Kota Kanbe
baa0e897b2
fix: a bug of diff logic when multiple oval defs found for a certain CVE-ID and same updated_at ( #627 )
...
* fix: a bug of diff logic when multiple oval-defs hav certain CVE-ID and same updated_at
Commented out beause a bug of diff logic when multiple oval defs has certain CVE-ID and same updated_at.
If these OVAL defs have different affected packages, this logic detects not-updated-CVE-ID as updated.
This logic will be uncommented after integration with ghost https://github.com/knqyf263/gost
2018-03-26 22:29:14 +09:00
Kota Kanbe
fd1429fef0
Fix diff logic ( #619 )
...
* fix: change ControlPath to .vuls of SSH option (#618 )
* fix: Bug of diff logic
2018-03-16 15:07:26 +09:00
kazuminn
d3c421a4a8
inform new release on diff option ( #614 )
...
inform new release on diff option (#614 )
2018-03-15 13:30:33 +09:00
Kota Kanbe
092a19bdc1
fix: bug of report -diff option ( #607 )
2018-03-06 16:50:09 +09:00
Kota Kanbe
6d3398574c
fix: support CentOS cloud image ( #606 )
...
https://bugzilla.redhat.com/show_bug.cgi?id=1332025
2018-03-06 14:10:21 +09:00
shimojomasatsugummm
84d0655c52
fix typo Privious -> Previous ( #523 )
2017-10-25 18:51:29 +09:00
Kota Kanbe
5798e3af83
Add filter options to tui subcommand ( #508 )
2017-09-29 08:37:32 +09:00
kota kanbe
93f741da35
Show Not Fixed Yet in report, tui
2017-08-19 00:21:11 +09:00
kota kanbe
6129ac7bd4
Change model ScanResult.ScannedCves.AffectedPackages
2017-08-17 12:18:06 +09:00
kota kanbe
c66898e608
Set actually affected package's name only to vulnInfo.PackageNames
2017-08-13 20:50:26 +09:00
kota kanbe
008da49b83
Imlement OVAL scan on Oracle Linux
2017-08-09 16:15:25 +09:00
kota kanbe
9899cba816
Display summary of advisory when no entry in NVD, OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
27724a2faf
Use CVSS seveirty of distro advisory when no entiry in NVD and OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
8b6a283114
Add a deep flag to scan
2017-08-09 16:15:25 +09:00
kota kanbe
1aae425945
Undisplay the number of CVEs at the end of 'scan --package-list-only'
2017-08-09 16:15:25 +09:00
Kota Kanbe
63394a2400
Fix error handling while loading JSON in reporting
2017-08-09 16:15:24 +09:00
Kota Kanbe
a7951b727c
Remove commented out code
2017-08-09 16:15:24 +09:00
Kota Kanbe
c6ad9ea57a
Fix tui
2017-08-09 16:15:24 +09:00
Kota Kanbe
a14810bbd4
Fix -to-slack
2017-08-09 16:15:24 +09:00
Kota Kanbe
bc5a95ebb3
Fix -to-email
2017-08-09 16:15:24 +09:00
Kota Kanbe
ad096196ee
Add vendor links to -format-shor-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
af66e44427
SHow Vendor Links in text report
2017-08-09 16:15:24 +09:00
Kota Kanbe
0a012273ec
Fix -ignore-unscored-cves
2017-08-09 16:15:24 +09:00
Kota Kanbe
73b011eba7
Sort results order by CVSS score, CVE-ID
2017-08-09 16:15:24 +09:00
Kota Kanbe
d9bc4499a4
Refactoring
2017-08-09 16:15:24 +09:00
Kota Kanbe
4fcdea3ccb
Implement -format-full-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
3be11cf52f
Implement format-short-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
d626cc8a8b
Rename PackageInfoList to Packages
2017-08-09 16:15:24 +09:00
Kota Kanbe
a2c364f9eb
Refacotring
2017-08-09 16:15:23 +09:00
Kota Kanbe
c103b79ec2
Change models structure
2017-08-09 16:15:23 +09:00
Kota Kanbe
b545b5d0a3
Unify the models of NVD, JVN, OVAL
2017-08-09 16:15:23 +09:00
Kota Kanbe
342a1c6cff
Refactoring
2017-08-09 16:15:23 +09:00
Kota Kanbe
703c142659
Change NVD URL to new one ( #419 )
2017-04-06 18:08:24 +09:00
Avi Miller
986762ca85
Add Oracle Linux support ( #386 )
...
Adding support for Oracle Linux
2017-03-16 17:07:43 +09:00
Kota Kanbe
732d95098a
Fix updatalbe packages count #373
2017-03-07 13:49:25 +09:00
Kota Kanbe
a86035c0bf
Output changelog in report, TUI and JSON for Ubuntu/Debian/CentOS
2017-03-02 22:22:35 +09:00
Kota Kanbe
b4be11775e
Fix candidate to confidence.
2017-02-23 12:05:13 +09:00
Kota Kanbe
1b9aafbbaf
Output confidence ranking of detection accuracy to JSON or Reporting
2017-02-22 20:51:58 +09:00
Kota Kanbe
386b97d2be
Continue scanning even when some hosts have tech issues
...
see #264
2017-02-13 21:55:55 +09:00
Kota Kanbe
20275a1063
Add local scan mode.
...
If the scan target server is localhost, Don't use SSH. #210
2017-01-17 00:16:46 +09:00
Kota Kanbe
155cadf901
Add report subcommand, change scan options. Bump up ver #239
2017-01-05 13:40:25 +09:00
Oliver Bristow
cda69dc7f0
Use RFC3339 timestamps in the results
2016-11-14 19:10:58 +00:00
Kota Kanbe
3c39f1e737
Fix -results-dir option of scan subcommand
2016-09-14 21:45:03 +09:00
Kota Kanbe
fb70d1b2f0
Fix a mode of files/dir (report, log)
2016-09-14 17:47:12 +09:00
Kota Kanbe
29151fa267
Support CWE(Common Weakness Enumeration)
2016-09-07 19:42:46 +09:00
Sadayuki Matsuno
595729cdf8
delete sqlite3
2016-09-06 12:25:47 +09:00
kota kanbe
17181405e3
Enable to detect vulnerabilities on FreeBSD
2016-06-14 16:34:11 +09:00
kota kanbe
86f9e5ce96
Add -report-text option, Fix small bug of report in japanese
2016-05-30 12:23:02 +09:00
kota kanbe
54d6217b93
Add JSONWriter, Fix CVE sort order of report
2016-05-29 10:03:22 +09:00
kota kanbe
6d528e741d
Add ignore-unscored-cves option
2016-05-24 08:35:36 +09:00
