Search query returning unrelated findings or results.

[asadasivan]

Description: Search results contains issues that are unrelated. It is happening for multiple queries. This issue is currently not working both on the REST API as well as the search query in web application. Steps to Reproduce:

1. Use the REST API or use the search functionality in the web app.
2. Enter the following query: bulletinFamily:exploit AND apache pdfbox 2.0.1
3. Reasoning: The result contains KiTTY Portable 0.65.0.2p which is unrelated to apache pdfbox
4. Note: There are also other query that leads to unrelated results. For example, please try: bulletinFamily:exploit AND Jetty: Java based HTTP, Servlet, SPDY, WebSocket Server AND 9.2.14.v20151106

[videns]

Try searching like this:

bulletinFamily:exploit AND "apache pdfbox 2.0.1"

[asadasivan]

Thanks Viden.

—Arun

Sent from my iPhone

On Mar 18, 2019, at 03:49, videns notifications@github.com wrote:

Try searching like this:

bulletinFamily:exploit AND "apache pdfbox 2.0.1"

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[asadasivan]

Hello,

I am using the following API (/search/lucene/ ) to get exploit details. I tried the following two query's but both not working.

1. {"query":"bulletinFamily:exploit AND 'apache pdfbox 2.0.1'"} a. The above return all details including exploit
2. {"query":"bulletinFamily:exploit AND apache pdfbox 2.0.1"}

Could you please let me know how to effectively search to return only exploits.

Thanks, Arun

On Wed, Mar 20, 2019 at 11:35 AM Arunkumar Sadasivan < contact.arunsec@gmail.com> wrote:

Thanks Viden.

—Arun

Sent from my iPhone

On Mar 18, 2019, at 03:49, videns notifications@github.com wrote:

Try searching like this:

bulletinFamily:exploit AND "apache pdfbox 2.0.1"

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/vulnersCom/api/issues/10#issuecomment-473820371, or mute the thread https://github.com/notifications/unsubscribe-auth/AP6k4KJTQ_zSH5UKotd78W9pA1dezvW8ks5vX1MQgaJpZM4brurm .

[asadasivan]

I am able to bypass the issue. Thanks for your help.

—Arun

Sent from my iPhone

On Mar 18, 2019, at 03:49, videns notifications@github.com wrote:

Try searching like this:

bulletinFamily:exploit AND "apache pdfbox 2.0.1"

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.