opencve
CVE-2021-37740
| opencve | CVE-2021-37740 | |
|---|---|---|
| 21 | 1 | |
| 1,622 | 6 | |
| 2.0% | - | |
| 4.1 | 0.0 | |
| 11 days ago | almost 2 years ago | |
| Python | Python | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
opencve
- Auth0 increases price by 300%
- how to stay up to date with new CVEs?
- Where do you get your information regarding new vulnerabilities and security risks?
-
PaperCut MF/NG vulnerability
Don't like someone else running it? No problem, it's open source and you can run it yourself https://github.com/opencve/opencve
-
Tracking vulnerabilities that your company is effected by.
I use https://www.opencve.io you can make a account and then subscribe to different products and/or vendors to get automated updates via mail if there are new vulnerabilities that affect these products
-
Getting informed about exploits / CVEs
www.opencve.io and filter on your vendors and hw models.
- CVE sources
-
CVE Vulnerability Tracking
Check out OpenCVE, I find it as an excellent tool.
-
zero-day exploit notifications
https://www.opencve.io/ - Site that allows you to be emailed of new CVEs by subscribing to different products and vendors.
-
CVE Search
https://www.opencve.io/ is something to use as well.
CVE-2021-37740
What are some alternatives?
grype - A vulnerability scanner for container images and filesystems
vulnerablecode - A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
vulnix - Vulnerability (CVE) scanner for Nix/NixOS.
expbox - Vulnerability Exploitation Code Collection Repository
vulnmine - Vulnmine searches for vulnerable hosts using MS SCCM host / software inventory data with NIST NVD Vulnerability feed data.
PocOrExp_in_Github - 聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.
openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.
dheater - D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)
DependencyCheck - OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
DDoS-Ripper - DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
faraday - Open Source Vulnerability Management Platform
SBSCAN - SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN is a penetration testing tool focused on the spring framework that can scan springboot sensitive information/unauthorized for specified sites and scan and validate spring related vulnerabilities]