CVE_Prioritizer
opencve
CVE_Prioritizer | opencve | |
---|---|---|
6 | 21 | |
420 | 1,630 | |
- | 2.8% | |
7.3 | 4.1 | |
26 days ago | 1 day ago | |
Python | Python | |
BSD 3-clause "New" or "Revised" License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CVE_Prioritizer
- POST request to get CVE CVSS score
- CVE_Prioritizer: Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.
-
CVE Prioritizer tool
Today I'm happy to share that you can now use CVE Prioritizer to fetch and prioritize the Top 10 Trending vulnerabilities of the last 7 days from cvetrends.com in real time. If interested, check it out and let me know what you think. Feedback is always welcome! https://github.com/TURROKS/CVE_Prioritizer
-
What are some "above and beyond" side projects for a SOC analyst?
This is a tool I built as a side project, it has helped reduce the time and effort required for prioritizing vulnerabilities https://github.com/TURROKS/CVE_Prioritizer
- TURROKS/CVE_Prioritizer: CVE_Prioritizer combines CVSS, EPSS and CISAs Known Exploited Vulnerabilities to help you prioritize vulnerabilities
-
Vulnerability Prioritization
For my fellow Cyber Defenders and those interested in getting into this fantastic field, I wanted to share CVE_Prioritizer with the community; it is a python tool that helps you prioritize vulnerabilities based on CVSS, EPSS, and whether or not the vulnerabilities have been included in the CISA's Known Exploited Vulnerabilities Catalog.
opencve
- Auth0 increases price by 300%
- how to stay up to date with new CVEs?
- Where do you get your information regarding new vulnerabilities and security risks?
-
PaperCut MF/NG vulnerability
Don't like someone else running it? No problem, it's open source and you can run it yourself https://github.com/opencve/opencve
-
Tracking vulnerabilities that your company is effected by.
I use https://www.opencve.io you can make a account and then subscribe to different products and/or vendors to get automated updates via mail if there are new vulnerabilities that affect these products
-
Getting informed about exploits / CVEs
www.opencve.io and filter on your vendors and hw models.
- CVE sources
-
CVE Vulnerability Tracking
Check out OpenCVE, I find it as an excellent tool.
-
zero-day exploit notifications
https://www.opencve.io/ - Site that allows you to be emailed of new CVEs by subscribing to different products and vendors.
-
CVE Search
https://www.opencve.io/ is something to use as well.
What are some alternatives?
CVElk - Autoconfigured ELK Stack That Contains All EPSS and NVD CVE Data
grype - A vulnerability scanner for container images and filesystems
nvdlib - A simple wrapper for the National Vulnerability CVE/CPE API
vulnix - Vulnerability (CVE) scanner for Nix/NixOS.
vulnmine - Vulnmine searches for vulnerable hosts using MS SCCM host / software inventory data with NIST NVD Vulnerability feed data.
CVE-2021-37740 - PoC for DoS vulnerability CVE-2021-37740 in firmware v3.0.3 of SCN-IP100.03 and SCN-IP000.03 by MDT. The bug has been fixed in firmware v3.0.4.
openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.
DependencyCheck - OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
vulnerablecode - A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
faraday - Open Source Vulnerability Management Platform
Wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Spotbugs - SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.