vulnmine vs opencve

vulnmine

Vulnmine searches for vulnerable hosts using MS SCCM host / software inventory data with NIST NVD Vulnerability feed data. (by ubisoft)

Suggest topics

Source Code

Suggest alternative

Edit details

opencve

CVE Alerting Platform (by opencve)

Cve Security Vulnerabilities security-tools Nvd Python

Source Code

opencve.io

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

vulnmine		opencve
	Project
1	Mentions	21
38	Stars	1,618
-	Growth	3.2%
0.0	Activity	4.4
10 months ago	Latest Commit	9 days ago
Python	Language	Python
GNU General Public License v3.0 only	License	GNU General Public License v3.0 or later

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

vulnmine

Posts with mentions or reviews of vulnmine. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-14.

Is there a tool to track CVEs for the software that we use?
8 projects | /r/sysadmin | 14 Dec 2021

It is hard. Look at vulmine and the logic behind it for feeding SCCM reports into it.

opencve

Posts with mentions or reviews of opencve. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-12-07.

Auth0 increases price by 300%
7 projects | /r/webdev | 7 Dec 2023
how to stay up to date with new CVEs?
1 project | /r/cybersecurity | 25 May 2023
Where do you get your information regarding new vulnerabilities and security risks?
2 projects | /r/sysadmin | 9 May 2023
PaperCut MF/NG vulnerability
1 project | /r/sysadmin | 20 Apr 2023

Don't like someone else running it? No problem, it's open source and you can run it yourself https://github.com/opencve/opencve
Tracking vulnerabilities that your company is effected by.
1 project | /r/cybersecurity | 14 Apr 2023

I use https://www.opencve.io you can make a account and then subscribe to different products and/or vendors to get automated updates via mail if there are new vulnerabilities that affect these products
Getting informed about exploits / CVEs
1 project | /r/sysadmin | 16 Mar 2023

www.opencve.io and filter on your vendors and hw models.
CVE sources
2 projects | /r/cybersecurity | 27 Dec 2022
CVE Vulnerability Tracking
2 projects | /r/AskNetsec | 18 Nov 2022

Check out OpenCVE, I find it as an excellent tool.
zero-day exploit notifications
3 projects | /r/cybersecurity | 19 Aug 2022

https://www.opencve.io/ - Site that allows you to be emailed of new CVEs by subscribing to different products and vendors.
CVE Search
1 project | /r/cybersecurity | 24 May 2022

https://www.opencve.io/ is something to use as well.

What are some alternatives?

When comparing vulnmine and opencve you can also consider the following projects:

PMD - An extensible multilanguage static code analyzer.

grype - A vulnerability scanner for container images and filesystems

vulnix - Vulnerability (CVE) scanner for Nix/NixOS.

CVE-2021-37740 - PoC for DoS vulnerability CVE-2021-37740 in firmware v3.0.3 of SCN-IP100.03 and SCN-IP000.03 by MDT. The bug has been fixed in firmware v3.0.4.

openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.

DependencyCheck - OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

faraday - Open Source Vulnerability Management Platform

vulnerablecode - A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Spotbugs - SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Loki - Loki - Simple IOC and YARA Scanner

cvelistV5 - CVE cache of the official CVE List in CVE JSON 5.0 format