(os.path.join(runPath, "..")) 22 | 23 | import argparse 24 | 25 | from lib.Config import Configuration 26 | from lib.ProgressBar import progressbar 27 | import lib.CVEs as cves 28 | import lib.DatabaseLayer as db 29 | 30 | argParser = argparse.ArgumentParser(description='Fulltext indexer for the MongoDB CVE collection') 31 | argParser.add_argument('-v', action='store_true', default=False, help='Verbose logging') 32 | argParser.add_argument('-l', default=5, help='Number of last entries to index (Default: 5) - 0 to index all documents') 33 | argParser.add_argument('-n', action='store_true', default=False, help='lookup complete cpe (Common Platform Enumeration) name for vulnerable configuration to add in the index') 34 | args = argParser.parse_args() 35 | 36 | c = cves.last(namelookup=args.n) 37 | 38 | indexpath = Configuration.getIndexdir() 39 | 40 | from whoosh.index import create_in, exists_in, open_dir 41 | from whoosh.fields import Schema, TEXT, ID 42 | 43 | schema = Schema(title=TEXT(stored=True), path=ID(stored=True, unique=True), content=TEXT) 44 | 45 | if not os.path.exists(indexpath): 46 | os.mkdir(indexpath) 47 | 48 | if not exists_in(indexpath): 49 | ix = create_in(indexpath, schema) 50 | else: 51 | ix = open_dir(indexpath) 52 | def dumpallcveid(entry=None): 53 | return db.getCVEID if not entry else db.getCVEIDs(int(entry)) 54 | 55 | 56 | def getcve(cveid=None): 57 | if cveid is None: 58 | return False 59 | return db.getCVE(cveid) 60 | 61 | for cveid in progressbar(dumpallcveid(entry=args.l),prefix="Processing"): 62 | try: 63 | writer = ix.writer() 64 | except: 65 | print ("Index is locked. Another db_fulltext process running?") 66 | sys.exit(1) 67 | item = getcve(cveid=cveid) 68 | title = item['summary'][0:70] 69 | if args.n: 70 | for v in item['vulnerable_configuration']: 71 | cpe = c.getcpe(cpeid=v).strip('\n') 72 | item['summary'] += " " + cpe 73 | if args.v: 74 | print ('Indexing CVE-ID ' + str(cveid) + ' ' + title) 75 | writer.update_document(title=title, path=cveid, content=item['summary']) 76 | writer.commit() 77 | -------------------------------------------------------------------------------- /sbin/db_mgmt_admin.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | # -*- coding: utf-8 -*- 3 | # 4 | # Admin creator script 5 | # 6 | # Creates an admin account in the database 7 | # Only master accounts are allowed to add and remove users 8 | # First account registered is the master account 9 | # 10 | # Software is free software released under the "Modified BSD license" 11 | # 12 | # Copyright (c) 2015 Pieter-Jan Moreels - pieterjan.moreels@gmail.com 13 | 14 | # Imports 15 | import os 16 | import sys 17 | runPath = os.path.dirname(os.path.realpath(__file__)) 18 | sys.path.append(os.path.join(runPath, "..")) 19 | 20 | import pymongo 21 | 22 | import argparse 23 | import getpass 24 | 25 | import lib.DatabaseLayer as dbLayer 26 | 27 | # args 28 | argParser = argparse.ArgumentParser(description='Admin account creator for the mongo database') 29 | argParser.add_argument('-a', help='
') 25 | for(var i=0; i < actions.length; i++){ 26 | if(('icon' in actions[i]) || ('text' in actions[i])){ 27 | add="
" 31 | $("#cve_actions").append(add); 32 | if('action' in actions[i]){ 33 | $("#action-"+i).attr('id', "action-"+actions[i]['plugin']+"-"+actions[i]['action']) 34 | $("#action-"+actions[i]['plugin']+"-"+actions[i]['action']).click(function(e){ 35 | plugin = this.id.split("-")[1] 36 | act = this.id.split("-")[2] 37 | $.getJSON('/plugin/'+plugin+'/_cve_action/'+act,{cve: $("#_cveID").val()},function(data){ 38 | parseStatus(data) 39 | loadPluginActions() 40 | }) 41 | }) 42 | } 43 | } 44 | } 45 | }) 46 | } 47 | 48 | $(document).ready(function() { 49 | loadPluginActions(); 50 | 51 | var client = new ZeroClipboard($("#copy-button"), { 52 | moviePath: "/static/js/ZeroClipboard.swf" 53 | }); 54 | client.setText(copyToClipboard()); 55 | }); 56 | -------------------------------------------------------------------------------- /web/static/js/custom/filter.js: -------------------------------------------------------------------------------- 1 | function timeSelectDisable(){ 2 | var selected = document.getElementById("timeSelect").value; 3 | switch(selected){ 4 | case "all": 5 | document.getElementById('startDate').readOnly = true; 6 | document.getElementById('endDate').readOnly = true; 7 | document.getElementById('timeTypeSelect').readOnly = true; 8 | break; 9 | case "from": 10 | document.getElementById('startDate').readOnly = false; 11 | document.getElementById('endDate').readOnly = true; 12 | document.getElementById('timeTypeSelect').readOnly = false; 13 | break; 14 | case "until": 15 | document.getElementById('startDate').readOnly = true; 16 | document.getElementById('endDate').readOnly = false; 17 | document.getElementById('timeTypeSelect').readOnly = false; 18 | break; 19 | case "between": 20 | case "outside": 21 | document.getElementById('startDate').readOnly = false; 22 | document.getElementById('endDate').readOnly = false; 23 | document.getElementById('timeTypeSelect').readOnly = false; 24 | } 25 | } 26 | function cvssSelectDisable(){ 27 | var selected = document.getElementById("cvssSelect").value; 28 | switch(selected){ 29 | case "all": 30 | document.getElementById('cvss').readOnly = true; 31 | break; 32 | default: 33 | document.getElementById('cvss').readOnly = false; 34 | } 35 | } 36 | -------------------------------------------------------------------------------- /web/static/js/custom/list.js: -------------------------------------------------------------------------------- 1 | function clear(table){ 2 | $("#"+table+"id").val(""); 3 | $("#"+table+"comments").val(""); 4 | $("#"+table+"add").val("Add"); 5 | if(table != "cpe"){$("#"+table+"select").val("targetsoftware");} 6 | $('#cancel'+table).remove(); 7 | editedcpe=""; 8 | editedkeyword=""; 9 | } 10 | var editedcpe; 11 | var editedkeyword; 12 | $(document).ready(function() { 13 | init(); 14 | }); 15 | function init(){ 16 | $('#cpes tbody tr').add('#keywords tbody tr').on( 'click', '#edit', function () { 17 | var table = $(this).closest('table').attr('id').slice(0, -1); 18 | $("#cancel"+table).remove(); 19 | window["edited"+table] = $(this).closest('tr').find("td").eq(2).text(); 20 | if(table == "cpe"){ var td=3; }else{ var td=4; } 21 | var comments = $(this).closest('tr').find("td").eq(td).text().split("\n"); 22 | var commentString=""; 23 | for(comment in comments){ 24 | if(comments[comment].trim().length!=0){commentString = commentString + comments[comment].trim() + "\n"}; 25 | } 26 | commentString = commentString.trim(); 27 | $("#"+table+"id").val(window["edited"+table]); 28 | $("#"+table+"comments").val(commentString); 29 | if(table != "cpe"){ 30 | $("#"+table+"select").val($(this).closest('tr').find("td").eq(3).text().trim().replace(" ","").toLowerCase()); 31 | } 32 | $("#"+table+"add").val("Edit"); 33 | $("#add"+table).append(" "); 34 | $('#cancel'+table).click(function() { 35 | clear(table); 36 | }); 37 | jQuery('html, body').animate({scrollTop: 0}, 500); 38 | }); 39 | } 40 | function remove(item){ 41 | if(confirm("Are you sure you want to remove this rule?")){ 42 | $.getJSON('/admin/removeFromList', { 43 | list: $("#values").val(), cpe:item 44 | }, function(data) { 45 | if(parseStatus(data)){ fillTable(data);} 46 | }); 47 | } 48 | } 49 | function addItem(cpetype) { 50 | var CPE, commentArray, keyword; 51 | var comments = ""; 52 | // get field info and build cpe 53 | if(cpetype == "cpe"){var listType="cpe"}else{var listType="keyword"} 54 | CPE = $("#"+listType+"id").val().trim(); 55 | commentArray = $("#"+listType+"comments").val().trim(); 56 | if(cpetype != "cpe"){ 57 | cpetype = $("#keywordselect").val().trim(); 58 | } 59 | if (commentArray){ 60 | commentArray = commentArray.split("\n"); 61 | for (comment in commentArray){ 62 | comments = comments + "# " + commentArray[comment]; 63 | } 64 | } 65 | CPE = CPE+comments; 66 | // check if cpe was edited 67 | if(window["edited"+listType]){ 68 | $.getJSON('/admin/editInList', { 69 | list: $("#values").val(), cpe:CPE, oldCPE:window["edited"+listType], type:cpetype 70 | }, function(data) { 71 | if(parseStatus(data)){ fillTable(data);} 72 | }); 73 | }else{ 74 | alert($("#values").val()); 75 | $.getJSON('/admin/addToList', { 76 | list: $("#values").val(), cpe:CPE, type:cpetype 77 | }, function(data) { 78 | if(parseStatus(data)){ fillTable(data);} 79 | }); 80 | } 81 | clear(listType); 82 | } 83 | function fillTable(data){ 84 | var rules=data['rules']; 85 | $("#cpes > tbody > tr").remove(); 86 | $("#keywords > tbody > tr").remove(); 87 | var line = ""; 88 | for (i=0;i
- ";
103 | if('comments' in rules[i]){
104 | for (j=0;j
"+data['updateOutput']+"
"+data['updateOutput']+"
404
7 |This means page not found
8 |You navigated to a page that cannot be recreated by the server. Check the URL or try something else.
9 | 10 | {% endblock %} 11 | -------------------------------------------------------------------------------- /web/templates/admin.html: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/master-page' %} 2 | {% block title %}Admin page{% endblock %} 3 | {% block head %} 4 | 5 | 6 | 7 | 8 | 9 | 15 | {% endblock %} 16 | {% block content %} 17 |
18 | Database info for database {{stats['stats']['dbName']}}
19 |
20 |
21 |
38 | Whitelist: {{stats['data']['whitelist']['size']}} rules
39 | Blacklist: {{stats['data']['blacklist']['size']}} rules
40 | Database size: {{'%0.2f' % (stats['stats']['db_size']/1024**2)}}MB ({{'%0.2f' % (stats['stats']['db_size']/1024**3)}}GB)
41 | Database size on disk: {{'%0.2f' % (stats['stats']['size_on_disk']/1024**2)}}MB ({{'%0.2f' % (stats['stats']['size_on_disk']/1024**3)}}GB) 42 |
43 |
44 | | Collection | #records | Last update |
| CVES | {{stats['data']['cves']['size']}} | 25 |{% if stats['data']['cves']['last_update'] is not none %} {{stats['data']['cves']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
| CPE | {{stats['data']['cpe']['size']}} | 27 |{% if stats['data']['cpe']['last_update'] is not none %} {{stats['data']['cpe']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
| CPE-other | {{stats['data']['cpeOther']['size']}} | 29 |{% if stats['data']['cpeOther']['last_update'] is not none %} {{stats['data']['cpeOther']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
| Capec | {{stats['data']['capec']['size']}} | 31 |{% if stats['data']['capec']['last_update'] is not none %} {{stats['data']['capec']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
| CWE | {{stats['data']['cwe']['size']}} | 33 |{% if stats['data']['cwe']['last_update'] is not none %} {{stats['data']['cwe']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
| via4 | {{stats['data']['via4']['size']}} | 35 |{% if stats['data']['via4']['last_update'] is not none %} {{stats['data']['via4']['last_update'].strftime('%d-%m-%Y - %H:%M')}} {% else %}Not updated{% endif %} |
39 | Blacklist: {{stats['data']['blacklist']['size']}} rules
40 | Database size: {{'%0.2f' % (stats['stats']['db_size']/1024**2)}}MB ({{'%0.2f' % (stats['stats']['db_size']/1024**3)}}GB)
41 | Database size on disk: {{'%0.2f' % (stats['stats']['size_on_disk']/1024**2)}}MB ({{'%0.2f' % (stats['stats']['size_on_disk']/1024**3)}}GB) 42 |
45 |
46 |
51 |
52 |
53 | | 48 | | 49 | |
54 | Plug-in Information
55 |
56 |
57 |
66 |
67 |
68 | 55 |
| Name | UID | Type | State |
| {{plug.name}} | {{plug.uid}} | {{ptype}} | {{plug.loadstate}} |
69 | Update the database
70 | 71 |
72 |
73 | 70 | 71 |
74 | Manage whitelist
75 |
76 | Force
77 | 78 | 79 | 80 | 81 |
82 |
83 | 75 |
76 | Force
77 | 78 | 79 | 80 | 81 |
84 | Manage blacklist
85 |
86 | Force
87 | 88 | 89 | 90 | 91 |
92 |
93 | 85 |
86 | Force
87 | 88 | 89 | 90 | 91 |
94 | Change your password
95 |
96 |
100 |
101 |
102 | Back to Top
103 | {% endblock %}
104 |
--------------------------------------------------------------------------------
/web/templates/bookmarked.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Bookmarked CVEs{% endblock %}
3 | {% block content %}
4 |
5 |
9 | {% include 'subpages/table.html' %}
10 | {% endblock %}
11 |
--------------------------------------------------------------------------------
/web/templates/browse.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Vendor browsing{% endblock %}
3 | {% block content %}
4 |
5 |
13 |
14 | 95 |
| Current | |
| New | |
| Repeat |
| Products for {{ vendor|htmlDecode }} | 19 | {% elif product == None %} 20 |Vendors | 21 | {% endif %} 22 |
| {{ p|htmlDecode }} | 27 ||
| {{ v|htmlDecode }} | 33 |
| Name | {{capec.name}} | ||||
| Summary | {{capec.summary}} | ||||
| Prerequisites | {{capec.prerequisites}} | ||||
| Solutions | {{capec.solutions}} | ||||
| Related Weaknesses | 11 |
12 |
|
19 |
12 |
13 |
14 |
39 |
40 | {% endblock %}
41 |
--------------------------------------------------------------------------------
/web/templates/documentation/api/blacklist:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/api-accordion-child' %}
2 | {% set admin = True %}
3 | {% set id = "blacklist" %}
4 | {% set title = "/api/admin/blacklist" %}
5 | {% set method = "GET" %}
6 |
7 |
8 | {% block desc %}
9 | Returns the content of the blacklist. | CWE ID | Description | 17 | {% else %} 18 |CAPEC | Related Weakness | 19 | {% endif %} 20 |
| CWE-{{c.id}} | {{c.name}} | ||
| {{c.name}} | 29 |
30 |
|
34 |
10 | The blacklist is a list of CPEs that will hide a CVE when all the CPEs a product applies to are blacklisted. 11 | It is intended to be used as a way to hide unwanted information.
12 | There are three types of CPEs: 13 |
-
14 |
- cpe - A fully qualified CPE code in CPE2.2 or CPE2.3 format 15 |
- targetsoftware - A software the CPE applies to. Equivalent to cpe:2.3:-:-:-:-:-:-:-:-:<cpe> 16 |
- targethardware - A hardware the CPE applies to. Equivalent to cpe:2.3:-:-:-:-:-:-:-:-:-:<cpe> 17 |
12 | Comments can be added by appending #
9 | This API call can be used in two ways; With or without the vendor.
10 | When the link is called without a vendor, it will return a list of possible vendors.
11 | When the link is called with a vendor, it enumerates the products for said vendor. 12 | {% endblock %} 13 | 14 | {% block output %} 15 | { 16 | "product": null, 17 | "vendor": [ 18 | "%240.99_kindle_books_project", 19 | "1024cms", 20 | "11in1", 21 | "129zou", 22 | "12net", 23 | "133", 24 | "163", 25 | "1800contacts", 26 | "1kxun", 27 | "2g_live_tv_project", 28 | ... 29 | 30 | 31 | { 32 | "vendor": "microsoft" 33 | "product": [ 34 | ".net_framework", 35 | ".net_windows_server", 36 | "access", 37 | "access_multilingual_user_interface_pack", 38 | "active_directory", 39 | "active_directory_application_mode", 40 | "active_directory_federation_services", 41 | ... 42 | {% endblock %} 43 | -------------------------------------------------------------------------------- /web/templates/documentation/api/capec: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "capec" %} 3 | {% set title = "/api/capec/<cweid>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('cweid', "CWE ID", "200")] %} 6 | 7 | {% block desc %} 8 | Outputs a list of CAPEC related to a CWE.
9 | CAPEC (Common Attack Pattern Enumeration and Classification) are a list of attack types commonly used by attackers. 10 | {% endblock %} 11 | 12 | {% block output %} 13 | [ 14 | { 15 | "id": "13", 16 | "name": "Subverting Environment Variable Values", 17 | "prerequisites": "An environment variable is accessible to the user.\nAn environment variable used by the application can be tainted with user supplied data.\nInput data used in an environment variable is not validated properly.\nThe variables encapsulation is not done properly. For instance setting a variable as public in a class makes it visible and an attacker may attempt to manipulate that variable.", 18 | "related_weakness": [ 19 | "353", 20 | "285", 21 | "302", 22 | "74", 23 | "15", 24 | "73", 25 | "20", 26 | "200" 27 | ], 28 | "solutions": "Protect environment variables against unauthorized read and write access.\nProtect the configuration files which contain environment variables against illegitimate read and write access.\nAssume all input is malicious. Create a white list that defines all valid input to the software system based on the requirements specifications. Input that does not match against the white list should not be permitted to enter into the system.\nApply the least privilege principles. If a process has no legitimate reason to read an environment variable do not give that privilege.", 29 | "summary": "The attacker directly or indirectly modifies environment variables used by or controlling the target software. The attacker's goal is to cause the target software to deviate from its expected operation in a manner that benefits the attacker." 30 | }, 31 | ... 32 | {% endblock %} 33 | -------------------------------------------------------------------------------- /web/templates/documentation/api/cpe22: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "cpe22" %} 3 | {% set title = "/api/cpe2.2/<cpe>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('cpe', "CPE code in cpe2.2 or cpe2.3 format", "cpe:2.3:o:microsoft:windows_vista:6.0:sp1:-:-:home_premium:-:-:x64:-")] %} 6 | 7 | {% block desc %} 8 | Converts a CPE code to the CPE2.2 standard, stripped of appendices.
9 | CPE2.2 is the old standard, and is a lot less uniform than the CPE2.3 standard. 10 | {% endblock %} 11 | 12 | {% block output %} 13 | cpe:/o:microsoft:windows_vista:6.0:sp1:~~home_premium~~x64~ 14 | {% endblock %} 15 | -------------------------------------------------------------------------------- /web/templates/documentation/api/cpe23: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "cpe23" %} 3 | {% set title = "/api/cpe2.3/<cpe>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('cpe', "CPE code in cpe2.2 or cpe2.3 format", "cpe:/o:microsoft:windows_vista:6.0:sp1:~-~home_premium~-~x64~-")] %} 6 | 7 | {% block desc %} 8 | Converts a CPE code to the CPE2.3 standard, stripped of appendices.
9 | CPE2.3 is the newer standard, and is a lot more uniform and easier to read than the CPE2.2 standard. 10 | {% endblock %} 11 | 12 | {% block output %} 13 | cpe:2.3:o:microsoft:windows_vista:6.0:sp1:-:-:home_premium:-:-:x64 14 | {% endblock %} 15 | -------------------------------------------------------------------------------- /web/templates/documentation/api/cve: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "cve" %} 3 | {% set title = "/api/cve/<cveid>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('cveid', "CVE number", "CVE-2016-3333")] %} 6 | 7 | {% block desc %} 8 | Outputs all available information for the specified CVE (Common Vulnerability and Exposure), in JSON format.
9 | This information includes basic CVE information like CVSS (Common Vulnerability Scoring System), 10 | related CPE (Common Product Enumeration), CWE (Common Weakness Enumeration), ... as well as additional information (RedHat Advisories etc). 11 | {% endblock %} 12 | 13 | {% block output %} 14 | { 15 | "cvss": "9.3", 16 | "cvss-time": { 17 | "$date": 1478779997053 18 | }, 19 | "cwe": "CWE-119", 20 | "id": "CVE-2016-3333", 21 | "impact": { 22 | "availability": "COMPLETE", 23 | "confidentiality": "COMPLETE", 24 | "integrity": "COMPLETE" 25 | }, 26 | "last-modified": { 27 | "$date": 1480345703170 28 | }, 29 | ... 30 | {% endblock %} 31 | -------------------------------------------------------------------------------- /web/templates/documentation/api/cvefor: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "cvefor" %} 3 | {% set title = "/api/cvefor/<cpe>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('cpe', "CPE code in cpe2.2 or cpe2.3 format", "cpe:/o:microsoft:windows_vista:6.0:sp1:~-~home_premium~-~x64~-")] %} 6 | 7 | {% block desc %} 8 | Outputs a list of CVEs related to the product 9 | {% endblock %} 10 | 11 | {% block output %} 12 | [ 13 | { 14 | "cvss": 7.5, 15 | "cvss-time": { 16 | "$date": 1117762800000 17 | }, 18 | "id": "CVE-2005-0100", 19 | "impact": { 20 | "availability": "PARTIAL", 21 | "confidentiality": "PARTIAL", 22 | "integrity": "PARTIAL" 23 | }, 24 | ... 25 | {% endblock %} 26 | -------------------------------------------------------------------------------- /web/templates/documentation/api/cwe: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "cwe" %} 3 | {% set title = "/api/cwe" %} 4 | {% set method = "GET" %} 5 | 6 | 7 | {% block desc %} 8 | Outputs a list of all CWEs (Common Weakness Enumeration). 9 | {% endblock %} 10 | 11 | {% block output %} 12 | [ 13 | { 14 | "description_summary": "Information sent over a network can be compromised while in transit. An attacker may be able to read/modify the contents if the data are sent in plaintext or are weakly encrypted.Information sent over a network can be compromised while in transit. An attacker may be able to read/modify the contents if the data are sent in plaintext or are weakly encrypted.", 15 | "id": "5", 16 | "name": "J2EE Misconfiguration: Data Transmission Without Encryption", 17 | "status": "Draft", 18 | "weaknessabs": "Variant" 19 | }, 20 | ... 21 | {% endblock %} 22 | -------------------------------------------------------------------------------- /web/templates/documentation/api/dbInfo: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "dbInfo" %} 3 | {% set title = "/api/dbInfo" %} 4 | {% set method = "GET" %} 5 | 6 | 7 | {% block desc %} 8 | Returns the stats of the database. When the user authenticates, more information is returned. This information includes: 9 |
-
10 |
- Amount of whitelist and blacklist records 11 |
- Some server settings like the database name 12 |
- Some database information like disk usage 13 |
9 | The return value of the of the request is the output of the database update. This might take a long time to finish. 10 | {% endblock %} 11 | 12 | {% block output %} 13 | Not modified 14 | Not modified 15 | Not modified 16 | Not modified 17 | Not modified 18 | Not modified 19 | [+]Success to create index id on cpe 20 | [+]Success to create index id on cpeother 21 | [+]Success to create index id on cves 22 | [+]Success to create index vulnerable_configuration on cves 23 | [+]Success to create index Modified on cves 24 | [+]Success to create index [('summary', 'text')] on cves 25 | [+]Success to create index id on vendor 26 | [+]Success to create index id on via4 27 | [+]Success to create index id on mgmt_whitelist 28 | [+]Success to create index id on mgmt_blacklist 29 | [+]Success to create index related_weakness on capec 30 | ========================== 31 | Wed 01 February 2017 08:37 32 | ========================== 33 | Starting cve 34 | cve has 81370 elements (0 update) 35 | Starting cpe 36 | cpe has 117276 elements (0 update) 37 | Starting vendor 38 | vendor has 1426 elements (0 update) 39 | Starting cwe 40 | cwe has 719 elements (0 update) 41 | Starting capec 42 | capec has 463 elements (0 update) 43 | Starting via4 44 | via4 has 81143 elements (0 update) 45 | Starting ensureindex 46 | 47 | [!] Could not find plugin loader file! 48 | {% endblock %} 49 | -------------------------------------------------------------------------------- /web/templates/documentation/api/last: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "last" %} 3 | {% set title = "/api/last/<limit>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('limit', "The amount of CVEs to display", "10")] %} 6 | 7 | {% block desc %} 8 | Outputs the last n amount of vulnerabilities. If the limit is not specified, the default of 30 is used. 9 | {% endblock %} 10 | 11 | {% block output %} 12 | [ 13 | { 14 | "Modified": { 15 | "$date": 1485277140307 16 | }, 17 | "Published": { 18 | "$date": 1485277140307 19 | }, 20 | "cvss": null, 21 | "cwe": "Unknown", 22 | "id": "CVE-2016-10162", 23 | "last-modified": { 24 | "$date": 1485277140307 25 | }, 26 | "references": [ 27 | "http://php.net/ChangeLog-7.php", 28 | "https://bugs.php.net/bug.php?id=73831", 29 | "https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b" 30 | ], 31 | "summary": "The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.", 32 | "vulnerable_configuration": [], 33 | "vulnerable_configuration_cpe_2_2": [] 34 | }, 35 | ... 36 | {% endblock %} 37 | -------------------------------------------------------------------------------- /web/templates/documentation/api/link: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "link" %} 3 | {% set title = "/api/link/<key>/<value>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('key', "The key to link CVEs on", "msbulletin.bulletin_id"), 6 | ('value', "The value for the given key", "MS16-098")] %} 7 | 8 | {% block desc %} 9 | Returns all CVEs that are linked by a given key/value pair 10 | {% endblock %} 11 | 12 | {% block output %} 13 | { 14 | "stats": { 15 | "count": 4, 16 | "maxCVSS": 7.2, 17 | "minCVSS": 7.2 18 | }, 19 | "cves": [ 20 | { 21 | "Modified": { 22 | "$date": 1474927194753 23 | }, 24 | "Published": { 25 | "$date": 1470765557223 26 | }, 27 | "access": { 28 | "authentication": "NONE", 29 | "complexity": "LOW", 30 | "vector": "LOCAL" 31 | }, 32 | "cvss": "7.2", 33 | "cvss-time": { 34 | "$date": 1470923642083 35 | }, 36 | "cwe": "CWE-264", 37 | "id": "CVE-2016-3310", 38 | "impact": { 39 | "availability": "COMPLETE", 40 | "confidentiality": "COMPLETE", 41 | "integrity": "COMPLETE" 42 | }, 43 | ... 44 | {% endblock %} 45 | -------------------------------------------------------------------------------- /web/templates/documentation/api/query: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "query" %} 3 | {% set title = "/api/query" %} 4 | {% set method = "GET" %} 5 | {% set headers = [('rejected', "Hide or show rejected CVEs", "show(default)/hide"), 6 | ('cvss_score', "CVSS score", "6.8"), 7 | ('cvss_modifier', "Select the CVSS score of the CVEs related to cvss_score", "above/equals/below"), 8 | ('time_start', "Earliest time for a CVE", "dd-mm-yyyy or dd-mm-yy format, using - or /"), 9 | ('time_end', "Latest time for a CVE", "dd-mm-yyyy or dd-mm-yy format, using - or /"), 10 | ('time_modifier', "Timeframe for the CVEs, related to the start and end time", "from/until/between/outside"), 11 | ('time_type', "Select which time is used for the filter", "Modified/Published/last-modified"), 12 | ('skip', "Skip the n latest vulnerabilities", "50"), 13 | ('limit', "Limit the amount of vulnerabilities to return", "20"), 14 | ]%} 15 | 16 | {% block desc %} 17 | Returns a list of CVEs matching the criteria of the filters specified in the headers. 18 | {% endblock %} 19 | 20 | {% block output %} 21 | [ 22 | { 23 | "Modified": { 24 | "$date": 1480730341713 25 | }, 26 | "Published": { 27 | "$date": 1480730340167 28 | }, 29 | "cvss": 10.0, 30 | "cwe": "CWE-287", 31 | "id": "CVE-2016-9796", 32 | "last-modified": { 33 | "$date": 1481117600060 34 | }, 35 | "references": [ 36 | "http://blog.malerisch.net/2016/12/alcatel-omnivista-8770-unauth-rce-giop-corba.html", 37 | "http://www.securityfocus.com/bid/94649", 38 | "https://github.com/malerisch/omnivista-8770-unauth-rce", 39 | "https://www.youtube.com/watch?v=aq37lQKa9sk" 40 | ], 41 | "summary": "Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods (AddJobSet, AddJob, and ExecuteNow) that can be used to run arbitrary commands on the server, with the privilege of NT AUTHORITY\\SYSTEM on the server. NOTE: The discoverer states \"The vendor position is to refer to the technical guidelines of the product security deployment to mitigate this issue, which means applying proper firewall rules to prevent unauthorised clients to connect to the OmniVista server.\"", 42 | "vulnerable_configuration": [ 43 | "cpe:2.3:a:alcatel-lucent:omnivista_8770_network_management_system:2.6", 44 | ... 45 | {% endblock %} 46 | -------------------------------------------------------------------------------- /web/templates/documentation/api/search: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set id = "search" %} 3 | {% set title = "/api/search/<vendor>/<product>" %} 4 | {% set method = "GET" %} 5 | {% set args = [('vendor', "Vendor name", "microsoft"), ('product', "Product name", "excel")] %} 6 | 7 | {% block desc %} 8 | When vendor and product are specified, this API call returns a list of CVEs related to the product. 9 | The output of the browse call can be used for this. 10 | {% endblock %} 11 | 12 | {% block output %} 13 | [ 14 | { 15 | "Modified": { 16 | "$date": 1480347506210 17 | }, 18 | "Published": { 19 | "$date": 1478743189440 20 | }, 21 | "access": { 22 | "authentication": "NONE", 23 | "complexity": "MEDIUM", 24 | "vector": "NETWORK" 25 | }, 26 | "cvss": "9.3", 27 | "cvss-time": { 28 | "$date": 1478772824700 29 | }, 30 | "cwe": "CWE-119", 31 | "id": "CVE-2016-7236", 32 | "impact": { 33 | "availability": "COMPLETE", 34 | "confidentiality": "COMPLETE", 35 | "integrity": "COMPLETE" 36 | }, 37 | ... 38 | {% endblock %} 39 | -------------------------------------------------------------------------------- /web/templates/documentation/api/whitelist: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/api-accordion-child' %} 2 | {% set admin = True %} 3 | {% set id = "whitelist" %} 4 | {% set title = "/api/admin/whitelist" %} 5 | {% set method = "GET" %} 6 | 7 | 8 | {% block desc %} 9 | Returns the content of the whitelist.
10 | The whitelist is a list of CPEs that will mark a CVE when the CVE applies to the product. 11 | It is intended to be used as a notification/warning mechanism.
12 | There are three types of CPEs: 13 |
-
14 |
- cpe - A fully qualified CPE code in CPE2.2 or CPE2.3 format 15 |
- targetsoftware - A software the CPE applies to. Equivalent to cpe:2.3:-:-:-:-:-:-:-:-:<cpe> 16 |
- targethardware - A hardware the CPE applies to. Equivalent to cpe:2.3:-:-:-:-:-:-:-:-:-:<cpe> 17 |
12 | Comments can be added by appending #
7 | Allowed authorization methods are: 8 |
-
9 |
- basic (user:password) 10 |
- token (user:token) 11 |
- session (user:session_key) 12 |
7 | In case this happens, the server should print the error to the console. 8 | {% endblock %} 9 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/limit_must_be_int: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "limit_must_be_int" %} 3 | {% set title = "'Limit' Must be an Integer" %} 4 | {% set code = 400 %} 5 | {% block desc %} 6 | The limit parameter in your query could not be parsed as an integer. 7 | {% endblock %} 8 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/malformed_authentication_string: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "malformed_authentication_string" %} 3 | {% set title = "Malformed Authentication String" %} 4 | {% set code = 400 %} 5 | {% block desc %} 6 | The authentication string provided in the Authorization header could not be parsed correctly.
7 | Check the "Authentication" section of the documentation. 8 | {% endblock %} 9 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/not_found: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "not_found" %} 3 | {% set title = "Resource Not Found" %} 4 | {% set code = 404 %} 5 | {% block desc %} 6 | The url requested does not exist. You might need to check upper/lowercase, or revert back to the documentation. 7 | {% endblock %} 8 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/resource_unavailable: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "resource_unavailable" %} 3 | {% set title = "Server could not connect to the browsing repository" %} 4 | {% set code = 503 %} 5 | {% block desc %} 6 | The browsing repository is currently not available.
7 | This could be because Redis is not running, the link between CVE-Search and Redis cannot be 8 | established, or other reasons. 9 | {% endblock %} 10 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/skip_must_be_int: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "skip_must_be_int" %} 3 | {% set title = "'Skip' Must be an Integer" %} 4 | {% set code = 400 %} 5 | {% block desc %} 6 | The skip parameter in your query could not be parsed as an integer. 7 | {% endblock %} 8 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/success: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "success" %} 3 | {% set title = "Success" %} 4 | {% set code = 200 %} 5 | {% block desc %} 6 | The request was handled correctly. 7 | {% endblock %} 8 | -------------------------------------------------------------------------------- /web/templates/documentation/status_codes/unknown_content-type: -------------------------------------------------------------------------------- 1 | {% extends 'layouts/status_code_accordion-child' %} 2 | {% set id = "unknown_content-type" %} 3 | {% set title = "Unknown Content-type Requested" %} 4 | {% set code = 415 %} 5 | {% block desc %} 6 | A content type was requested (in the Accept header) which is not one of the following: 7 |
-
8 |
- json 9 |
- plain 10 |
- application/* 11 |
- text/* 12 |
- */* 13 |
5 | {% if status['except']=='redis-connection' %}
6 |
35 | {% endblock %}
36 |
--------------------------------------------------------------------------------
/web/templates/index-minimal.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Most recent entries{% endblock %}
3 | {% block head %}
4 |
5 |
6 |
7 |
8 |
9 |
10 |
25 | {% endblock %}
26 | {% block content %}
27 |
28 | {% include 'subpages/filters.html' %}
29 |
30 | {% include 'subpages/pager.html' %}
31 |
32 | {% include 'subpages/table.html' %}
33 |
34 | {% include 'subpages/pager.html' %}
35 |
36 | {% endblock %}
37 |
--------------------------------------------------------------------------------
/web/templates/index.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Most recent entries{% endblock %}
3 | {% block head %}
4 |
5 |
6 |
7 |
8 |
9 |
10 |
32 | {% endblock %}
33 | {% block content %}
34 |
35 | {% include 'subpages/filters.html' %}
36 |
37 | {% include 'subpages/pager.html' %}
38 |
39 | {% include 'subpages/table.html' %}
40 |
41 | {% include 'subpages/pager.html' %}
42 |
43 | {% endblock %}
44 |
--------------------------------------------------------------------------------
/web/templates/layouts/api-accordion-child:
--------------------------------------------------------------------------------
1 | This page can not be displayed due to an error
7 |Unable to connect to Redis. Is it running on {{status['info']['host']}}:{{status['info']['port']}}?
8 | {% elif status['except']=='cve-not-found' %} 9 |This CVE does not exist
10 |{{status['info']['cve']}} could not be found in the CVE-Search database. 11 | This could mean that this CVE is not in the National Vulnerability Database yet, that your database is outdated or that you entered a wrong CVE.
12 | {% elif status['except']=='textsearch-not-enabled' %} 13 |Fulltext search not enabled
14 |The current settings in the database do not allow fulltext search.
15 | If you feel like this should be enabled, please contact your administrator.
Plug-in not loaded
18 |This plug-in is not loaded. You may have spelled the URL wrong, or the plug-in might be missing or not loaded.
19 | {% elif status['except'] in ['plugin-page-missing', 'plugin-page-corrupt'] %} 20 |The plug-in threw an error!
21 |Seems like the plug-in was not developed correctly. Please contact the plug-in developer.
22 | {% if status['except']=='plugin-page-missing' %}Error code 011
Error code 012
The plug-in threw an error!
27 |The plug-in could not find the page it was looking for ({{status['page']}}).
28 |Please check if you installed this page correctly. If the error is not at your side, but the developer, please contact them.
29 |Error code 013
Plug-in not a webplugin
32 |This plug-in is not a web plug-in, and has no page to display.
33 | {% endif %} 34 |
2 |
69 |
--------------------------------------------------------------------------------
/web/templates/layouts/master-page:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 | {% if not minimal %}
14 |
15 | {% endif %}
16 |
17 |
18 |
19 |
20 |
21 |
22 |
25 |
26 |
27 |
28 |
29 | {% if not minimal %}
30 |
31 |
32 | {% endif %}
33 |
34 |
3 |
7 | 4 | {{ title }} [ {{ method }} ] 5 |
6 |
8 |
68 |
9 |
67 |
10 |
15 | {% if args is defined or formdata is defined or headers is defined %}
16 |
11 |
14 | Description
12 | {% block desc %} {% endblock %} 13 |
17 |
59 | {% endif %}
60 |
18 | {% if args is defined %}
19 |
21 |
22 |
30 | {% endif %}
31 | {% if headers is defined %}
32 |
34 |
35 |
43 | {% endif %}
44 | {% if formdata is defined %}
45 |
47 |
48 |
56 | {% endif %}
57 |
58 | URL arguments
20 || Argument | Description | Example |
| {{arg[0]}} | {{arg[1]}} | {{arg[2]}} |
Headers
33 || Argument | Description | Example |
| {{arg[0]}} | {{arg[1]}} | {{arg[2]}} |
Formdata arguments
46 || Argument | Description | Example |
| {{arg[0]}} | {{arg[1]}} | {{arg[2]}} |
61 |
66 |
62 |
65 | Output
63 |{% block output %}{% endblock %}
64 |
39 |
72 |
73 |
74 |
--------------------------------------------------------------------------------
/web/templates/layouts/status_code_accordion-child:
--------------------------------------------------------------------------------
1 |
40 |
71 |
41 |
42 | {% if minimal %}
43 | {% include 'subpages/menu-minimal.html' %}
44 | {% else %}
45 | {% include 'subpages/menu.html' %}
46 | {% endif %}
47 |
48 |
49 | {% if not minimal %}
50 |
58 | {% endif %}
59 |
60 |
61 |
62 |
63 |
64 |
70 |
65 | {% block content %}{% endblock %}
66 |
67 | Back to Top
68 |
69 |
2 |
18 |
--------------------------------------------------------------------------------
/web/templates/linked.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}CVE's linked by {{field}}{% endblock %}
3 | {% block head %}
4 |
5 |
6 | {% endblock %}
7 | {% block content %}
8 |
9 |
13 |
3 |
7 | 4 | {{ title }} [ {{ code }} ] 5 |
6 |
8 |
17 |
9 |
16 |
10 |
15 |
11 |
14 | Description
12 | {% block desc %} {% endblock %} 13 || Max CVSS | {{stats['maxCVSS']}} | 15 |Min CVSS | {{stats['minCVSS']}} | 16 |Total Count | {{stats['count']}} |
17 |
18 |
19 |
20 |
21 |
22 |
46 |
47 |
48 | {% set rulesList = rules|list %}
49 | | 23 | 29 | Browse... 30 | |
31 | or 32 | | 33 | 45 | |
24 |
25 |
26 |
27 |
28 | | 32 | {% if version != None%} 33 | Versions for {{ vendor }} {{ product|htmlDecode }} 34 | {% elif product != None %} 35 | Products for {{ vendor|htmlDecode }} 36 | {% elif product == None %} 37 | Vendors 38 | {% endif %} 39 | | 40 |41 | | 42 | |
| {{ product|htmlDecode }} {{ v|htmlDecode }} | 47 | 48 |whitelist | 49 |blacklist | 50 |
| {{ p|htmlDecode }} | 56 |whitelist | 57 |blacklist | 58 |
| {{ v|htmlDecode }} | 64 |whitelist | 65 |blacklist | 66 |
10 |
24 |
25 | {% endblock %}
26 |
--------------------------------------------------------------------------------
/web/templates/requiresAuth.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Authentication Required{% endblock %}
3 |
4 | {% block content %}
5 |
6 |
9 | {% endblock %}
10 |
--------------------------------------------------------------------------------
/web/templates/search.html:
--------------------------------------------------------------------------------
1 | {% extends 'layouts/master-page' %}
2 | {% block title %}Vendor browsing{% endblock %}
3 | {% block content %}
4 |
5 | {% if vendor %}
6 |
11 | {% endif %}
12 | {% if errors %}
13 | Requires Authentication
7 |You need to authenticate to access this.
8 |
14 |
21 | {% endif %}
22 | {% include 'subpages/table.html' %}
23 | {% if not vendor and cve|length == 100 %}
24 | While searching, the following error(s) occurred:
15 | {% if 'textsearch' in errors%} 16 | Fulltext search not enabled 17 |The current settings in the database do not allow fulltext search.
18 | If you feel like this should be enabled, please contact your administrator.
Top 100 results
25 | {% endif %} 26 | {% endblock %} 27 | -------------------------------------------------------------------------------- /web/templates/subpages/filters.html: -------------------------------------------------------------------------------- 1 | 4 | 5 |
6 |
95 |
96 |
--------------------------------------------------------------------------------
/web/templates/subpages/menu-minimal.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
27 |
28 |
--------------------------------------------------------------------------------
/web/templates/subpages/menu.html:
--------------------------------------------------------------------------------
1 |
2 |
30 |
31 |
--------------------------------------------------------------------------------
/web/templates/subpages/pager.html:
--------------------------------------------------------------------------------
1 |
5 | {% set length = 5%}
6 |
7 |
8 | {% set page = (r/pageLength)|int %}
9 | {% set middle = (length/2)|int+1 %}
10 | {% if page < middle %}
11 | {% set pre = page %}
12 | {% set post = length-page%}
13 | {% else %}
14 | {% set pre = middle-1 %}
15 | {% set post = middle%}
16 | {% endif %}
17 |
18 |
4 | 
5 |
6 |
5 |
7 |
25 |
26 |
19 |
42 |
43 |
--------------------------------------------------------------------------------
/web/templates/subpages/table.html:
--------------------------------------------------------------------------------
1 | | ID | CVSS | Summary | Last (major) update | Published | 5 ||
| 13 | {% if 'icon' in c %} 14 | 15 | {% else %} 16 | {% if 'whitelisted' in c %} 17 | 18 | {% elif 'blacklisted' in c %} 19 | 20 | {% endif %} 21 | {% endif %} 22 | | 23 |
24 | {{ c['id'] }}
25 | {% if 'reason' in c %}
26 | {{c['reason']}} 27 | {% endif %} 28 | |
29 | 30 | {{ c['cvss'] }} 31 | | 32 |
33 |
34 | {{ c['summary'][:250] }}
35 |
36 | |
37 | 38 | {{ c['Modified'].strftime('%d-%m-%Y - %H:%M') }} 39 | | 40 |41 | {{ c['Published'].strftime('%d-%m-%Y - %H:%M') }} 42 | | 43 |