projectdiscovery / cvemap

Navigate the CVE jungle with ease.
MIT License
1.61k stars 105 forks source link

Need option to take list of CVEs from stdin #224

Open dankegel opened 1 month ago

dankegel commented 1 month ago

Please describe your feature request:

The tool is hard to use as a filter. It'd be cool to be able to filter easily on a list of cves from stdin.

Describe the use case of this feature:

I have a list of CVEs and would like to find out which of them are remotely explitable, have a POC, and are in the KEV.

At the moment, that's hard to do, partly because it only lets you search for a single cve at the moment, and partly because there is no way to just say "give me all the matches".

ehsandeep commented 1 month ago

@dankegel you can already feed the list as file input or stdin.

$ cat id.txt 
CVE-2024-5274
CVE-2024-4978
CVE-2024-4947
CVE-2024-4761
CVE-2024-4671
$ cvemap -id id.txt 

   ______   _____  ____ ___  ____  ____
  / ___/ | / / _ \/ __ \__ \/ __ \/ __ \
 / /__ | |/ /  __/ / / / / / /_/ / /_/ /
 \___/ |___/\___/_/ /_/ /_/\__,_/ .___/ 
                               /_/

        projectdiscovery.io

[INF] Current cvemap version v0.0.7 (latest)
╭───────────────┬──────┬──────────┬─────────┬─────────────┬─────┬──────────╮
│ ID            │ CVSS │ SEVERITY │ EPSS    │ PRODUCT     │ AGE │ TEMPLATE │
├───────────────┼──────┼──────────┼─────────┼─────────────┼─────┼──────────┤
│ CVE-2024-4671 │ 9.6  │ CRITICAL │ 0.00103 │ chrome      │ 66  │ ❌       │
│ CVE-2024-4761 │ 8.8  │ HIGH     │ 0.00265 │ chrome      │ 66  │ ❌       │
│ CVE-2024-4947 │ 8.8  │ HIGH     │ 0.00229 │ chrome      │ 65  │ ❌       │
│ CVE-2024-4978 │ 8.4  │ HIGH     │ 0.02833 │ javs_viewer │ 58  │ ❌       │
│ CVE-2024-5274 │ 8.8  │ HIGH     │ 0.00346 │ chrome      │ 52  │ ❌       │
╰───────────────┴──────┴──────────┴─────────┴─────────────┴─────┴──────────╯