Skip to content

Comment on Almost every publicly available CVE PoCparent

Comments

I'd really like a CVE database where you can search by software and version and see which CVEs apply to your version, their severity, and which have PoCs.

You work on such a database? Please link it for the rest of us!

Just to be sure we are talking about the same thing, you want a nice GUI interface for the NVD API? In other words, this:

curl --verbose "https://services.nvd.nist.gov/rest/json/cve/1.0/CVE-2020-068..."

But you want a nice interface for that? We offer that at Virtalabs, though we specialize on ICS that are in hospitals:

https://www.virtalabs.com

You could grab quite a lot of this from the OVAL feeds that multiple distros offer.

Getting a verified POC is a much harder problem.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.