vulnerability database download/initialization?

fiware-cybercaptor / cybercaptor-data-extraction

Python scripts allowing to prepare the inputs for CyberCAPTOR

GNU General Public License v3.0

1 stars 3 forks source link

vulnerability database download/initialization? #4

Open jhahkala opened 8 years ago

jhahkala commented 8 years ago

Looking at the source, the program is checking each vulnerability against a vulnerability database. Which and where to get it? Can't see any here in cybercapture modules, nor any instructions to get one. Currently all the vulnerabilities get rejected as they're not fonund in the database as the default one is created empty.

fxaguessy commented 8 years ago

Hello,

short time answer : You can download a vulnerability database here : https://github.com/fiware-cybercaptor/cybercaptor-data-extraction/releases/download/4.4.1/vulnerability-remediation-database.db

medium-term answer : I will provide soon the scripts to fill in the database.

jhahkala commented 8 years ago

Thanks!

fredericgithub commented 8 years ago

Hi @fxaguessy ,

Any update on possible scripts to fill in the DB?
Also, the OpenVas is giving a lot of vulnerabilities with a CVE ID = "NOCVE". As these get rejected, is there a way to handle them so that they would be added to the network topology file? Thanks a lot in advance. Best regards, F.