aboutcode-org / vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
https://public.vulnerablecode.io
Apache License 2.0
527 stars 198 forks source link

Add CVE reference key/maps #1172

Open armijnhemel opened 1 year ago

armijnhemel commented 1 year ago

https://cve.mitre.org/data/refs/

has a mapping from vendor vulnerability ids to CVEs, including Slackware, Apple, Gentoo, IBM, etc. etc.

This might be very useful to index.

armijnhemel commented 1 year ago

The data seems to be the same as in the References fields in CVE reports (example: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6817 ), so perhaps it is not that useful at all.

pombredanne commented 1 year ago

See also #109