improving the CVE detection rate

clearlinux / cve-check-tool

Original Automated CVE Checking Tool

GNU General Public License v2.0

204 stars 78 forks source link

improving the CVE detection rate #46

Closed TudorCiochina closed 7 years ago

TudorCiochina commented 7 years ago

CVE version string fractional compare. False positives might get generated but this can be prevented by implementing blacklist mechanism which contain partial or full CPE, vendor and/or product and/or version.