Merge branch 'master' of https://github.com/future-architect/vuls

* 'master' of https://github.com/future-architect/vuls: fix goreleaser.yml Add news to readme
Add news to readme
2019-04-08 21:19:12 +09:00 · 2019-04-08 21:17:05 +09:00 · 2019-04-08 19:51:58 +09:00 · 2019-04-08 18:22:03 +09:00 · 2019-04-08 17:33:57 +09:00 · 2019-04-08 17:27:44 +09:00
82 changed files with 7143 additions and 1124 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,5 @@ log/
 results/
 *config.toml
 !setup/docker/*
+.DS_Store
+dist/
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -9,7 +9,9 @@ builds:
  goarch:
  - amd64
  main: .
-  ldflags: -s -w -X main.version={{.Version}} -X main.revision={{.Commit}}
+  flags:
+      - -a
+  ldflags: -s -w -X main.version={{.Version}} -X main.revision={{.Commit}} 
  binary: vuls
 archive:
  format: tar.gz
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,7 +1,7 @@
 language: go

 go:
-  - "1.11.x"
+  - "1.12.x"

 after_success:
  - test -n "$TRAVIS_TAG" && curl -sL https://git.io/goreleaser | bash
--- a/2
+++ b/2
@@ -25,7 +25,7 @@ RUN apk add --no-cache \

 COPY --from=builder /go/bin/vuls /usr/local/bin/

-VOLUME [$WORKDIR, $LOGDIR]
+VOLUME ["$WORKDIR", "$LOGDIR"]
 WORKDIR $WORKDIR
 ENV PWD $WORKDIR

--- a/8
+++ b/8
@@ -5,7 +5,7 @@
 	install \
 	all \
 	vendor \
-	lint \
+ 	lint \
 	vet \
 	fmt \
 	fmtcheck \
@@ -18,8 +18,9 @@ SRCS = $(shell git ls-files '*.go')
 PKGS = $(shell go list ./...)
 VERSION := $(shell git describe --tags --abbrev=0)
 REVISION := $(shell git rev-parse --short HEAD)
+BUILDTIME := $(shell date "+%Y%m%d_%H%M%S")
 LDFLAGS := -X 'github.com/future-architect/vuls/config.Version=$(VERSION)' \
-	-X 'github.com/future-architect/vuls/config.Revision=$(REVISION)'
+    -X 'github.com/future-architect/vuls/config.Revision=build-$(BUILDTIME)_$(REVISION)'

 all: dep build

@@ -32,6 +33,9 @@ depup:
 	dep ensure -update -v

 build: main.go dep pretest
+	go build -a -ldflags "$(LDFLAGS)" -o vuls $<
+
+b: 	main.go dep pretest
 	go build -ldflags "$(LDFLAGS)" -o vuls $<

 install: main.go dep pretest
--- a/Gopkg.lock
+++ b/Gopkg.lock
@@ -2,18 +2,26 @@


 [[projects]]
-  digest = "1:2f806c4d4e9dee6f144c59099abfa9243a42a8ad9fe0d648273f6f192de6174a"
+  digest = "1:ac06a4a43f8618111e6f37d22280a4d58d6d09ca621437cce93af7623c2117d3"
+  name = "contrib.go.opencensus.io/exporter/ocagent"
+  packages = ["."]
+  pruneopts = "UT"
+  revision = "bc69a60230000ba2fe80ce3aba578b8cc6ec7587"
+  version = "v0.4.11"
+
+[[projects]]
+  digest = "1:e5385be33ddb613a47d6648aa2cde03750b1d80a5e6800b809cab755ebfcc188"
  name = "github.com/Azure/azure-sdk-for-go"
  packages = [
    "storage",
    "version",
  ]
  pruneopts = "UT"
-  revision = "ef9744da754d0cf00d0cfeae7d1a83f2245a4b1c"
-  version = "v21.2.0"
+  revision = "d659f2a91175cac99aa5627d09b83026eacc978d"
+  version = "v27.0.0"

 [[projects]]
-  digest = "1:1fe87891e29a291377b0b2224b99fd857553dff7dce8a6ffb5fda003ce52a8b0"
+  digest = "1:b34c165560597b272b6ccf89dd3175eb7717e6247ce5ece215fa1905a7e19c22"
  name = "github.com/Azure/go-autorest"
  packages = [
    "autorest",
@@ -21,11 +29,11 @@
    "autorest/azure",
    "autorest/date",
    "logger",
-    "version",
+    "tracing",
  ]
  pruneopts = "UT"
-  revision = "4b7f49dc5db2e1e6d528524d269b4181981a7ebf"
-  version = "v11.1.1"
+  revision = "3b1641ed03046f2ee28d73f7a51e5b884d55b92a"
+  version = "v11.7.0"

 [[projects]]
  digest = "1:9f3b30d9f8e0d7040f729b82dcbc8f0dead820a133b3147ce355fc451f32d761"
@@ -52,7 +60,7 @@
  version = "v9"

 [[projects]]
-  digest = "1:b75da992f409ab285c5c2d57869d3df50e1d6869d25bee46bb04571a81db53d9"
+  digest = "1:ced9b678d6fdca06376ad5a1203bf7ab164a500268714fedaebdb3b9e90e6530"
  name = "github.com/aws/aws-sdk-go"
  packages = [
    "aws",
@@ -64,6 +72,7 @@
    "aws/credentials",
    "aws/credentials/ec2rolecreds",
    "aws/credentials/endpointcreds",
+    "aws/credentials/processcreds",
    "aws/credentials/stscreds",
    "aws/csm",
    "aws/defaults",
@@ -72,6 +81,7 @@
    "aws/request",
    "aws/session",
    "aws/signer/v4",
+    "internal/ini",
    "internal/s3err",
    "internal/sdkio",
    "internal/sdkrand",
@@ -89,8 +99,8 @@
    "service/sts",
  ]
  pruneopts = "UT"
-  revision = "66832f7f150914a46ffbfc03210f3b9cb0e4c005"
-  version = "v1.15.57"
+  revision = "56c1def75689cceec1fa6f14c2eedb4b798827f9"
+  version = "v1.19.11"

 [[projects]]
  digest = "1:0f98f59e9a2f4070d66f0c9c39561f68fcd1dc837b22a852d28d0003aebd1b1e"
@@ -101,12 +111,27 @@
  version = "v1.3.1"

 [[projects]]
-  digest = "1:2209584c0f7c9b68c23374e659357ab546e1b70eec2761f03280f69a8fd23d77"
+  digest = "1:166438587ed45ac211dab8a3ecebf4fa0c186d0db63430fb9127bbc2e5fcdc67"
  name = "github.com/cenkalti/backoff"
  packages = ["."]
  pruneopts = "UT"
-  revision = "2ea60e5f094469f9e65adb9cd103795b73ae743e"
-  version = "v2.0.0"
+  revision = "1e4cf3da559842a91afcb6ea6141451e6c30c618"
+  version = "v2.1.1"
+
+[[projects]]
+  digest = "1:fdb4ed936abeecb46a8c27dcac83f75c05c87a46d9ec7711411eb785c213fa02"
+  name = "github.com/census-instrumentation/opencensus-proto"
+  packages = [
+    "gen-go/agent/common/v1",
+    "gen-go/agent/metrics/v1",
+    "gen-go/agent/trace/v1",
+    "gen-go/metrics/v1",
+    "gen-go/resource/v1",
+    "gen-go/trace/v1",
+  ]
+  pruneopts = "UT"
+  revision = "a105b96453fe85139acc07b68de48f2cbdd71249"
+  version = "v0.2.0"

 [[projects]]
  digest = "1:e04c00d619875ce5fa67180891984a9b1fadcc031af36bcd7a3509cbdad1df15"
@@ -125,12 +150,12 @@
  version = "v3.2.0"

 [[projects]]
-  digest = "1:865079840386857c809b72ce300be7580cb50d3d3129ce11bf9aa6ca2bc1934a"
+  digest = "1:938a2672d6ebbb7f7bc63eee3e4b9464c16ffcf77ec8913d3edbf32b4e3984dd"
  name = "github.com/fatih/color"
  packages = ["."]
  pruneopts = "UT"
-  revision = "5b77d2a35fb0ede96d138fc9a99f5c9b6aef11b4"
-  version = "v1.7.0"
+  revision = "570b54cabe6b8eb0bc2dfce68d964677d63b5260"
+  version = "v1.5.0"

 [[projects]]
  digest = "1:abeb38ade3f32a92943e5be54f55ed6d6e3b6602761d74b4aab4c9dd45c18abd"
@@ -141,15 +166,7 @@
  version = "v1.4.7"

 [[projects]]
-  digest = "1:15e27372d379b45b18ac917b9dafc45c45485239490ece18cca97a12f9591146"
-  name = "github.com/go-ini/ini"
-  packages = ["."]
-  pruneopts = "UT"
-  revision = "9c8236e659b76e87bf02044d06fde8683008ff3e"
-  version = "v1.39.0"
-
-[[projects]]
-  digest = "1:7c2fd446293ff7799cc496d3446e674ee67902d119f244de645caf95dff1bb98"
+  digest = "1:33082c63746b464db3d1c2c07a1396d860484d97fe857ef9e8668a9b406db09f"
  name = "github.com/go-redis/redis"
  packages = [
    ".",
@@ -158,20 +175,19 @@
    "internal/hashtag",
    "internal/pool",
    "internal/proto",
-    "internal/singleflight",
    "internal/util",
  ]
  pruneopts = "UT"
-  revision = "f3bba01df2026fc865f7782948845db9cf44cf23"
-  version = "v6.14.1"
+  revision = "d22fde8721cc915a55aeb6b00944a76a92bfeb6e"
+  version = "v6.15.2"

 [[projects]]
-  digest = "1:adea5a94903eb4384abef30f3d878dc9ff6b6b5b0722da25b82e5169216dfb61"
+  digest = "1:ec6f9bf5e274c833c911923c9193867f3f18788c461f76f05f62bb1510e0ae65"
  name = "github.com/go-sql-driver/mysql"
  packages = ["."]
  pruneopts = "UT"
-  revision = "d523deb1b23d913de5bdada721a6071e71283618"
-  version = "v1.4.0"
+  revision = "72cd26f257d44c1114970e19afddcd812016007e"
+  version = "v1.4.1"

 [[projects]]
  digest = "1:586ea76dbd0374d6fb649a91d70d652b7fe0ccffb8910a77468e7702e7901f3d"
@@ -182,12 +198,33 @@
  version = "v1.8.0"

 [[projects]]
-  branch = "master"
-  digest = "1:df265b7f54410945dad5cf5979d91461b9fa7ff9b397ab58d2d577002a8a0e24"
+  digest = "1:489a99067cd08971bd9c1ee0055119ba8febc1429f9200ab0bec68d35e8c4833"
+  name = "github.com/golang/protobuf"
+  packages = [
+    "jsonpb",
+    "proto",
+    "protoc-gen-go/descriptor",
+    "protoc-gen-go/generator",
+    "protoc-gen-go/generator/internal/remap",
+    "protoc-gen-go/plugin",
+    "ptypes",
+    "ptypes/any",
+    "ptypes/duration",
+    "ptypes/struct",
+    "ptypes/timestamp",
+    "ptypes/wrappers",
+  ]
+  pruneopts = "UT"
+  revision = "b5d812f8a3706043e23a9cd5babf2e5423744d30"
+  version = "v1.3.1"
+
+[[projects]]
+  digest = "1:9565826757d815638581d6e3a2704b64400928ef9cba84c3cb21b2dc93eca4d5"
  name = "github.com/google/subcommands"
  packages = ["."]
  pruneopts = "UT"
-  revision = "46f0354f63152e8801bb460d26f5b6c4c878efbb"
+  revision = "d47216cd17848d55a33e6f651cbe408243ed55b8"
+  version = "1.0.1"

 [[projects]]
  digest = "1:7b5c6e2eeaa9ae5907c391a91c132abfd5c9e8a784a341b5625e750c67e6825d"
@@ -218,12 +255,32 @@
  revision = "e9e44961e26f513866063f54bf85070db95600f7"

 [[projects]]
-  digest = "1:77395dd3847dac9c45118c668f5dab85aedf0163dc3b38aea6578c5cf0d502f9"
+  digest = "1:4cbbca3db0ff89197d000fb2fa0b90ca4516a7fbd4d8cd9fa4bebf17df484f6d"
+  name = "github.com/grpc-ecosystem/grpc-gateway"
+  packages = [
+    "internal",
+    "runtime",
+    "utilities",
+  ]
+  pruneopts = "UT"
+  revision = "20f268a412e5b342ebfb1a0eef7c3b7bd6c260ea"
+  version = "v1.8.5"
+
+[[projects]]
+  digest = "1:950caca7dfcf796419232ba996c9c3539d09f26af27ba848c4508e604c13efbb"
  name = "github.com/hashicorp/go-version"
  packages = ["."]
  pruneopts = "UT"
-  revision = "b5a281d3160aa11950a6182bd9a9dc2cb1e02d50"
-  version = "v1.0.0"
+  revision = "d40cf49b3a77bba84a7afdbd7f1dc295d114efb1"
+  version = "v1.1.0"
+
+[[projects]]
+  digest = "1:67474f760e9ac3799f740db2c489e6423a4cde45520673ec123ac831ad849cb8"
+  name = "github.com/hashicorp/golang-lru"
+  packages = ["simplelru"]
+  pruneopts = "UT"
+  revision = "7087cb70de9f7a8bc0a10c375cb0d2280a8edf9c"
+  version = "v0.5.1"

 [[projects]]
  digest = "1:c0d19ab64b32ce9fe5cf4ddceba78d5bc9807f0016db6b1183599da3dcc24d10"
@@ -269,7 +326,7 @@
  version = "v2.14"

 [[projects]]
-  digest = "1:8fe19266ce82209076d4a81007ff93f40dd349faca4a917aea59d33956bbd4fd"
+  digest = "1:ff312c4d510c67954a6fc6a11c9ff72a2b2169584776b7419c7b8c729e2b13ac"
  name = "github.com/jinzhu/gorm"
  packages = [
    ".",
@@ -278,8 +335,8 @@
    "dialects/sqlite",
  ]
  pruneopts = "UT"
-  revision = "6ed508ec6a4ecb3531899a69cbc746ccf65a4166"
-  version = "v1.9.1"
+  revision = "472c70caa40267cb89fd8facb07fe6454b578626"
+  version = "v1.9.2"

 [[projects]]
  branch = "master"
@@ -290,11 +347,11 @@
  revision = "04140366298a54a039076d798123ffa108fff46c"

 [[projects]]
-  digest = "1:e22af8c7518e1eab6f2eab2b7d7558927f816262586cd6ed9f349c97a6c285c4"
+  digest = "1:bb81097a5b62634f3e9fec1014657855610c82d19b9a40c17612e32651e35dca"
  name = "github.com/jmespath/go-jmespath"
  packages = ["."]
  pruneopts = "UT"
-  revision = "0b12d6b5"
+  revision = "c2b33e84"

 [[projects]]
  digest = "1:114ecad51af93a73ae6781fd0d0bc28e52b433c852b84ab4b4c109c15e6c6b6d"
@@ -305,12 +362,12 @@
  version = "v0.4.0"

 [[projects]]
-  digest = "1:16dd6b893b78a50564cdde1d9f7ea67224dece11bb0886bd882f1dc3dc1d440d"
+  digest = "1:86c75d55fde56a814f69515d092963634d6f5f6bc1c3e9091b01fbe373a9546e"
  name = "github.com/k0kubun/pp"
  packages = ["."]
  pruneopts = "UT"
-  revision = "027a6d1765d673d337e687394dbe780dd64e2a1e"
-  version = "v2.3.0"
+  revision = "3d73dea227e0711e38b911ffa6fbafc8ff6b2991"
+  version = "v3.0.1"

 [[projects]]
  branch = "master"
@@ -342,7 +399,7 @@

 [[projects]]
  branch = "master"
-  digest = "1:784bbde718d6f806578d929df8ad88a24817ca4fea5ce498165f46ff238d0deb"
+  digest = "1:acca5c567e76e94e81f8d65893e2a9cd12d914dd688731f461a5ebdb180d4938"
  name = "github.com/knqyf263/gost"
  packages = [
    "config",
@@ -351,19 +408,19 @@
    "util",
  ]
  pruneopts = "UT"
-  revision = "920046ad61b30ed1d554140c85daaa9e3ed2ca9e"
+  revision = "39175c0da9e325ae7260df93ad14b0343d7d5559"

 [[projects]]
-  digest = "1:0a69a1c0db3591fcefb47f115b224592c8dfa4368b7ba9fae509d5e16cdc95c8"
+  digest = "1:31e761d97c76151dde79e9d28964a812c46efc5baee4085b86f68f0c654450de"
  name = "github.com/konsorten/go-windows-terminal-sequences"
  packages = ["."]
  pruneopts = "UT"
-  revision = "5c8c8bd35d3832f5d134ae1e1e375b69a4d25242"
-  version = "v1.0.1"
+  revision = "f55edac94c9bbba5d6182a4be46d86a2c9b5b50e"
+  version = "v1.0.2"

 [[projects]]
  branch = "master"
-  digest = "1:336333e5514fc6178cdb4245f64cc34f9c0212daa523a5267e357a7535d5470f"
+  digest = "1:b7132b491fe613cd364226a39cfb0862941c5661a92bab7e66b4c6190f10ee61"
  name = "github.com/kotakanbe/go-cve-dictionary"
  packages = [
    "config",
@@ -372,7 +429,7 @@
    "models",
  ]
  pruneopts = "UT"
-  revision = "bff11c4b0f9d2915f21f49d4530c99033898dbca"
+  revision = "5fe52611f0b8dff9f95374d9cd7bdb23cc5fc67a"

 [[projects]]
  digest = "1:54d3c90db1164399906830313a6fce7770917d7e4a12da8f2d8693d18ff5ef27"
@@ -383,7 +440,7 @@
  version = "v0.1.0"

 [[projects]]
-  digest = "1:564a03e039dfed4121709e3d76c05c08a9d4291335ca682b5065ae46285a688a"
+  digest = "1:8fd95e6bab4d09a0f610bd5c02ef6ec7d0d91da5a72b7cfcbfd67254bcb72b75"
  name = "github.com/kotakanbe/goval-dictionary"
  packages = [
    "config",
@@ -392,8 +449,8 @@
    "models",
  ]
  pruneopts = "UT"
-  revision = "818624daf2658cc177ea93100ff20c5caed064b6"
-  version = "v0.1.0"
+  revision = "5070051ecafdf15cbe2490e71ec038de7d25b71e"
+  version = "v0.1.1"

 [[projects]]
  branch = "master"
@@ -404,15 +461,15 @@
  revision = "928f7356cb964637e2489a6ef37eee55181676c5"

 [[projects]]
-  digest = "1:faee5b9f53eb1ae4eb04708c040c8c4dd685ce46509671e57a08520a15c54368"
+  digest = "1:01eb0269028d3c2e21b5b6cd9b1ba81bc4170ab293fcffa84e3aa3a6138a92e8"
  name = "github.com/labstack/gommon"
  packages = [
    "color",
    "log",
  ]
  pruneopts = "UT"
-  revision = "2a618302b929cc20862dda3aa6f02f64dbe740dd"
-  version = "v0.2.7"
+  revision = "7fd9f68ece0bcb1a905fac8f1549f0083f71c51b"
+  version = "v0.2.8"

 [[projects]]
  digest = "1:b18ffc558326ebaed3b4a175617f1e12ed4e3f53d6ebfe5ba372a3de16d22278"
@@ -443,36 +500,36 @@
  version = "v1.1.0"

 [[projects]]
-  digest = "1:c658e84ad3916da105a761660dcaeb01e63416c8ec7bc62256a9b411a05fcd67"
+  digest = "1:2fa7b0155cd54479a755c629de26f888a918e13f8857a2c442205d825368e084"
  name = "github.com/mattn/go-colorable"
  packages = ["."]
  pruneopts = "UT"
-  revision = "167de6bfdfba052fa6b2d3664c8f5272e23c9072"
-  version = "v0.0.9"
+  revision = "3a70a971f94a22f2fa562ffcc7a0eb45f5daf045"
+  version = "v0.1.1"

 [[projects]]
-  digest = "1:0981502f9816113c9c8c4ac301583841855c8cf4da8c72f696b3ebedf6d0e4e5"
+  digest = "1:e150b5fafbd7607e2d638e4e5cf43aa4100124e5593385147b0a74e2733d8b0d"
  name = "github.com/mattn/go-isatty"
  packages = ["."]
  pruneopts = "UT"
-  revision = "6ca4dbf54d38eea1a992b3c722a76a5d1c4cb25c"
-  version = "v0.0.4"
+  revision = "c2a7a6ca930a4cd0bc33a3f298eb71960732a3a7"
+  version = "v0.0.7"

 [[projects]]
-  digest = "1:cdb899c199f907ac9fb50495ec71212c95cb5b0e0a8ee0800da0238036091033"
+  digest = "1:0356f3312c9bd1cbeda81505b7fd437501d8e778ab66998ef69f00d7f9b3a0d7"
  name = "github.com/mattn/go-runewidth"
  packages = ["."]
  pruneopts = "UT"
-  revision = "ce7b0b5c7b45a81508558cd1dba6bb1e4ddb51bb"
-  version = "v0.0.3"
+  revision = "3ee7d812e62a0804a7d0a324e0249ca2db3476d3"
+  version = "v0.0.4"

 [[projects]]
-  digest = "1:3cafc6a5a1b8269605d9df4c6956d43d8011fc57f266ca6b9d04da6c09dee548"
+  digest = "1:4a49346ca45376a2bba679ca0e83bec949d780d4e927931317904bad482943ec"
  name = "github.com/mattn/go-sqlite3"
  packages = ["."]
  pruneopts = "UT"
-  revision = "25ecb14adfc7543176f7d85291ec7dba82c6f7e4"
-  version = "v1.9.0"
+  revision = "c7c4067b79cc51e6dfdcef5c702e74b1e0fa7c75"
+  version = "v1.10.0"

 [[projects]]
  branch = "master"
@@ -483,12 +540,12 @@
  revision = "9520e82c474b0a04dd04f8a40959027271bab992"

 [[projects]]
-  digest = "1:78bbb1ba5b7c3f2ed0ea1eab57bdd3859aec7e177811563edc41198a760b06af"
+  digest = "1:5d231480e1c64a726869bc4142d270184c419749d34f167646baa21008eb0a79"
  name = "github.com/mitchellh/go-homedir"
  packages = ["."]
  pruneopts = "UT"
-  revision = "ae18d6b8b3205b561c79e8e5f69bff09736185f4"
-  version = "v1.0.0"
+  revision = "af06845cf3004701891bf4fdb884bfe4920b3727"
+  version = "v1.1.0"

 [[projects]]
  digest = "1:53bc4cd4914cd7cd52139990d5170d6dc99067ae31c56530621b18b35fc30318"
@@ -499,16 +556,16 @@
  version = "v1.1.2"

 [[projects]]
-  branch = "master"
  digest = "1:7aefb397a53fc437c90f0fdb3e1419c751c5a3a165ced52325d5d797edf1aca6"
  name = "github.com/moul/http2curl"
  packages = ["."]
  pruneopts = "UT"
  revision = "9ac6cf4d929b2fa8fd2d2e6dec5bb0feb4f4911d"
+  version = "v1.0.0"

 [[projects]]
  branch = "master"
-  digest = "1:c72d41e2be29143a802361f175f9eafe81ecd35119b80b7673bb3e997b086687"
+  digest = "1:800f856349089adbb2987d9581a937e5908d2f0b486e7179e03725e8c354693f"
  name = "github.com/mozqnet/go-exploitdb"
  packages = [
    "db",
@@ -516,7 +573,7 @@
    "util",
  ]
  pruneopts = "UT"
-  revision = "b359807ea9b24f7ce80d1bfa02ffca5ed428ffb5"
+  revision = "812d09910e5c7cace0807618a6cb99c0f5a9d7d8"

 [[projects]]
  digest = "1:95d38d218bf2290987c6b0e885a9f0f2d3d3239235acaddca01c3fe36e5e5566"
@@ -531,19 +588,19 @@

 [[projects]]
  branch = "master"
-  digest = "1:f335d800550786b6f51ddaedb9d1107a7a72f4a2195e5b039dd7c0e103e119bc"
+  digest = "1:e4f1b6b3c33388b1f6f3d630280d9b0870c1e2f80379dfd2f89dd06425e9e6b9"
  name = "github.com/nsf/termbox-go"
  packages = ["."]
  pruneopts = "UT"
-  revision = "b66b20ab708e289ff1eb3e218478302e6aec28ce"
+  revision = "288510b9734e30e7966ec2f22b87c5f8e67345e3"

 [[projects]]
-  branch = "master"
-  digest = "1:f611266e3ac01ab4adb6f1d67f6c1be82998d02f452faff450596658712d860b"
+  digest = "1:abcdbf03ca6ca13d3697e2186edc1f33863bbdac2b3a44dfa39015e8903f7409"
  name = "github.com/olekukonko/tablewriter"
  packages = ["."]
  pruneopts = "UT"
-  revision = "be2c049b30ccd4d3fd795d6bf7dce74e42eeedaa"
+  revision = "e6d60cf7ba1f42d86d54cdf5508611c4aafb3970"
+  version = "v0.0.1"

 [[projects]]
  digest = "1:d776f3e95774a8719f2e57fabbbb33103035fe072dcf6f1864f33abd17b753e5"
@@ -554,20 +611,20 @@
  version = "v0.2.15"

 [[projects]]
-  digest = "1:95741de3af260a92cc5c7f3f3061e85273f5a81b5db20d4bd68da74bd521675e"
+  digest = "1:e0f50a07c0def90588d69f77178712c6fdc67eb6576365f551cce98b44b501bf"
  name = "github.com/pelletier/go-toml"
  packages = ["."]
  pruneopts = "UT"
-  revision = "c01d1270ff3e442a8a57cddc1c92dc1138598194"
-  version = "v1.2.0"
+  revision = "63909f0a90ab0f36909e8e044e46ace10cf13ba2"
+  version = "v1.3.0"

 [[projects]]
-  digest = "1:40e195917a951a8bf867cd05de2a46aaf1806c50cf92eebf4c16f78cd196f747"
+  digest = "1:cf31692c14422fa27c83a05292eb5cbe0fb2775972e8f1f8446a71549bd8980b"
  name = "github.com/pkg/errors"
  packages = ["."]
  pruneopts = "UT"
-  revision = "645ef00459ed84a119197bfb8d8205042c6df63d"
-  version = "v0.8.0"
+  revision = "ba968bfe8b2f7e042a574c888954fccecfa385b4"
+  version = "v0.8.1"

 [[projects]]
  digest = "1:1a23fdd843129ef761ffe7651bc5fe7c5b09fbe933e92783ab06cc11c37b7b37"
@@ -587,38 +644,38 @@

 [[projects]]
  branch = "master"
-  digest = "1:b17bd7b89f445e9c4b82f6144a8fe41e60d921fbe4279f669f9464b277927254"
+  digest = "1:cabe9ec8289704e71e45138c18ad90275bce25a8d61145c4130b55d9d9a6d6dc"
  name = "github.com/sirupsen/logrus"
  packages = ["."]
  pruneopts = "UT"
-  revision = "680f584d621da87ee04ea659130e149ba9d23cae"
+  revision = "9b3cdde74fbe9443d704467498a7dcb61a79de9b"

 [[projects]]
-  digest = "1:6a4a11ba764a56d2758899ec6f3848d24698d48442ebce85ee7a3f63284526cd"
+  digest = "1:bb495ec276ab82d3dd08504bbc0594a65de8c3b22c6f2aaa92d05b73fbf3a82e"
  name = "github.com/spf13/afero"
  packages = [
    ".",
    "mem",
  ]
  pruneopts = "UT"
-  revision = "d40851caa0d747393da1ffb28f7f9d8b4eeffebd"
-  version = "v1.1.2"
+  revision = "588a75ec4f32903aa5e39a2619ba6a4631e28424"
+  version = "v1.2.2"

 [[projects]]
-  digest = "1:516e71bed754268937f57d4ecb190e01958452336fa73dbac880894164e91c1f"
+  digest = "1:08d65904057412fc0270fc4812a1c90c594186819243160dc779a402d4b6d0bc"
  name = "github.com/spf13/cast"
  packages = ["."]
  pruneopts = "UT"
-  revision = "8965335b8c7107321228e3e3702cab9832751bac"
-  version = "v1.2.0"
+  revision = "8c9545af88b134710ab1cd196795e7f2388358d7"
+  version = "v1.3.0"

 [[projects]]
-  digest = "1:68ea4e23713989dc20b1bded5d9da2c5f9be14ff9885beef481848edd18c26cb"
+  digest = "1:1b753ec16506f5864d26a28b43703c58831255059644351bbcb019b843950900"
  name = "github.com/spf13/jwalterweatherman"
  packages = ["."]
  pruneopts = "UT"
-  revision = "4a4406e478ca629068e7768fc33f3f044173c0a6"
-  version = "v1.0.0"
+  revision = "94f6ae3ed3bceceafa716478c5fbf8d29ca601a1"
+  version = "v1.1.0"

 [[projects]]
  digest = "1:c1b1102241e7f645bc8e0c22ae352e8f0dc6484b6cb4d132fa9f24174e0119e2"
@@ -629,12 +686,12 @@
  version = "v1.0.3"

 [[projects]]
-  digest = "1:214775c11fd26da94a100111a62daa25339198a4f9c57cb4aab352da889f5b93"
+  digest = "1:1b773526998f3dbde3a51a4a5881680c4d237d3600f570d900f97ac93c7ba0a8"
  name = "github.com/spf13/viper"
  packages = ["."]
  pruneopts = "UT"
-  revision = "2c12c60302a5a0e62ee102ca9bc996277c2f64f5"
-  version = "v1.2.1"
+  revision = "9e56dacc08fbbf8c9ee2dbc717553c758ce42bc9"
+  version = "v1.3.2"

 [[projects]]
  digest = "1:c468422f334a6b46a19448ad59aaffdfc0a36b08fdcc1c749a0b29b6453d7e59"
@@ -645,12 +702,12 @@
  version = "v1.0.0"

 [[projects]]
-  branch = "master"
-  digest = "1:268b8bce0064e8c057d7b913605459f9a26dcab864c0886a56d196540fbf003f"
+  digest = "1:4d29fdc69817829d8c78473d61613d984ce59675110cee7a2f0314f332cc70a2"
  name = "github.com/valyala/fasttemplate"
  packages = ["."]
  pruneopts = "UT"
-  revision = "dcecefd839c4193db0d35b88ec65b4c12d360ab0"
+  revision = "8b5e4e491ab636663841c42ea3c5a9adebabaf36"
+  version = "v1.0.1"

 [[projects]]
  branch = "master"
@@ -660,9 +717,36 @@
  pruneopts = "UT"
  revision = "0a0be1dd9d0855b50be0be5a10ad3085382b6d59"

+[[projects]]
+  digest = "1:4c93890bbbb5016505e856cb06b5c5a2ff5b7217584d33f2a9071ebef4b5d473"
+  name = "go.opencensus.io"
+  packages = [
+    ".",
+    "internal",
+    "internal/tagencoding",
+    "metric/metricdata",
+    "metric/metricproducer",
+    "plugin/ocgrpc",
+    "plugin/ochttp",
+    "plugin/ochttp/propagation/b3",
+    "plugin/ochttp/propagation/tracecontext",
+    "resource",
+    "stats",
+    "stats/internal",
+    "stats/view",
+    "tag",
+    "trace",
+    "trace/internal",
+    "trace/propagation",
+    "trace/tracestate",
+  ]
+  pruneopts = "UT"
+  revision = "43463a80402d8447b7fce0d2c58edf1687ff0b58"
+  version = "v0.19.3"
+
 [[projects]]
  branch = "master"
-  digest = "1:1e63ada43d2806f05965163d1b7d0de9366d60a9077eb1b0c3618156b445e713"
+  digest = "1:1359e38bae74624895df50f24c994c59db125b686ed6047a3c0a1b7cb96f0c0a"
  name = "golang.org/x/crypto"
  packages = [
    "curve25519",
@@ -676,30 +760,56 @@
    "ssh/terminal",
  ]
  pruneopts = "UT"
-  revision = "0c41d7ab0a0ee717d4590a44bcb987dfd9e183eb"
+  revision = "38d8ce5564a5b71b2e3a00553993f1b9a7ae852f"

 [[projects]]
  branch = "master"
-  digest = "1:fa44bfbd6a531dbb03a45ba46765f876abd24579fcf6d1b64b8546b98a00f15b"
+  digest = "1:df69c1d5940da38566e9d90689ae308d78d5d510a72466384a6d8eca40bca80f"
  name = "golang.org/x/net"
  packages = [
    "context",
+    "context/ctxhttp",
+    "http/httpguts",
+    "http2",
+    "http2/hpack",
    "idna",
+    "internal/timeseries",
    "publicsuffix",
+    "trace",
  ]
  pruneopts = "UT"
-  revision = "04a2e542c03f1d053ab3e4d6e5abcd4b66e2be8e"
+  revision = "eb5bcb51f2a31c7d5141d810b70815c05d9c9146"

 [[projects]]
  branch = "master"
-  digest = "1:f5aa274a0377f85735edc7fedfb0811d3cbc20af91633797cb359e29c3272271"
+  digest = "1:9927d6aceb89d188e21485f42a7a254e67e6fdcf4260aba375fe18e3c300dfb4"
+  name = "golang.org/x/oauth2"
+  packages = [
+    ".",
+    "internal",
+  ]
+  pruneopts = "UT"
+  revision = "9f3314589c9a9136388751d9adae6b0ed400978a"
+
+[[projects]]
+  branch = "master"
+  digest = "1:75515eedc0dc2cb0b40372008b616fa2841d831c63eedd403285ff286c593295"
+  name = "golang.org/x/sync"
+  packages = ["semaphore"]
+  pruneopts = "UT"
+  revision = "e225da77a7e68af35c70ccbf71af2b83e6acac3c"
+
+[[projects]]
+  branch = "master"
+  digest = "1:580bd6f5fcc95d5d3dfa5f6916ccfaac7abb1722b1bfc7f042603e167428a802"
  name = "golang.org/x/sys"
  packages = [
+    "cpu",
    "unix",
    "windows",
  ]
  pruneopts = "UT"
-  revision = "fa43e7bc11baaae89f3f902b2b4d832b68234844"
+  revision = "4b34438f7a67ee5f45cc6132e2bad873a20324e9"

 [[projects]]
  digest = "1:a2ab62866c75542dd18d2b069fec854577a20211d7c0ea6ae746072a1dccdd18"
@@ -725,12 +835,92 @@
  version = "v0.3.0"

 [[projects]]
-  digest = "1:c25289f43ac4a68d88b02245742347c94f1e108c534dda442188015ff80669b3"
-  name = "google.golang.org/appengine"
-  packages = ["cloudsql"]
+  branch = "master"
+  digest = "1:363686890941480b8d1a0421b9e538cf55feaf9c7967bf4c809150b36138fe1c"
+  name = "golang.org/x/xerrors"
+  packages = [
+    ".",
+    "internal",
+  ]
  pruneopts = "UT"
-  revision = "ae0ab99deb4dc413a2b4bd6c8bdd0eb67f1e4d06"
-  version = "v1.2.0"
+  revision = "d61658bd2e18010be0e21349cc92b1b706e35146"
+
+[[projects]]
+  digest = "1:5f003878aabe31d7f6b842d4de32b41c46c214bb629bb485387dbcce1edf5643"
+  name = "google.golang.org/api"
+  packages = ["support/bundler"]
+  pruneopts = "UT"
+  revision = "bce707a4d0ea3488942724b3bcc1c8338f38f991"
+  version = "v0.3.0"
+
+[[projects]]
+  digest = "1:7e8b9c5ae49011b12ae8473834ac1a7bb8ac029ba201270c723e4c280c9e4855"
+  name = "google.golang.org/appengine"
+  packages = [
+    "cloudsql",
+    "internal",
+    "internal/base",
+    "internal/datastore",
+    "internal/log",
+    "internal/remote_api",
+    "internal/urlfetch",
+    "urlfetch",
+  ]
+  pruneopts = "UT"
+  revision = "54a98f90d1c46b7731eb8fb305d2a321c30ef610"
+  version = "v1.5.0"
+
+[[projects]]
+  branch = "master"
+  digest = "1:5dc13cd8c0b417e12d187938d2ccb2348dda90f6d3d4a3d8402a40677a5ac982"
+  name = "google.golang.org/genproto"
+  packages = [
+    "googleapis/api/httpbody",
+    "googleapis/rpc/status",
+    "protobuf/field_mask",
+  ]
+  pruneopts = "UT"
+  revision = "64821d5d210748c883cd2b809589555ae4654203"
+
+[[projects]]
+  digest = "1:c00eb80d7b152379c3e94c38d82b29deca98b1d0f53e4e20362589b7fcbffa07"
+  name = "google.golang.org/grpc"
+  packages = [
+    ".",
+    "balancer",
+    "balancer/base",
+    "balancer/roundrobin",
+    "binarylog/grpc_binarylog_v1",
+    "codes",
+    "connectivity",
+    "credentials",
+    "credentials/internal",
+    "encoding",
+    "encoding/proto",
+    "grpclog",
+    "internal",
+    "internal/backoff",
+    "internal/binarylog",
+    "internal/channelz",
+    "internal/envconfig",
+    "internal/grpcrand",
+    "internal/grpcsync",
+    "internal/syscall",
+    "internal/transport",
+    "keepalive",
+    "metadata",
+    "naming",
+    "peer",
+    "resolver",
+    "resolver/dns",
+    "resolver/passthrough",
+    "stats",
+    "status",
+    "tap",
+  ]
+  pruneopts = "UT"
+  revision = "3507fb8e1a5ad030303c106fef3a47c9fdad16ad"
+  version = "v1.19.1"

 [[projects]]
  digest = "1:e626376fab8608a972d47e91b3c1bbbddaecaf1d42b82be6dcc52d10a7557893"
@@ -741,12 +931,12 @@
  version = "v1.1.1"

 [[projects]]
-  digest = "1:50ec2f81389fbc7a1e496e1d1dc07adfe080fd15e015e9ba0e08ddaf1d4635ef"
+  digest = "1:d219400f09c151f0ada918bab650ef46f7ebdb1ff4fea923fdcb839481ec7ec1"
  name = "gopkg.in/cheggaaa/pb.v1"
  packages = ["."]
  pruneopts = "UT"
-  revision = "007b75a044e968336a69a6c0c617251ab62ac14c"
-  version = "v1.0.26"
+  revision = "f907f6f5dd81f77c2bbc1cde92e4c5a04720cb11"
+  version = "v1.0.28"

 [[projects]]
  digest = "1:256938e7d43c73bd5e7bb97dd281d1ebe294b2928403ee1fbec96249915d1150"
@@ -757,12 +947,12 @@
  version = "v2.0.6"

 [[projects]]
-  digest = "1:865079840386857c809b72ce300be7580cb50d3d3129ce11bf9aa6ca2bc1934a"
+  digest = "1:938a2672d6ebbb7f7bc63eee3e4b9464c16ffcf77ec8913d3edbf32b4e3984dd"
  name = "gopkg.in/fatih/color.v1"
  packages = ["."]
  pruneopts = "UT"
-  revision = "5b77d2a35fb0ede96d138fc9a99f5c9b6aef11b4"
-  version = "v1.7.0"
+  revision = "570b54cabe6b8eb0bc2dfce68d964677d63b5260"
+  version = "v1.5.0"

 [[projects]]
  digest = "1:c658e84ad3916da105a761660dcaeb01e63416c8ec7bc62256a9b411a05fcd67"
@@ -773,28 +963,28 @@
  version = "v0.0.9"

 [[projects]]
-  digest = "1:0981502f9816113c9c8c4ac301583841855c8cf4da8c72f696b3ebedf6d0e4e5"
+  digest = "1:e150b5fafbd7607e2d638e4e5cf43aa4100124e5593385147b0a74e2733d8b0d"
  name = "gopkg.in/mattn/go-isatty.v0"
  packages = ["."]
  pruneopts = "UT"
-  revision = "6ca4dbf54d38eea1a992b3c722a76a5d1c4cb25c"
-  version = "v0.0.4"
+  revision = "c2a7a6ca930a4cd0bc33a3f298eb71960732a3a7"
+  version = "v0.0.7"

 [[projects]]
-  digest = "1:cdb899c199f907ac9fb50495ec71212c95cb5b0e0a8ee0800da0238036091033"
+  digest = "1:0356f3312c9bd1cbeda81505b7fd437501d8e778ab66998ef69f00d7f9b3a0d7"
  name = "gopkg.in/mattn/go-runewidth.v0"
  packages = ["."]
  pruneopts = "UT"
-  revision = "ce7b0b5c7b45a81508558cd1dba6bb1e4ddb51bb"
-  version = "v0.0.3"
+  revision = "3ee7d812e62a0804a7d0a324e0249ca2db3476d3"
+  version = "v0.0.4"

 [[projects]]
-  digest = "1:342378ac4dcb378a5448dd723f0784ae519383532f5e70ade24132c4c8693202"
+  digest = "1:4d2e5a73dc1500038e504a8d78b986630e3626dc027bc030ba5c75da257cdb96"
  name = "gopkg.in/yaml.v2"
  packages = ["."]
  pruneopts = "UT"
-  revision = "5420a8b6744d3b0345ab293f6fcba19c978f1183"
-  version = "v2.2.1"
+  revision = "51d6538a90f86fe93ac480b35f37b2be17fef232"
+  version = "v2.2.2"

 [solve-meta]
  analyzer-name = "dep"
@@ -815,6 +1005,7 @@
    "github.com/cenkalti/backoff",
    "github.com/google/subcommands",
    "github.com/gosuri/uitable",
+    "github.com/hashicorp/go-version",
    "github.com/hashicorp/uuid",
    "github.com/howeyc/gopass",
    "github.com/jroimartin/gocui",
@@ -837,11 +1028,12 @@
    "github.com/nlopes/slack",
    "github.com/olekukonko/tablewriter",
    "github.com/parnurzeal/gorequest",
-    "github.com/pkg/errors",
    "github.com/rifflock/lfshook",
    "github.com/sirupsen/logrus",
    "golang.org/x/crypto/ssh",
    "golang.org/x/crypto/ssh/agent",
+    "golang.org/x/oauth2",
+    "golang.org/x/xerrors",
  ]
  solver-name = "gps-cdcl"
  solver-version = 1
--- a/Gopkg.toml
+++ b/Gopkg.toml
@@ -6,9 +6,7 @@
 # required = ["github.com/user/thing/cmd/thing"]
 # ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
 #
-# [[constraint]]
-#   name = "github.com/user/project"
-#   version = "1.0.0"
+# [[constraint]] name = "github.com/user/project" version = "1.0.0"
 #
 # [[constraint]]
 #   name = "github.com/user/project2"
@@ -32,6 +30,18 @@
  name = "github.com/kotakanbe/go-cve-dictionary"
  branch = "master"

+[[constraint]]
+  name = "github.com/mozqnet/go-exploitdb"
+  branch = "master"
+
+[[constraint]]
+  name = "github.com/nlopes/slack"
+  version = "v0.4.0"
+
 [prune]
  go-tests = true
  unused-packages = true
+
+[[constraint]]
+  branch = "master"
+  name = "golang.org/x/xerrors"
--- a/README.md
+++ b/README.md
@@ -5,12 +5,12 @@
 [![License](https://img.shields.io/github/license/future-architect/vuls.svg?style=flat-square)](https://github.com/future-architect/vuls/blob/master/LICENSE)
 [![Build Status](https://travis-ci.org/future-architect/vuls.svg?branch=master)](https://travis-ci.org/future-architect/vuls)
 [![Go Report Card](https://goreportcard.com/badge/github.com/future-architect/vuls)](https://goreportcard.com/report/github.com/future-architect/vuls)
+[![Contributors](https://img.shields.io/github/contributors/future-architect/vuls.svg)](https://github.com/future-architect/vuls/graphs/contributors)

+![Vuls-logo](img/vuls_logo.png)

-![Vuls-logo](img/vuls_logo.png)  
-
-Vulnerability scanner for Linux/FreeBSD, agentless, written in golang.  
-We have a slack team. [Join slack team](http://goo.gl/forms/xm5KFo35tu)  
+Vulnerability scanner for Linux/FreeBSD, agentless, written in golang.
+We have a slack team. [Join slack team](http://goo.gl/forms/xm5KFo35tu)
 Twitter: [@vuls_en](https://twitter.com/vuls_en)

 ![Vuls-Abstract](img/vuls-abstract.png)
@@ -23,135 +23,176 @@ Twitter: [@vuls_en](https://twitter.com/vuls_en)

 ----

-# Abstract
+## NEWS
+
+| Version     | Main Feature |  Date |
+|:------------|:---------------------------------|:--------------------|
+| [v0.7.0](https://github.com/future-architect/vuls/releases/tag/v0.7.0) | WordPress Vulnerability Scan | 2019/Apr/8 |
+| [v0.6.3](https://github.com/future-architect/vuls/releases/tag/v0.6.3) | GitHub Integration | 2019/Feb/20 |
+| [v0.6.2](https://github.com/future-architect/vuls/releases/tag/v0.6.2) | Add US-CERT/JPCERT Alerts as VulnSrc | 2019/Jan/23 |
+| [v0.6.1](https://github.com/future-architect/vuls/releases/tag/v0.6.1) | BugFix | 2018/Nov/16 |
+| [v0.6.0](https://github.com/future-architect/vuls/releases/tag/v0.6.0) | Add ExploitDB as VulnSrc | 2018/Nov/3 |
+| [v0.5.0](https://github.com/future-architect/vuls/releases/tag/v0.5.0) | Scan accuracy improvement | 2018/Aug/27 |
+
+----
+
+## Abstract

 For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden.
-To avoid downtime in production environment, it is common for system administrator to choose not to use the automatic update option provided by package manager and to perform update manually.
+To avoid downtime in a production environment, it is common for a system administrator to choose not to use the automatic update option provided by the package manager and to perform update manually.
 This leads to the following problems.
- System administrator will have to constantly watch out for any new vulnerabilities in NVD(National Vulnerability Database) or similar databases.
- It might be impossible for the system administrator to monitor all the software if there are a large number of software installed in server.
+
+- The system administrator will have to constantly watch out for any new vulnerabilities in NVD (National Vulnerability Database) or similar databases.
+- It might be impossible for the system administrator to monitor all the software if there are a large number of software packages installed in the server.
 - It is expensive to perform analysis to determine the servers affected by new vulnerabilities. The possibility of overlooking a server or two during analysis is there.

-
 Vuls is a tool created to solve the problems listed above. It has the following characteristics.
+
 - Informs users of the vulnerabilities that are related to the system.
 - Informs users of the servers that are affected.
 - Vulnerability detection is done automatically to prevent any oversight.
- Report is generated on regular basis using CRON or other methods. to manage vulnerability.
+- A report is generated on a regular basis using CRON or other methods. to manage vulnerability.

 ![Vuls-Motivation](img/vuls-motivation.png)

 ----

-# Main Features
+## Main Features

-## Scan for any vulnerabilities in Linux/FreeBSD Server
+### Scan for any vulnerabilities in Linux/FreeBSD Server

 [Supports major Linux/FreeBSD](https://vuls.io/docs/en/supported-os.html)
- Alpine, Ubuntu, Debian, CentOS, Amazon Linux, RHEL, Oracle Linux, SUSE Enterprise Linux and Raspbian, FreeBSD
- Cloud, on-premise, Docker

-##  High quality scan
+- Alpine, Amazon Linux, CentOS, Debian, Oracle Linux, Raspbian, RHEL, SUSE Enterprise Linux, and Ubuntu
+- FreeBSD
+- Cloud, on-premise, and Docker
+
+### High-quality scan
+
+Vuls uses multiple vulnerability databases

-Vuls uses Multiple vulnerability databases
 - [NVD](https://nvd.nist.gov/)
 - [JVN(Japanese)](http://jvndb.jvn.jp/apis/myjvn/)
 - OVAL
-	- [RedHat](https://www.redhat.com/security/data/oval/)
-	- [Debian](https://www.debian.org/security/oval/)
-	- [Ubuntu](https://people.canonical.com/~ubuntu-security/oval/)
-	- [SUSE](http://ftp.suse.com/pub/projects/security/oval/)
-	- [Oracle Linux](https://linux.oracle.com/security/oval/)
+  - [Debian](https://www.debian.org/security/oval/)
+  - [Oracle Linux](https://linux.oracle.com/security/oval/)
+  - [RedHat](https://www.redhat.com/security/data/oval/)
+  - [SUSE](http://ftp.suse.com/pub/projects/security/oval/)
+  - [Ubuntu](https://people.canonical.com/~ubuntu-security/oval/)
+
 - [Alpine-secdb](https://git.alpinelinux.org/cgit/alpine-secdb/)
- [Red Hat Security Advisories](https://access.redhat.com/security/security-updates/)
 - [Debian Security Bug Tracker](https://security-tracker.debian.org/tracker/)
- Commands(yum, zypper, pkg-audit)
-	- RHSA/ALAS/ELSA/FreeBSD-SA
+- [Red Hat Security Advisories](https://access.redhat.com/security/security-updates/)
+- Commands (yum, zypper, and pkg-audit)
+  - RHSA/ALAS/ELSA/FreeBSD-SA
 - [Exploit Database](https://www.exploit-db.com/)
+- [US-CERT](https://www.us-cert.gov/ncas/alerts)
+- [JPCERT](http://www.jpcert.or.jp/at/2019.html)
+- [WPVulnDB](https://wpvulndb.com/api)
 - Changelog

-## Fast scan and Deep scan
+### Fast scan and Deep scan

 [Fast Scan](https://vuls.io/docs/en/architecture-fast-scan.html)
+
 - Scan without root privilege, no dependencies
 - Almost no load on the scan target server
- Offline mode scan with no internet access. (Red Hat, CentOS, OracleLinux, Ubuntu, Debian)
+- Offline mode scan with no internet access. (CentOS, Debian, Oracle Linux, Red Hat, and Ubuntu)

 [Fast Root Scan](https://vuls.io/docs/en/architecture-fast-root-scan.html)
+
 - Scan with root privilege
 - Almost no load on the scan target server
- Detect processes affected by update using yum-ps (RedHat, CentOS, Oracle Linux and Amazon Linux)
+- Detect processes affected by update using yum-ps (Amazon Linux, CentOS, Oracle Linux, and RedHat)
 - Detect processes which updated before but not restarting yet using checkrestart of debian-goodies (Debian and Ubuntu)
- Offline mode scan with no internet access. (RedHat, CentOS, OracleLinux, Ubuntu, Debian)
+- Offline mode scan with no internet access. (CentOS, Debian, Oracle Linux, Red Hat, and Ubuntu)

 [Deep Scan](https://vuls.io/docs/en/architecture-deep-scan.html)
+
 - Scan with root privilege
- Parses the Changelog  
+- Parses the Changelog
    Changelog has a history of version changes. When a security issue is fixed, the relevant CVE ID is listed.
    By parsing the changelog and analysing the updates between the installed version of software on the server and the newest version of that software
    it's possible to create a list of all vulnerabilities that need to be fixed.
 - Sometimes load on the scan target server

-## [Remote scan and Local scan](https://vuls.io/docs/en/architecture-remote-local.html)
+### [Remote scan, Local scan mode, Server mode](https://vuls.io/docs/en/architecture-remote-local.html)

-[Remote Scan](https://vuls.io/docs/en/architecture-remote-scan.html)
- User is required to only setup one machine that is connected to other target servers via SSH
+[Remote scan mode](https://vuls.io/docs/en/architecture-remote-scan.html)
+
+- User is required to only set up one machine that is connected to other target servers via SSH
+
+[Local scan mode](https://vuls.io/docs/en/architecture-local-scan.html)

-[Local Scan](https://vuls.io/docs/en/architecture-local-scan.html)
 - If you don't want the central Vuls server to connect to each server by SSH, you can use Vuls in the Local Scan mode.

-## **Dynamic** Analysis
+[Server mode](https://vuls.io/docs/en/usage-server.html)

- It is possible to acquire the state of the server by connecting via SSH and executing the command. 
+- First, start Vuls in server mode and listen as an HTTP server.
+- Start Vuls in server mode and listen as an HTTP server.
+- Next, issue a command on the scan target server to collect software information. Then send the result to Vuls Server via HTTP. You receive the scan results as JSON format.
+- No SSH needed, No Scanner needed. Only issuing Linux commands directory on the scan tareget server.
+
+### **Dynamic** Analysis
+
+- It is possible to acquire the state of the server by connecting via SSH and executing the command.
 - Vuls warns when the scan target server was updated the kernel etc. but not restarting it.

-## [Scan middleware that are not included in OS package management](https://vuls.io/docs/en/usage-scan-non-os-packages.html)
+### Scan vulnerabilities of non-OS packages

- Scan middleware, programming language libraries and framework for vulnerability
- Support software registered in CPE
+- [Common Platform Enumeration (CPE) based Scan](https://vuls.io/docs/en/usage-scan-non-os-packages.html#how-to-search-cpe-name-by-software-name)
+  - Scan middleware, programming language libraries and framework for vulnerability
+  - Support software registered in CPE
+
+## Integration
+
+- [GitHub Security Alerts](https://vuls.io/docs/en/usage-scan-non-os-packages.html#usage-integrate-with-github-security-alerts)
+- [OWASP Dependency Check](https://vuls.io/docs/en/usage-scan-non-os-packages.html#usage-integrate-with-owasp-dependency-check-to-automatic-update-when-the-libraries-are-updated-experimental)
+- [WordPress](https://vuls.io/docs/en/usage-scan-wordpress.html)

 ## MISC

 - Nondestructive testing
 - Pre-authorization is *NOT* necessary before scanning on AWS
-	- Vuls works well with Continuous Integration since tests can be run every day. This allows you to find vulnerabilities very quickly.
- Auto generation of configuration file template
-	- Auto detection of servers set using CIDR, generate configuration file template
+  - Vuls works well with Continuous Integration since tests can be run every day. This allows you to find vulnerabilities very quickly.
+- Auto-generation of configuration file template
+  - Auto-detection of servers set using CIDR, generate configuration file template
 - Email and Slack notification is possible (supports Japanese language)
- Scan result is viewable on accessory software, TUI Viewer on terminal or Web UI ([VulsRepo](https://github.com/usiusi360/vulsrepo)).
+- Scan result is viewable on accessory software, TUI Viewer in a terminal or Web UI ([VulsRepo](https://github.com/usiusi360/vulsrepo)).

 ----

-# What Vuls Doesn't Do
+## What Vuls Doesn't Do

 - Vuls doesn't update the vulnerable packages.

 ----

-# Document
+## Document

-For more information such as Installation, Tutorial, Usage, visit [vuls.io](https://vuls.io/)  
+For more information such as Installation, Tutorial, Usage, visit [vuls.io](https://vuls.io/)
 [日本語翻訳ドキュメント](https://vuls.io/ja/)

 ----

-# Authors
+## Authors

 kotakanbe ([@kotakanbe](https://twitter.com/kotakanbe)) created vuls and [these fine people](https://github.com/future-architect/vuls/graphs/contributors) have contributed.

 ----

-# Change Log
+## Change Log

 Please see [CHANGELOG](https://github.com/future-architect/vuls/blob/master/CHANGELOG.md).

 ----
-# Stargazers over time		
-		
-[![Stargazers over time](https://starcharts.herokuapp.com/future-architect/vuls.svg)](https://starcharts.herokuapp.com/future-architect/vuls)		

-----
+## Stargazers over time

-# License
+[![Stargazers over time](https://starcharts.herokuapp.com/future-architect/vuls.svg)](https://starcharts.herokuapp.com/future-architect/vuls)
+
+-----;
+
+## License

 Please see [LICENSE](https://github.com/future-architect/vuls/blob/master/LICENSE).
--- a/alert/alert_jp.go
+++ b/alert/alert_jp.go
--- a/alert/alert_us.go
+++ b/alert/alert_us.go
@@ -0,0 +1,920 @@
+package alert
+
+// AlertDictEn has USCERT alerts
+var AlertDictEn = map[string]Alert{
+	"https://www.us-cert.gov/ncas/alerts/TA08-352A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA08-352A",
+		Title: `Microsoft Internet Explorer Data Binding Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA08-350A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA08-350A",
+		Title: `Apple Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA08-344A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA08-344A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA08-340A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA08-340A",
+		Title: `Sun Java Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA08-319A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA08-319A",
+		Title: `Mozilla Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-132A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-132A",
+		Title: `Microsoft PowerPoint Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-041A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-041A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-343A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-343A",
+		Title: `Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-218A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-218A",
+		Title: `Apple Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-195A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-195A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-342A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-342A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-286B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-286B",
+		Title: `Adobe Reader and Acrobat Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-160B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-160B",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-069A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-069A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-223A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-223A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-013A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-013A",
+		Title: `Microsoft Updates for Multiple SMB Protocol Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-294A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-294A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-020A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-020A",
+		Title: `Microsoft Windows Does Not Disable AutoRun Properly`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-133A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-133A",
+		Title: `Apple Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-022A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-022A",
+		Title: `Apple QuickTime Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-051A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-051A",
+		Title: `Adobe Acrobat and Reader Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-015A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-015A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-251A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-251A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-209A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-209A",
+		Title: `Microsoft Windows, Internet Explorer, and Active Template Library (ATL) Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-204A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-204A",
+		Title: `Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-161A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-161A",
+		Title: `Adobe Acrobat and Reader Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-133B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-133B",
+		Title: `Adobe Reader and Acrobat JavaScript Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-088A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-088A",
+		Title: `Conficker Worm Targets Microsoft Windows Systems`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-314A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-314A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-105A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-105A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-104A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-104A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-286A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-286A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA09-187A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA09-187A",
+		Title: `Microsoft Video ActiveX Control Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-238A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-238A",
+		Title: `Microsoft Windows Insecurely Loads Dynamic Libraries`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-159B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-159B",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-103B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-103B",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-021A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-021A",
+		Title: `Microsoft Internet Explorer Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-012A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-012A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-313A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-313A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-285A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-285A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-263A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-263A",
+		Title: `Adobe Flash Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-103C": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-103C",
+		Title: `Adobe Reader and Acrobat Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-040A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-040A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-194B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-194B",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-194A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-194A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-131A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-131A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-068A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-068A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-348A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-348A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-257A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-257A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-231A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-231A",
+		Title: `Adobe Reader and Acrobat Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-222A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-222A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-162A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-162A",
+		Title: `Adobe Flash and AIR Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-159A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-159A",
+		Title: `Adobe Flash, Reader, and Acrobat Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-089A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-089A",
+		Title: `Microsoft Internet Explorer Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-013A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-013A",
+		Title: `Adobe Reader and Acrobat Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-287A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-287A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-279A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-279A",
+		Title: `Adobe Reader and Acrobat Affected by Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-223A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-223A",
+		Title: `Adobe Flash and AIR Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA10-012B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA10-012B",
+		Title: `Microsoft Windows EOT Font and Adobe Flash Player 6 Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-165A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-165A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-067A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-067A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-039A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-039A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-222A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-222A",
+		Title: `Adobe Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-193A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-193A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-201A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-201A",
+		Title: `Oracle Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-166A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-166A",
+		Title: `Adobe Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-130A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-130A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-312A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-312A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-286A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-286A",
+		Title: `Apple Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-350A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-350A",
+		Title: `Adobe Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-221A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-221A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-256A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-256A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-200A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-200A",
+		Title: `Security Recommendations to Prevent Cyber Intrusions`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-102A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-102A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-011A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-011A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-347A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-347A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA11-284A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA11-284A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-262A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-262A",
+		Title: `Microsoft Security Advisory for Internet Explorer Exploit`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-240A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-240A",
+		Title: `Oracle Java 7 Security Manager Bypass Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-227A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-227A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-129A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-129A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-101B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-101B",
+		Title: `Adobe Reader and Acrobat Security Updates and Architectural Improvements`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-010A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-010A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-006A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-006A",
+		Title: `Wi-Fi Protected Setup (WPS) Vulnerable to Brute-Force Attack`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-265A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-265A",
+		Title: `Microsoft Releases Patch for Internet Explorer Exploit`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-255A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-255A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-251A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-251A",
+		Title: `Microsoft Update For Minimum Certificate Key Length`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-174A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-174A",
+		Title: `Microsoft XML Core Services Attack Activity`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-164A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-164A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-101A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-101A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-318A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-318A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-283A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-283A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-346A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-346A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-192A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-192A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-073A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-073A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-045A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-045A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA12-024A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA12-024A",
+		Title: `&quot;Anonymous&quot; DDoS Activity`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-134A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-134A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-043B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-043B",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-008A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-008A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-051A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-051A",
+		Title: `Oracle Java Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-043A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-043A",
+		Title: `Adobe Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-225A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-225A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-207A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-207A",
+		Title: `Risks of Using the Intelligent Platform Management Interface (IPMI)`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-141A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-141A",
+		Title: `Washington, DC Radio Station Web Site Compromises`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-175A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-175A",
+		Title: `Risks of Default Passwords on the Internet`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-169A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-169A",
+		Title: `Oracle Releases Updates for Javadoc and Other Java SE Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-168A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-168A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-100A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-100A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-088A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-088A",
+		Title: `DNS Amplification Attacks`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-317A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-317A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-309A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-309A",
+		Title: `CryptoLocker Ransomware Infections`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-288A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-288A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-064A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-064A",
+		Title: `Oracle Java Contains Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-032A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-032A",
+		Title: `Oracle Java Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-024A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-024A",
+		Title: `Content Management Systems Security and Associated Risks`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-107A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-107A",
+		Title: `Oracle Has Released Multiple Updates for Java SE`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-071A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-071A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-015A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-015A",
+		Title: `Microsoft Releases Update for Internet Explorer Vulnerability CVE-2012-4792`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-010A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-010A",
+		Title: `Oracle Java 7 Security Manager Bypass Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-253A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-253A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-193A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-193A",
+		Title: `Exploit Tool Targets Vulnerabilities in McAfee ePolicy Orchestrator (ePO)`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA13-190A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA13-190A",
+		Title: `Microsoft Updates for Multiple Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-323A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-323A",
+		Title: `Microsoft Windows Kerberos KDC Remote Privilege Escalation Vulnerability `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-300A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-300A",
+		Title: `Phishing Campaign Linked with “Dyre” Banking Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-295A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-295A",
+		Title: `Crypto Ransomware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-318B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-318B",
+		Title: `Microsoft Windows OLE Automation Array Remote Code Execution Vulnerability `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-317A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-317A",
+		Title: `Apple iOS &#039;Masque Attack&#039; Technique`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-290A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-290A",
+		Title: `SSL 3.0 Protocol Vulnerability and POODLE Attack`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-017A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-017A",
+		Title: `UDP-Based Amplification Attacks`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-002A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-002A",
+		Title: `Malware Targeting Point of Sale Systems`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-318A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-318A",
+		Title: `Microsoft Secure Channel (Schannel) Vulnerability (CVE-2014-6321) `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-310A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-310A",
+		Title: `Microsoft Ending Support for Windows Server 2003 Operating System`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-268A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-268A",
+		Title: `GNU Bourne-Again Shell (Bash) ‘Shellshock’ Vulnerability (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277 and CVE 2014-6278) `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-098A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-098A",
+		Title: `OpenSSL &#039;Heartbleed&#039; vulnerability (CVE-2014-0160)`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-353A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-353A",
+		Title: `Targeted Destructive Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-329A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-329A",
+		Title: `Regin Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-212A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-212A",
+		Title: `Backoff Point-of-Sale Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-150A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-150A",
+		Title: `GameOver Zeus P2P Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA14-013A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA14-013A",
+		Title: `NTP Amplification Attacks Using CVE-2013-5211`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-195A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-195A",
+		Title: `Adobe Flash and Microsoft Windows Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-337A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-337A",
+		Title: `Dorkbot`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-240A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-240A",
+		Title: `Controlling Outbound DNS Access`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-213A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-213A",
+		Title: `Recent Email Phishing Campaigns – Mitigation and Response Recommendations`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-120A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-120A",
+		Title: `Securing End-to-End Communications`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-119A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-119A",
+		Title: `Top 30 Targeted High Risk Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-105A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-105A",
+		Title: `Simda Botnet`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-103A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-103A",
+		Title: `DNS Zone Transfer AXFR Requests May Leak Domain Information`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-098A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-098A",
+		Title: `AAEH`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-314A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-314A",
+		Title: `Compromised Web Servers and Web Shells - Threat Awareness and Guidance `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-286A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-286A",
+		Title: `Dridex P2P Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA15-051A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA15-051A",
+		Title: `Lenovo Superfish Adware Vulnerable to HTTPS Spoofing`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-187A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-187A",
+		Title: `Symantec and Norton Security Products Contain Critical Vulnerabilities`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-144A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-144A",
+		Title: `WPAD Name Collision Vulnerability`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-132A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-132A",
+		Title: `Exploitation of SAP Business Applications`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-105A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-105A",
+		Title: `Apple Ends Support for QuickTime for Windows; New Vulnerabilities Announced`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-091A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-091A",
+		Title: `Ransomware and Recent Variants`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-336A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-336A",
+		Title: `Avalanche (crimeware-as-a-service infrastructure)`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-288A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-288A",
+		Title: `Heightened DDoS Threat Posed by Mirai and Other Botnets`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA16-250A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA16-250A",
+		Title: `The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-117A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-117A",
+		Title: `Intrusions Affecting Multiple Victims Across Multiple Sectors`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-318B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-318B",
+		Title: `HIDDEN COBRA – North Korean Trojan: Volgmer`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-318A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-318A",
+		Title: `HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-181A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-181A",
+		Title: `Petya Ransomware `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-132A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-132A",
+		Title: `Indicators Associated With WannaCry Ransomware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-075A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-075A",
+		Title: `HTTPS Interception Weakens TLS Security`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-293A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-293A",
+		Title: `Advanced Persistent Threat Activity Targeting Energy and Other Critical Infrastructure Sectors`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-164A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-164A",
+		Title: `HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-163A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-163A",
+		Title: `CrashOverride Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA17-156A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA17-156A",
+		Title: `Reducing the Risk of SNMP Abuse`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-141A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-141A",
+		Title: `Side-Channel Vulnerability Variants 3a and 4`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-086A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-086A",
+		Title: `Brute Force Attacks Conducted by Cyber Actors `,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-004A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-004A",
+		Title: `Meltdown and Spectre Side-Channel Vulnerability Guidance`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-331A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-331A",
+		Title: `3ve – Major Online Ad Fraud Operation`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/AA18-284A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/AA18-284A",
+		Title: `Publicly Available Tools Seen in Cyber Incidents Worldwide`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-276B": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-276B",
+		Title: `Advanced Persistent Threat Activity Exploiting Managed Service Providers`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-275A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-275A",
+		Title: `HIDDEN COBRA – FASTCash Campaign`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-201A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-201A",
+		Title: `Emotet Malware`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-276A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-276A",
+		Title: `Using Rigorous Credential Control to Mitigate Trusted Network Exploitation`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-149A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-149A",
+		Title: `HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-145A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-145A",
+		Title: `Cyber Actors Target Home and Office Routers and Networked Devices Worldwide`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-106A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-106A",
+		Title: `Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices`,
+		Team:  "us",
+	},
+	"https://www.us-cert.gov/ncas/alerts/TA18-074A": {
+		URL:   "https://www.us-cert.gov/ncas/alerts/TA18-074A",
+		Title: `Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors`,
+		Team:  "us",
+	},
+}
--- a/alert/cve_jp.go
+++ b/alert/cve_jp.go
@@ -0,0 +1,534 @@
+package alert
+
+// CveDictJa has CVE-ID key which included JPCERT alerts
+var CveDictJa = map[string][]string{
+	"CVE-2006-0003":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2006-0005":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2006-1173":    {"https://www.jpcert.or.jp/at/2006/at060008.html"},
+	"CVE-2006-3014":    {"https://www.jpcert.or.jp/at/2006/at060009.html"},
+	"CVE-2006-3059":    {"https://www.jpcert.or.jp/at/2006/at060009.html"},
+	"CVE-2006-3086":    {"https://www.jpcert.or.jp/at/2006/at060009.html"},
+	"CVE-2006-3643":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2006-3730":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2006-3877":    {"https://www.jpcert.or.jp/at/2007/at070005.html"},
+	"CVE-2006-5198":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2006-5745":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2007-0015":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2007-0038":    {"https://www.jpcert.or.jp/at/2007/at070016.html"},
+	"CVE-2008-4609":    {"https://www.jpcert.or.jp/at/2009/at090019.html"},
+	"CVE-2010-0886":    {"https://www.jpcert.or.jp/at/2010/at100010.html"},
+	"CVE-2010-0887":    {"https://www.jpcert.or.jp/at/2010/at100010.html"},
+	"CVE-2011-1910":    {"https://www.jpcert.or.jp/at/2011/at110014.html"},
+	"CVE-2011-2444":    {"https://www.jpcert.or.jp/at/2011/at110026.html"},
+	"CVE-2011-2462":    {"https://www.jpcert.or.jp/at/2011/at110034.html"},
+	"CVE-2011-2465":    {"https://www.jpcert.or.jp/at/2011/at110019.html"},
+	"CVE-2011-3192":    {"https://www.jpcert.or.jp/at/2011/at110023.html"},
+	"CVE-2011-3348":    {"https://www.jpcert.or.jp/at/2011/at110023.html"},
+	"CVE-2011-3544":    {"https://www.jpcert.or.jp/at/2011/at110032.html"},
+	"CVE-2011-4313":    {"https://www.jpcert.or.jp/at/2011/at110031.html"},
+	"CVE-2012-0002":    {"https://www.jpcert.or.jp/at/2012/at120009.html"},
+	"CVE-2012-0507":    {"https://www.jpcert.or.jp/at/2012/at120010.html"},
+	"CVE-2012-0767":    {"https://www.jpcert.or.jp/at/2012/at120006.html"},
+	"CVE-2012-0779":    {"https://www.jpcert.or.jp/at/2012/at120014.html"},
+	"CVE-2012-0830":    {"https://www.jpcert.or.jp/at/2012/at120004.html"},
+	"CVE-2012-2311":    {"https://www.jpcert.or.jp/at/2012/at120016.html"},
+	"CVE-2012-4244":    {"https://www.jpcert.or.jp/at/2012/at120029.html"},
+	"CVE-2012-4681":    {"https://www.jpcert.or.jp/at/2012/at120028.html"},
+	"CVE-2012-4969":    {"https://www.jpcert.or.jp/at/2012/at120030.html"},
+	"CVE-2012-5166":    {"https://www.jpcert.or.jp/at/2012/at120033.html"},
+	"CVE-2013-0422":    {"https://www.jpcert.or.jp/at/2013/at130004.html"},
+	"CVE-2013-1493":    {"https://www.jpcert.or.jp/at/2013/at130014.html"},
+	"CVE-2013-2266":    {"https://www.jpcert.or.jp/at/2013/at130017.html"},
+	"CVE-2013-2494":    {"https://www.jpcert.or.jp/at/2013/at130017.html"},
+	"CVE-2013-3893":    {"https://www.jpcert.or.jp/at/2013/at130040.html", "https://www.jpcert.or.jp/at/2013/at130041.html"},
+	"CVE-2013-3906":    {"https://www.jpcert.or.jp/at/2013/at130044.html"},
+	"CVE-2013-3918":    {"https://www.jpcert.or.jp/at/2013/at130045.html"},
+	"CVE-2013-3919":    {"https://www.jpcert.or.jp/at/2013/at130026.html"},
+	"CVE-2013-4854":    {"https://www.jpcert.or.jp/at/2013/at130034.html"},
+	"CVE-2014-0050":    {"https://www.jpcert.or.jp/at/2014/at140007.html"},
+	"CVE-2014-0160":    {"https://www.jpcert.or.jp/at/2014/at140013.html"},
+	"CVE-2014-0322":    {"https://www.jpcert.or.jp/at/2014/at140009.html"},
+	"CVE-2014-1776":    {"https://www.jpcert.or.jp/at/2014/at140018.html", "https://www.jpcert.or.jp/at/2014/at140020.html"},
+	"CVE-2014-3383":    {"https://www.jpcert.or.jp/at/2015/at150021.html"},
+	"CVE-2014-3859":    {"https://www.jpcert.or.jp/at/2014/at140027.html"},
+	"CVE-2014-4114":    {"https://www.jpcert.or.jp/at/2014/at140039.html"},
+	"CVE-2014-6271":    {"https://www.jpcert.or.jp/at/2014/at140037.html", "https://www.jpcert.or.jp/at/2014/at140038.html"},
+	"CVE-2014-6277":    {"https://www.jpcert.or.jp/at/2014/at140037.html"},
+	"CVE-2014-6278":    {"https://www.jpcert.or.jp/at/2014/at140037.html"},
+	"CVE-2014-6324":    {"https://www.jpcert.or.jp/at/2014/at140048.html"},
+	"CVE-2014-6332":    {"https://www.jpcert.or.jp/at/2015/at150015.html"},
+	"CVE-2014-6352":    {"https://www.jpcert.or.jp/at/2014/at140043.html"},
+	"CVE-2014-7169":    {"https://www.jpcert.or.jp/at/2014/at140037.html"},
+	"CVE-2014-7186":    {"https://www.jpcert.or.jp/at/2014/at140037.html"},
+	"CVE-2014-7187":    {"https://www.jpcert.or.jp/at/2014/at140037.html"},
+	"CVE-2014-8361":    {"https://www.jpcert.or.jp/at/2017/at170049.html"},
+	"CVE-2014-8500":    {"https://www.jpcert.or.jp/at/2014/at140050.html"},
+	"CVE-2014-9163":    {"https://www.jpcert.or.jp/at/2014/at140052.html"},
+	"CVE-2015-0313":    {"https://www.jpcert.or.jp/at/2015/at150015.html"},
+	"CVE-2015-1769":    {"https://www.jpcert.or.jp/at/2015/at150028.html"},
+	"CVE-2015-5119":    {"https://www.jpcert.or.jp/at/2015/at150019.html"},
+	"CVE-2015-5122":    {"https://www.jpcert.or.jp/at/2015/at150020.html"},
+	"CVE-2015-5123":    {"https://www.jpcert.or.jp/at/2015/at150020.html"},
+	"CVE-2015-5477":    {"https://www.jpcert.or.jp/at/2015/at150027.html"},
+	"CVE-2015-5986":    {"https://www.jpcert.or.jp/at/2015/at150031.html"},
+	"CVE-2015-6835":    {"https://www.jpcert.or.jp/at/2016/at160036.html"},
+	"CVE-2015-7547":    {"https://www.jpcert.or.jp/at/2016/at160009.html"},
+	"CVE-2015-7645":    {"https://www.jpcert.or.jp/at/2015/at150036.html", "https://www.jpcert.or.jp/at/2015/at150037.html"},
+	"CVE-2015-8000":    {"https://www.jpcert.or.jp/at/2015/at150043.html"},
+	"CVE-2015-8461":    {"https://www.jpcert.or.jp/at/2015/at150043.html"},
+	"CVE-2015-8562":    {"https://www.jpcert.or.jp/at/2016/at160036.html"},
+	"CVE-2015-8651":    {"https://www.jpcert.or.jp/at/2016/at160001.html"},
+	"CVE-2015-8704":    {"https://www.jpcert.or.jp/at/2016/at160006.html"},
+	"CVE-2015-8705":    {"https://www.jpcert.or.jp/at/2016/at160006.html"},
+	"CVE-2016-0189":    {"https://www.jpcert.or.jp/at/2016/at160022.html"},
+	"CVE-2016-0636":    {"https://www.jpcert.or.jp/at/2016/at160015.html"},
+	"CVE-2016-0800":    {"https://www.jpcert.or.jp/at/2016/at160010.html"},
+	"CVE-2016-1000109": {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-1000110": {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-1010":    {"https://www.jpcert.or.jp/at/2016/at160014.html"},
+	"CVE-2016-1019":    {"https://www.jpcert.or.jp/at/2016/at160016.html"},
+	"CVE-2016-1204":    {"https://www.jpcert.or.jp/at/2016/at160019.html"},
+	"CVE-2016-1286":    {"https://www.jpcert.or.jp/at/2016/at160013.html", "https://www.jpcert.or.jp/at/2016/at160037.html"},
+	"CVE-2016-2776":    {"https://www.jpcert.or.jp/at/2016/at160037.html"},
+	"CVE-2016-3081":    {"https://www.jpcert.or.jp/at/2016/at160020.html"},
+	"CVE-2016-3227":    {"https://www.jpcert.or.jp/at/2016/at160025.html"},
+	"CVE-2016-3714":    {"https://www.jpcert.or.jp/at/2016/at160021.html"},
+	"CVE-2016-3715":    {"https://www.jpcert.or.jp/at/2016/at160021.html"},
+	"CVE-2016-3716":    {"https://www.jpcert.or.jp/at/2016/at160021.html"},
+	"CVE-2016-3717":    {"https://www.jpcert.or.jp/at/2016/at160021.html"},
+	"CVE-2016-3718":    {"https://www.jpcert.or.jp/at/2016/at160021.html"},
+	"CVE-2016-4117":    {"https://www.jpcert.or.jp/at/2016/at160024.html"},
+	"CVE-2016-4171":    {"https://www.jpcert.or.jp/at/2016/at160026.html"},
+	"CVE-2016-4438":    {"https://www.jpcert.or.jp/at/2016/at160027.html"},
+	"CVE-2016-5385":    {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-5386":    {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-5387":    {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-5388":    {"https://www.jpcert.or.jp/at/2016/at160031.html"},
+	"CVE-2016-6307":    {"https://www.jpcert.or.jp/at/2016/at160038.html"},
+	"CVE-2016-6309":    {"https://www.jpcert.or.jp/at/2016/at160038.html"},
+	"CVE-2016-7189":    {"https://www.jpcert.or.jp/at/2016/at160039.html"},
+	"CVE-2016-7836":    {"https://www.jpcert.or.jp/at/2016/at160051.html", "https://www.jpcert.or.jp/at/2017/at170023.html"},
+	"CVE-2016-7855":    {"https://www.jpcert.or.jp/at/2016/at160039.html", "https://www.jpcert.or.jp/at/2016/at160043.html"},
+	"CVE-2016-7892":    {"https://www.jpcert.or.jp/at/2016/at160048.html", "https://www.jpcert.or.jp/at/2016/at160049.html"},
+	"CVE-2016-8864":    {"https://www.jpcert.or.jp/at/2016/at160044.html"},
+	"CVE-2016-9131":    {"https://www.jpcert.or.jp/at/2017/at170004.html"},
+	"CVE-2016-9147":    {"https://www.jpcert.or.jp/at/2017/at170004.html"},
+	"CVE-2016-9444":    {"https://www.jpcert.or.jp/at/2017/at170004.html"},
+	"CVE-2016-9778":    {"https://www.jpcert.or.jp/at/2017/at170004.html"},
+	"CVE-2017-0093":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0106":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0145":    {"https://www.jpcert.or.jp/at/2017/at170020.html"},
+	"CVE-2017-0158":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0160":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0161":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-0162":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0163":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0180":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0181":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0199":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0200":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0201":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0202":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0205":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0210":    {"https://www.jpcert.or.jp/at/2017/at170015.html"},
+	"CVE-2017-0221":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0222":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0224":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0227":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0228":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0229":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0235":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0236":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0240":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0250":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-0261":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0263":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0266":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0272":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0277":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0278":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0279":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0283":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-0290":    {"https://www.jpcert.or.jp/at/2017/at170019.html"},
+	"CVE-2017-0291":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-0292":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-0293":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-0294":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-0781":    {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-0782":    {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-0783":    {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-0785":    {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-1000250": {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-1000251": {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-10271":   {"https://www.jpcert.or.jp/at/2018/at180004.html"},
+	"CVE-2017-10845":   {"https://www.jpcert.or.jp/at/2017/at170034.html"},
+	"CVE-2017-10846":   {"https://www.jpcert.or.jp/at/2017/at170034.html"},
+	"CVE-2017-11223":   {"https://www.jpcert.or.jp/at/2017/at170031.html"},
+	"CVE-2017-11292":   {"https://www.jpcert.or.jp/at/2017/at170040.html"},
+	"CVE-2017-11762":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11763":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11764":   {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-11766":   {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-11771":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11779":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11792":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11793":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11796":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11798":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11799":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11800":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11802":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11804":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11805":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11806":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11807":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11808":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11809":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11810":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11811":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11812":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11813":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11819":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11821":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11822":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11826":   {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-11836":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11837":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11838":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11839":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11840":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11841":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11843":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11845":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11846":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11855":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11856":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11858":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11861":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11862":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11866":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11869":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11870":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11871":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11873":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11882":   {"https://www.jpcert.or.jp/at/2017/at170044.html"},
+	"CVE-2017-11886":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11888":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11889":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11890":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11893":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11894":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11895":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11901":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11903":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11905":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11907":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11908":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11909":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11910":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11911":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11912":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11914":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11918":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11930":   {"https://www.jpcert.or.jp/at/2017/at170048.html"},
+	"CVE-2017-11937":   {"https://www.jpcert.or.jp/at/2017/at170046.html"},
+	"CVE-2017-12615":   {"https://www.jpcert.or.jp/at/2017/at170038.html"},
+	"CVE-2017-12616":   {"https://www.jpcert.or.jp/at/2017/at170038.html"},
+	"CVE-2017-12617":   {"https://www.jpcert.or.jp/at/2017/at170038.html"},
+	"CVE-2017-13872":   {"https://www.jpcert.or.jp/at/2017/at170045.html"},
+	"CVE-2017-14315":   {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-3135":    {"https://www.jpcert.or.jp/at/2017/at170007.html"},
+	"CVE-2017-3136":    {"https://www.jpcert.or.jp/at/2017/at170016.html"},
+	"CVE-2017-3137":    {"https://www.jpcert.or.jp/at/2017/at170016.html"},
+	"CVE-2017-3138":    {"https://www.jpcert.or.jp/at/2017/at170016.html"},
+	"CVE-2017-3142":    {"https://www.jpcert.or.jp/at/2017/at170024.html"},
+	"CVE-2017-3143":    {"https://www.jpcert.or.jp/at/2017/at170024.html"},
+	"CVE-2017-3145":    {"https://www.jpcert.or.jp/at/2018/at180005.html"},
+	"CVE-2017-5638":    {"https://www.jpcert.or.jp/at/2017/at170009.html"},
+	"CVE-2017-6753":    {"https://www.jpcert.or.jp/at/2017/at170028.html"},
+	"CVE-2017-8463":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8464":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8496":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8497":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8499":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8517":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8520":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8522":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8524":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8527":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8528":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8543":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8548":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8549":    {"https://www.jpcert.or.jp/at/2017/at170022.html"},
+	"CVE-2017-8584":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8589":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8591":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8594":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8595":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8596":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8598":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8601":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8603":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8604":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8605":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8606":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8607":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8608":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8609":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8610":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8617":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8618":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8619":    {"https://www.jpcert.or.jp/at/2017/at170027.html"},
+	"CVE-2017-8620":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8622":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8628":    {"https://www.jpcert.or.jp/at/2017/at170037.html"},
+	"CVE-2017-8634":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8635":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8636":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8638":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8639":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8640":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8641":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8645":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8646":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8647":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8649":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8653":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8655":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8656":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8657":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8660":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8661":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8669":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8670":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8671":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8672":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8674":    {"https://www.jpcert.or.jp/at/2017/at170032.html"},
+	"CVE-2017-8676":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8682":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8686":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8696":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8727":    {"https://www.jpcert.or.jp/at/2017/at170039.html"},
+	"CVE-2017-8728":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8729":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8731":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8734":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8737":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8738":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8740":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8741":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8747":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8748":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8749":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8750":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8751":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8752":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8753":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8755":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8756":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8757":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-8759":    {"https://www.jpcert.or.jp/at/2017/at170036.html"},
+	"CVE-2017-9791":    {"https://www.jpcert.or.jp/at/2017/at170025.html"},
+	"CVE-2017-9805":    {"https://www.jpcert.or.jp/at/2017/at170033.html"},
+	"CVE-2018-0171":    {"https://www.jpcert.or.jp/at/2018/at180013.html"},
+	"CVE-2018-0758":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0762":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0763":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0767":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0769":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0770":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0772":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0773":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0774":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0775":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0776":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0777":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0778":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0780":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0781":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0797":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0800":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0802":    {"https://www.jpcert.or.jp/at/2018/at180002.html"},
+	"CVE-2018-0825":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0834":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0835":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0837":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0838":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0840":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0852":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0856":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0857":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0859":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0860":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0861":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-0870":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0872":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0874":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0876":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0889":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0893":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0930":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0931":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0932":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0933":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0934":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0936":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0937":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0939":    {"https://www.jpcert.or.jp/at/2018/at180011.html"},
+	"CVE-2018-0943":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0945":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0946":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0950":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0951":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0953":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0954":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0955":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0959":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0961":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-0965":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-0979":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0980":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0981":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0988":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0990":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0991":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0993":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0994":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0995":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-0996":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1000":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1004":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1010":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1012":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1013":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1015":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1016":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1018":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1019":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1020":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-1022":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-1023":    {"https://www.jpcert.or.jp/at/2018/at180016.html"},
+	"CVE-2018-11776":   {"https://www.jpcert.or.jp/at/2018/at180036.html"},
+	"CVE-2018-1270":    {"https://www.jpcert.or.jp/at/2018/at180014.html"},
+	"CVE-2018-1271":    {"https://www.jpcert.or.jp/at/2018/at180014.html"},
+	"CVE-2018-1272":    {"https://www.jpcert.or.jp/at/2018/at180014.html"},
+	"CVE-2018-1273":    {"https://www.jpcert.or.jp/at/2018/at180017.html"},
+	"CVE-2018-1274":    {"https://www.jpcert.or.jp/at/2018/at180017.html"},
+	"CVE-2018-1275":    {"https://www.jpcert.or.jp/at/2018/at180014.html"},
+	"CVE-2018-12794":   {"https://www.jpcert.or.jp/at/2018/at180039.html"},
+	"CVE-2018-1336":    {"https://www.jpcert.or.jp/at/2018/at180030.html"},
+	"CVE-2018-15442":   {"https://www.jpcert.or.jp/at/2018/at180043.html"},
+	"CVE-2018-15979":   {"https://www.jpcert.or.jp/at/2018/at180045.html"},
+	"CVE-2018-2628":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-2893":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-2894":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-2933":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-2983":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-2998":    {"https://www.jpcert.or.jp/at/2018/at180029.html"},
+	"CVE-2018-4877":    {"https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-4878":    {"https://www.jpcert.or.jp/at/2018/at180006.html", "https://www.jpcert.or.jp/at/2018/at180008.html"},
+	"CVE-2018-4945":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-5000":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-5001":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-5002":    {"https://www.jpcert.or.jp/at/2018/at180024.html", "https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-5740":    {"https://www.jpcert.or.jp/at/2018/at180031.html"},
+	"CVE-2018-7600":    {"https://www.jpcert.or.jp/at/2018/at180012.html"},
+	"CVE-2018-7602":    {"https://www.jpcert.or.jp/at/2018/at180019.html"},
+	"CVE-2018-8034":    {"https://www.jpcert.or.jp/at/2018/at180030.html"},
+	"CVE-2018-8037":    {"https://www.jpcert.or.jp/at/2018/at180030.html"},
+	"CVE-2018-8110":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8111":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8114":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8120":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8122":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8128":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8130":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8133":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8137":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8139":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8154":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8174":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8178":    {"https://www.jpcert.or.jp/at/2018/at180021.html"},
+	"CVE-2018-8213":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8225":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8229":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8231":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8236":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8242":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8249":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8251":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8262":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8266":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8267":    {"https://www.jpcert.or.jp/at/2018/at180025.html"},
+	"CVE-2018-8273":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8274":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8275":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8279":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8280":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8286":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8288":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8290":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8291":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8294":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8296":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8301":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8302":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8324":    {"https://www.jpcert.or.jp/at/2018/at180028.html"},
+	"CVE-2018-8332":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8344":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8345":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8350":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8355":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8367":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8371":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8372":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8373":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8377":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8380":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8381":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8385":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8387":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8390":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8397":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8403":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8414":    {"https://www.jpcert.or.jp/at/2018/at180034.html"},
+	"CVE-2018-8420":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8421":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8439":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8440":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8447":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8453":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8456":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8457":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8459":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8460":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8461":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8464":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8465":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8466":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8467":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8473":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8475":    {"https://www.jpcert.or.jp/at/2018/at180038.html"},
+	"CVE-2018-8476":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8489":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8490":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8491":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8494":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8505":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8509":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8510":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8511":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8513":    {"https://www.jpcert.or.jp/at/2018/at180041.html"},
+	"CVE-2018-8541":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8542":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8543":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8544":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8551":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8553":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8555":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8556":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8557":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8588":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8589":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+	"CVE-2018-8609":    {"https://www.jpcert.or.jp/at/2018/at180046.html"},
+}
--- a/alert/cve_us.go
+++ b/alert/cve_us.go
@@ -0,0 +1,96 @@
+package alert
+
+// CveDictEn has CVE-ID key which included USCERT alerts
+var CveDictEn = map[string][]string{
+	"CVE-1999-0532": {"https://www.us-cert.gov/ncas/alerts/TA15-103A"},
+	"CVE-2006-3227": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2008-0015": {"https://www.us-cert.gov/ncas/alerts/TA09-195A", "https://www.us-cert.gov/ncas/alerts/TA09-209A"},
+	"CVE-2008-2244": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2009-0658": {"https://www.us-cert.gov/ncas/alerts/TA09-051A"},
+	"CVE-2009-0927": {"https://www.us-cert.gov/ncas/alerts/TA13-141A"},
+	"CVE-2009-1492": {"https://www.us-cert.gov/ncas/alerts/TA09-133B"},
+	"CVE-2009-1493": {"https://www.us-cert.gov/ncas/alerts/TA09-133B"},
+	"CVE-2009-1537": {"https://www.us-cert.gov/ncas/alerts/TA09-195A"},
+	"CVE-2009-3103": {"https://www.us-cert.gov/ncas/alerts/TA17-181A"},
+	"CVE-2009-3129": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2009-3674": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2009-3953": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2010-0018": {"https://www.us-cert.gov/ncas/alerts/TA10-012B"},
+	"CVE-2010-0188": {"https://www.us-cert.gov/ncas/alerts/TA13-141A", "https://www.us-cert.gov/ncas/alerts/TA14-300A", "https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2010-0806": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2010-1297": {"https://www.us-cert.gov/ncas/alerts/TA10-162A", "https://www.us-cert.gov/ncas/alerts/TA10-159A"},
+	"CVE-2010-2883": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2010-3333": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2011-0101": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2011-0611": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2011-2462": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2012-0158": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2012-1723": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2012-1856": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2012-1889": {"https://www.us-cert.gov/ncas/alerts/TA12-174A"},
+	"CVE-2012-3174": {"https://www.us-cert.gov/ncas/alerts/TA13-010A"},
+	"CVE-2012-4681": {"https://www.us-cert.gov/ncas/alerts/TA12-240A"},
+	"CVE-2012-4792": {"https://www.us-cert.gov/ncas/alerts/TA13-015A", "https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-0074": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-0140": {"https://www.us-cert.gov/ncas/alerts/TA13-193A"},
+	"CVE-2013-0141": {"https://www.us-cert.gov/ncas/alerts/TA13-193A"},
+	"CVE-2013-0422": {"https://www.us-cert.gov/ncas/alerts/TA13-141A", "https://www.us-cert.gov/ncas/alerts/TA13-010A"},
+	"CVE-2013-0625": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-0632": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-0809": {"https://www.us-cert.gov/ncas/alerts/TA13-064A"},
+	"CVE-2013-1347": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-1493": {"https://www.us-cert.gov/ncas/alerts/TA13-064A"},
+	"CVE-2013-1571": {"https://www.us-cert.gov/ncas/alerts/TA13-169A"},
+	"CVE-2013-2465": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-2729": {"https://www.us-cert.gov/ncas/alerts/TA14-300A", "https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-3336": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2013-5211": {"https://www.us-cert.gov/ncas/alerts/TA14-017A", "https://www.us-cert.gov/ncas/alerts/TA14-013A"},
+	"CVE-2013-5326": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-0160": {"https://www.us-cert.gov/ncas/alerts/TA14-098A", "https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-0322": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-0564": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-1761": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-1776": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-3393": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2014-3566": {"https://www.us-cert.gov/ncas/alerts/TA14-290A", "https://www.us-cert.gov/ncas/alerts/TA15-120A"},
+	"CVE-2014-4114": {"https://www.us-cert.gov/ncas/alerts/TA15-119A"},
+	"CVE-2014-6271": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-6277": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-6278": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-6321": {"https://www.us-cert.gov/ncas/alerts/TA14-318A"},
+	"CVE-2014-6332": {"https://www.us-cert.gov/ncas/alerts/TA14-318B"},
+	"CVE-2014-7169": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-7186": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-7187": {"https://www.us-cert.gov/ncas/alerts/TA14-268A"},
+	"CVE-2014-8730": {"https://www.us-cert.gov/ncas/alerts/TA14-290A"},
+	"CVE-2015-2387": {"https://www.us-cert.gov/ncas/alerts/TA15-195A"},
+	"CVE-2015-5119": {"https://www.us-cert.gov/ncas/alerts/TA15-195A", "https://www.us-cert.gov/ncas/alerts/TA15-213A"},
+	"CVE-2015-5122": {"https://www.us-cert.gov/ncas/alerts/TA15-195A"},
+	"CVE-2015-5123": {"https://www.us-cert.gov/ncas/alerts/TA15-195A"},
+	"CVE-2015-6585": {"https://www.us-cert.gov/ncas/alerts/TA17-164A"},
+	"CVE-2015-8651": {"https://www.us-cert.gov/ncas/alerts/TA17-164A"},
+	"CVE-2016-0034": {"https://www.us-cert.gov/ncas/alerts/TA17-164A"},
+	"CVE-2016-1019": {"https://www.us-cert.gov/ncas/alerts/TA17-164A"},
+	"CVE-2016-2207": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-2208": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-2209": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-2210": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-2211": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-3644": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-3645": {"https://www.us-cert.gov/ncas/alerts/TA16-187A"},
+	"CVE-2016-4117": {"https://www.us-cert.gov/ncas/alerts/TA17-164A"},
+	"CVE-2016-6366": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2016-6367": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2016-6415": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2016-6909": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2016-7089": {"https://www.us-cert.gov/ncas/alerts/TA16-250A"},
+	"CVE-2017-0144": {"https://www.us-cert.gov/ncas/alerts/TA17-181A"},
+	"CVE-2017-0145": {"https://www.us-cert.gov/ncas/alerts/TA17-181A"},
+	"CVE-2017-3066": {"https://www.us-cert.gov/ncas/alerts/AA18-284A"},
+	"CVE-2017-5715": {"https://www.us-cert.gov/ncas/alerts/TA18-141A", "https://www.us-cert.gov/ncas/alerts/TA18-004A"},
+	"CVE-2017-5753": {"https://www.us-cert.gov/ncas/alerts/TA18-141A", "https://www.us-cert.gov/ncas/alerts/TA18-004A"},
+	"CVE-2017-5754": {"https://www.us-cert.gov/ncas/alerts/TA18-141A", "https://www.us-cert.gov/ncas/alerts/TA18-004A"},
+	"CVE-2018-1038": {"https://www.us-cert.gov/ncas/alerts/TA18-004A"},
+	"CVE-2018-3639": {"https://www.us-cert.gov/ncas/alerts/TA18-141A"},
+	"CVE-2018-3640": {"https://www.us-cert.gov/ncas/alerts/TA18-141A"},
+}
--- a/alert/util.go
+++ b/alert/util.go
@@ -0,0 +1,21 @@
+package alert
+
+// GenerateAlertDict returns XCERT alert slice by cveID
+func GenerateAlertDict(cveID string, lang string) (alerts []Alert) {
+	if lang == "ja" {
+		if keys, ok := CveDictJa[cveID]; ok {
+			for _, key := range keys {
+				alerts = append(alerts, AlertDictJa[key])
+			}
+		}
+		return alerts
+	}
+
+	// default language is English
+	if keys, ok := CveDictEn[cveID]; ok {
+		for _, key := range keys {
+			alerts = append(alerts, AlertDictEn[key])
+		}
+	}
+	return alerts
+}
--- a/cache/bolt.go
+++ b/cache/bolt.go
@@ -19,12 +19,12 @@ package cache

 import (
 	"encoding/json"
-	"fmt"
 	"time"

 	"github.com/boltdb/bolt"
 	"github.com/future-architect/vuls/util"
 	"github.com/sirupsen/logrus"
+	"golang.org/x/xerrors"
 )

 // Bolt holds a pointer of bolt.DB
@@ -69,7 +69,7 @@ func (b *Bolt) createBucketIfNotExists(name string) error {
 	return b.db.Update(func(tx *bolt.Tx) error {
 		_, err := tx.CreateBucketIfNotExists([]byte(name))
 		if err != nil {
-			return fmt.Errorf("Failed to create bucket: %s", err)
+			return xerrors.Errorf("Failed to create bucket: %w", err)
 		}
 		return nil
 	})
@@ -98,7 +98,7 @@ func (b Bolt) RefreshMeta(meta Meta) error {
 	meta.CreatedAt = time.Now()
 	jsonBytes, err := json.Marshal(meta)
 	if err != nil {
-		return fmt.Errorf("Failed to marshal to JSON: %s", err)
+		return xerrors.Errorf("Failed to marshal to JSON: %w", err)
 	}
 	return b.db.Update(func(tx *bolt.Tx) error {
 		bkt := tx.Bucket([]byte(metabucket))
@@ -114,7 +114,7 @@ func (b Bolt) RefreshMeta(meta Meta) error {
 func (b Bolt) EnsureBuckets(meta Meta) error {
 	jsonBytes, err := json.Marshal(meta)
 	if err != nil {
-		return fmt.Errorf("Failed to marshal to JSON: %s", err)
+		return xerrors.Errorf("Failed to marshal to JSON: %w", err)
 	}
 	return b.db.Update(func(tx *bolt.Tx) error {
 		b.Log.Debugf("Put to meta: %s", meta.Name)
@@ -163,7 +163,7 @@ func (b Bolt) GetChangelog(servername, packName string) (changelog string, err e
 	err = b.db.View(func(tx *bolt.Tx) error {
 		bkt := tx.Bucket([]byte(servername))
 		if bkt == nil {
-			return fmt.Errorf("Failed to get Bucket: %s", servername)
+			return xerrors.Errorf("Failed to get Bucket: %s", servername)
 		}
 		v := bkt.Get([]byte(packName))
 		if v == nil {
@@ -181,7 +181,7 @@ func (b Bolt) PutChangelog(servername, packName, changelog string) error {
 	return b.db.Update(func(tx *bolt.Tx) error {
 		bkt := tx.Bucket([]byte(servername))
 		if bkt == nil {
-			return fmt.Errorf("Failed to get Bucket: %s", servername)
+			return xerrors.Errorf("Failed to get Bucket: %s", servername)
 		}
 		return bkt.Put([]byte(packName), []byte(changelog))
 	})
--- a/commands/discover.go
+++ b/commands/discover.go
@@ -176,6 +176,11 @@ sqlite3Path = "/path/to/go-exploitdb.sqlite3"
 #room     = "xxxxxxxxxxx"
 #apiToken = "xxxxxxxxxxxxxxxxxx"

+# https://vuls.io/docs/en/usage-settings.html#telegram-section
+#[telegram]
+#chatID     = "xxxxxxxxxxx"
+#token = "xxxxxxxxxxxxxxxxxx"
+
 # https://vuls.io/docs/en/usage-settings.html#default-section
 [default]
 #port               = "22"
@@ -215,10 +220,19 @@ host                = "{{$ip}}"
 #owaspDCXMLPath = "/path/to/dependency-check-report.xml"
 #ignoreCves     = ["CVE-2014-0160"]

+#[servers.{{index $names $i}}.githubs."owner/repo"]
+#token   = "yourToken"
+
+#[servers.{{index $names $i}}.wordpress]
+#cmdPath = "/usr/local/bin/wp"
+#osUser = "wordpress"
+#docRoot = "/path/to/DocumentRoot/"
+#wpVulnDBToken = "xxxxTokenxxxx"
+#ignoreInactive = true
+
 #[servers.{{index $names $i}}.optional]
 #key = "value1"

-
 {{end}}

 `
--- a/commands/report.go
+++ b/commands/report.go
@@ -64,12 +64,14 @@ func (*ReportCmd) Usage() string {
 		[-diff]
 		[-ignore-unscored-cves]
 		[-ignore-unfixed]
+		[-ignore-github-dismissed]
 		[-to-email]
 		[-to-http]
 		[-to-slack]
 		[-to-stride]
 		[-to-hipchat]
 		[-to-chatwork]
+		[-to-telegram]
 		[-to-localfile]
 		[-to-s3]
 		[-to-azure-blob]
@@ -86,18 +88,18 @@ func (*ReportCmd) Usage() string {
 		[-debug]
 		[-debug-sql]
 		[-pipe]
-		[-cvedb-type=sqlite3|mysql|postgres|redis]
+		[-cvedb-type=sqlite3|mysql|postgres|redis|http]
 		[-cvedb-sqlite3-path=/path/to/cve.sqlite3]
 		[-cvedb-url=http://127.0.0.1:1323 or DB connection string]
-		[-ovaldb-type=sqlite3|mysql|redis]
+		[-ovaldb-type=sqlite3|mysql|redis|http]
 		[-ovaldb-sqlite3-path=/path/to/oval.sqlite3]
 		[-ovaldb-url=http://127.0.0.1:1324 or DB connection string]
-		[-gostdb-type=sqlite3|mysql|redis]
+		[-gostdb-type=sqlite3|mysql|redis|http]
 		[-gostdb-sqlite3-path=/path/to/gost.sqlite3]
 		[-gostdb-url=http://127.0.0.1:1325 or DB connection string]
-		[-exploitdb-type=sqlite3|mysql|redis]
+		[-exploitdb-type=sqlite3|mysql|redis|http]
 		[-exploitdb-sqlite3-path=/path/to/exploitdb.sqlite3]
-		[-exploitdb-url=http://127.0.0.1:1325 or DB connection string]
+		[-exploitdb-url=http://127.0.0.1:1326 or DB connection string]
 		[-http="http://vuls-report-server"]

 		[RFC3339 datetime format under results dir]
@@ -132,10 +134,12 @@ func (p *ReportCmd) SetFlags(f *flag.FlagSet) {
 	f.BoolVar(&c.Conf.IgnoreUnscoredCves, "ignore-unscored-cves", false,
 		"Don't report the unscored CVEs")

-	f.BoolVar(
-		&c.Conf.IgnoreUnfixed, "ignore-unfixed", false,
+	f.BoolVar(&c.Conf.IgnoreUnfixed, "ignore-unfixed", false,
 		"Don't report the unfixed CVEs")

+	f.BoolVar(&c.Conf.IgnoreGitHubDismissed, "ignore-github-dismissed", false,
+		"Don't report the dismissed CVEs on GitHub Security Alerts")
+
 	f.StringVar(
 		&c.Conf.HTTPProxy, "http-proxy", "",
 		"http://proxy-url:port (default: empty)")
@@ -154,6 +158,7 @@ func (p *ReportCmd) SetFlags(f *flag.FlagSet) {
 	f.BoolVar(&c.Conf.ToStride, "to-stride", false, "Send report via Stride")
 	f.BoolVar(&c.Conf.ToHipChat, "to-hipchat", false, "Send report via hipchat")
 	f.BoolVar(&c.Conf.ToChatWork, "to-chatwork", false, "Send report via chatwork")
+	f.BoolVar(&c.Conf.ToTelegram, "to-telegram", false, "Send report via Telegram")
 	f.BoolVar(&c.Conf.ToEmail, "to-email", false, "Send report via Email")
 	f.BoolVar(&c.Conf.ToSyslog, "to-syslog", false, "Send report via Syslog")
 	f.BoolVar(&c.Conf.ToLocalFile, "to-localfile", false, "Write report to localfile")
@@ -171,25 +176,25 @@ func (p *ReportCmd) SetFlags(f *flag.FlagSet) {
 	f.BoolVar(&c.Conf.Pipe, "pipe", false, "Use args passed via PIPE")

 	f.StringVar(&p.cveDict.Type, "cvedb-type", "",
-		"DB type of go-cve-dictionary (sqlite3, mysql, postgres or redis)")
+		"DB type of go-cve-dictionary (sqlite3, mysql, postgres, redis or http)")
 	f.StringVar(&p.cveDict.SQLite3Path, "cvedb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.cveDict.URL, "cvedb-url", "",
 		"http://go-cve-dictionary.com:1323 or DB connection string")

 	f.StringVar(&p.ovalDict.Type, "ovaldb-type", "",
-		"DB type of goval-dictionary (sqlite3, mysql, postgres or redis)")
+		"DB type of goval-dictionary (sqlite3, mysql, postgres, redis or http)")
 	f.StringVar(&p.ovalDict.SQLite3Path, "ovaldb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.ovalDict.URL, "ovaldb-url", "",
 		"http://goval-dictionary.com:1324 or DB connection string")

 	f.StringVar(&p.gostConf.Type, "gostdb-type", "",
-		"DB type of gost (sqlite3, mysql, postgres or redis)")
+		"DB type of gost (sqlite3, mysql, postgres, redis or http)")
 	f.StringVar(&p.gostConf.SQLite3Path, "gostdb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.gostConf.URL, "gostdb-url", "",
 		"http://gost.com:1325 or DB connection string")

 	f.StringVar(&p.exploitConf.Type, "exploitdb-type", "",
-		"DB type of exploit (sqlite3, mysql, postgres or redis)")
+		"DB type of exploit (sqlite3, mysql, postgres, redis or http)")
 	f.StringVar(&p.exploitConf.SQLite3Path, "exploitdb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.exploitConf.URL, "exploitdb-url", "",
 		"http://exploit.com:1326 or DB connection string")
@@ -247,6 +252,10 @@ func (p *ReportCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}
 		reports = append(reports, report.ChatWorkWriter{})
 	}

+	if c.Conf.ToTelegram {
+		reports = append(reports, report.TelegramWriter{})
+	}
+
 	if c.Conf.ToEmail {
 		reports = append(reports, report.EMailWriter{})
 	}
@@ -350,31 +359,21 @@ func (p *ReportCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}
 			return subcommands.ExitUsageError
 		}

-		if err := report.CveClient.CheckHealth(); err != nil {
-			util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
-			util.Log.Errorf("Run go-cve-dictionary as server mode before reporting or run with -cvedb-sqlite3-path option instead of -cvedb-url")
-			return subcommands.ExitFailure
-		}
 		if c.Conf.CveDict.URL != "" {
-			util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.URL)
-		} else {
-			if c.Conf.CveDict.Type == "sqlite3" {
-				util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.SQLite3Path)
+			if err := report.CveClient.CheckHealth(); err != nil {
+				util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
+				util.Log.Errorf("Run go-cve-dictionary as server mode before reporting or run with `-cvedb-type=sqlite3 -cvedb-sqlite3-path` option instead of -cvedb-url")
+				return subcommands.ExitFailure
 			}
 		}

 		if c.Conf.OvalDict.URL != "" {
-			util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.URL)
 			err := oval.Base{}.CheckHTTPHealth()
 			if err != nil {
 				util.Log.Errorf("OVAL HTTP server is not running. err: %s", err)
-				util.Log.Errorf("Run goval-dictionary as server mode before reporting or run with -ovaldb-sqlite3-path option instead of -ovaldb-url")
+				util.Log.Errorf("Run goval-dictionary as server mode before reporting or run with `-ovaldb-type=sqlite3 -ovaldb-sqlite3-path` option instead of -ovaldb-url")
 				return subcommands.ExitFailure
 			}
-		} else {
-			if c.Conf.OvalDict.Type == "sqlite3" {
-				util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.SQLite3Path)
-			}
 		}

 		if c.Conf.Gost.URL != "" {
@@ -382,27 +381,18 @@ func (p *ReportCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}
 			err := gost.Base{}.CheckHTTPHealth()
 			if err != nil {
 				util.Log.Errorf("gost HTTP server is not running. err: %s", err)
-				util.Log.Errorf("Run gost as server mode before reporting or run with -gostdb-sqlite3-path option instead of -gostdb-url")
+				util.Log.Errorf("Run gost as server mode before reporting or run with `-gostdb-type=sqlite3 -gostdb-sqlite3-path` option instead of -gostdb-url")
 				return subcommands.ExitFailure
 			}
-		} else {
-			if c.Conf.Gost.Type == "sqlite3" {
-				util.Log.Infof("gost: %s", c.Conf.Gost.SQLite3Path)
-			}
 		}

 		if c.Conf.Exploit.URL != "" {
-			util.Log.Infof("exploit: %s", c.Conf.Exploit.URL)
 			err := exploit.CheckHTTPHealth()
 			if err != nil {
 				util.Log.Errorf("exploit HTTP server is not running. err: %s", err)
-				util.Log.Errorf("Run exploit as server mode before reporting or run with -exploitdb-sqlite3-path option instead of -exploitdb-url")
+				util.Log.Errorf("Run go-exploitdb as server mode before reporting")
 				return subcommands.ExitFailure
 			}
-		} else {
-			if c.Conf.Exploit.Type == "sqlite3" {
-				util.Log.Infof("exploit: %s", c.Conf.Exploit.SQLite3Path)
-			}
 		}
 		dbclient, locked, err := report.NewDBClient(report.DBClientConf{
 			CveDictCnf:  c.Conf.CveDict,
--- a/commands/server.go
+++ b/commands/server.go
@@ -28,6 +28,8 @@ import (
 	// "github.com/future-architect/vuls/Server"

 	c "github.com/future-architect/vuls/config"
+	"github.com/future-architect/vuls/exploit"
+	"github.com/future-architect/vuls/gost"
 	"github.com/future-architect/vuls/oval"
 	"github.com/future-architect/vuls/report"
 	"github.com/future-architect/vuls/server"
@@ -38,11 +40,12 @@ import (

 // ServerCmd is subcommand for server
 type ServerCmd struct {
-	configPath string
-	listen     string
-	cvelDict   c.GoCveDictConf
-	ovalDict   c.GovalDictConf
-	gostConf   c.GostConf
+	configPath  string
+	listen      string
+	cveDict     c.GoCveDictConf
+	ovalDict    c.GovalDictConf
+	gostConf    c.GostConf
+	exploitConf c.ExploitConf
 }

 // Name return subcommand name
@@ -59,36 +62,26 @@ func (*ServerCmd) Usage() string {
 		[-config=/path/to/config.toml]
 		[-log-dir=/path/to/log]
 		[-cvss-over=7]
-		[-diff]
 		[-ignore-unscored-cves]
 		[-ignore-unfixed]
-		[-to-email]
-		[-to-slack]
-		[-to-stride]
-		[-to-hipchat]
-		[-to-chatwork]
 		[-to-localfile]
-		[-to-s3]
-		[-to-azure-blob]
 		[-format-json]
-		[-format-xml]
-		[-format-one-email]
-		[-format-one-line-text]
-		[-format-list]
-		[-format-full-text]
 		[-http-proxy=http://192.168.0.1:8080]
 		[-debug]
 		[-debug-sql]
 		[-listen=localhost:5515]
-		[-cvedb-type=sqlite3|mysql|postgres|redis]
-		[-cvedb-path=/path/to/cve.sqlite3]
+		[-cvedb-type=sqlite3|mysql|postgres|redis|http]
+		[-cvedb-sqlite3-path=/path/to/cve.sqlite3]
 		[-cvedb-url=http://127.0.0.1:1323 or DB connection string]
-		[-ovaldb-type=sqlite3|mysql|redis]
-		[-ovaldb-path=/path/to/oval.sqlite3]
+		[-ovaldb-type=sqlite3|mysql|redis|http]
+		[-ovaldb-sqlite3-path=/path/to/oval.sqlite3]
 		[-ovaldb-url=http://127.0.0.1:1324 or DB connection string]
-		[-gostdb-type=sqlite3|mysql|redis]
-		[-gostdb-path=/path/to/gost.sqlite3]
+		[-gostdb-type=sqlite3|mysql|redis|http]
+		[-gostdb-sqlite3-path=/path/to/gost.sqlite3]
 		[-gostdb-url=http://127.0.0.1:1325 or DB connection string]
+		[-exploitdb-type=sqlite3|mysql|redis|http]
+		[-exploitdb-sqlite3-path=/path/to/exploitdb.sqlite3]
+		[-exploitdb-url=http://127.0.0.1:1326 or DB connection string]

 		[RFC3339 datetime format under results dir]
 `
@@ -128,23 +121,29 @@ func (p *ServerCmd) SetFlags(f *flag.FlagSet) {
 	f.StringVar(&p.listen, "listen", "localhost:5515",
 		"host:port (default: localhost:5515)")

-	f.StringVar(&p.cvelDict.Type, "cvedb-type", "sqlite3",
-		"DB type of go-cve-dictionary (sqlite3, mysql, postgres or redis)")
-	f.StringVar(&p.cvelDict.SQLite3Path, "cvedb-path", "", "/path/to/sqlite3")
-	f.StringVar(&p.cvelDict.URL, "cvedb-url", "",
+	f.StringVar(&p.cveDict.Type, "cvedb-type", "",
+		"DB type of go-cve-dictionary (sqlite3, mysql, postgres, redis or http)")
+	f.StringVar(&p.cveDict.SQLite3Path, "cvedb-sqlite3-path", "", "/path/to/sqlite3")
+	f.StringVar(&p.cveDict.URL, "cvedb-url", "",
 		"http://go-cve-dictionary.com:1323 or DB connection string")

 	f.StringVar(&p.ovalDict.Type, "ovaldb-type", "",
-		"DB type of goval-dictionary (sqlite3, mysql, postgres or redis)")
-	f.StringVar(&p.ovalDict.SQLite3Path, "ovaldb-path", "", "/path/to/sqlite3")
+		"DB type of goval-dictionary (sqlite3, mysql, postgres, redis or http)")
+	f.StringVar(&p.ovalDict.SQLite3Path, "ovaldb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.ovalDict.URL, "ovaldb-url", "",
 		"http://goval-dictionary.com:1324 or DB connection string")

 	f.StringVar(&p.gostConf.Type, "gostdb-type", "",
-		"DB type of gost (sqlite3, mysql, postgres or redis)")
-	f.StringVar(&p.gostConf.SQLite3Path, "gostdb-path", "", "/path/to/sqlite3")
+		"DB type of gost (sqlite3, mysql, postgres, redis or http)")
+	f.StringVar(&p.gostConf.SQLite3Path, "gostdb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.gostConf.URL, "gostdb-url", "",
 		"http://gost.com:1325 or DB connection string")
+
+	f.StringVar(&p.exploitConf.Type, "exploitdb-type", "",
+		"DB type of exploit (sqlite3, mysql, postgres, redis or http)")
+	f.StringVar(&p.exploitConf.SQLite3Path, "exploitdb-sqlite3-path", "", "/path/to/sqlite3")
+	f.StringVar(&p.exploitConf.URL, "exploitdb-url", "",
+		"http://exploit.com:1326 or DB connection string")
 }

 // Execute execute
@@ -152,39 +151,59 @@ func (p *ServerCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}
 	util.Log = util.NewCustomLogger(c.ServerInfo{})
 	cvelog.SetLogger(c.Conf.LogDir, false, c.Conf.Debug, false)

-	c.Conf.CveDict.Overwrite(p.cvelDict)
+	if err := c.Load(p.configPath, ""); err != nil {
+		util.Log.Errorf("Error loading %s, %s", p.configPath, err)
+		return subcommands.ExitUsageError
+	}
+
+	c.Conf.CveDict.Overwrite(p.cveDict)
 	c.Conf.OvalDict.Overwrite(p.ovalDict)
 	c.Conf.Gost.Overwrite(p.gostConf)
+	c.Conf.Exploit.Overwrite(p.exploitConf)

 	util.Log.Info("Validating config...")
 	if !c.Conf.ValidateOnReport() {
 		return subcommands.ExitUsageError
 	}

-	if err := report.CveClient.CheckHealth(); err != nil {
-		util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
-		util.Log.Errorf("Run go-cve-dictionary as server mode before Servering or run with -cvedb-path option")
-		return subcommands.ExitFailure
+	util.Log.Info("Validating db config...")
+	if !c.Conf.ValidateOnReportDB() {
+		return subcommands.ExitUsageError
 	}
+
 	if c.Conf.CveDict.URL != "" {
-		util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.URL)
-	} else {
-		if c.Conf.CveDict.Type == "sqlite3" {
-			util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.SQLite3Path)
+		if err := report.CveClient.CheckHealth(); err != nil {
+			util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
+			util.Log.Errorf("Run go-cve-dictionary as server mode before reporting or run with `-cvedb-type=sqlite3 -cvedb-sqlite3-path` option instead of -cvedb-url")
+			return subcommands.ExitFailure
 		}
 	}

 	if c.Conf.OvalDict.URL != "" {
-		util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.URL)
 		err := oval.Base{}.CheckHTTPHealth()
 		if err != nil {
 			util.Log.Errorf("OVAL HTTP server is not running. err: %s", err)
-			util.Log.Errorf("Run goval-dictionary as server mode before Servering or run with -ovaldb-path option")
+			util.Log.Errorf("Run goval-dictionary as server mode before reporting or run with `-ovaldb-type=sqlite3 -ovaldb-sqlite3-path` option instead of -ovaldb-url")
 			return subcommands.ExitFailure
 		}
-	} else {
-		if c.Conf.OvalDict.Type == "sqlite3" {
-			util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.SQLite3Path)
+	}
+
+	if c.Conf.Gost.URL != "" {
+		util.Log.Infof("gost: %s", c.Conf.Gost.URL)
+		err := gost.Base{}.CheckHTTPHealth()
+		if err != nil {
+			util.Log.Errorf("gost HTTP server is not running. err: %s", err)
+			util.Log.Errorf("Run gost as server mode before reporting or run with `-gostdb-type=sqlite3 -gostdb-sqlite3-path` option instead of -gostdb-url")
+			return subcommands.ExitFailure
+		}
+	}
+
+	if c.Conf.Exploit.URL != "" {
+		err := exploit.CheckHTTPHealth()
+		if err != nil {
+			util.Log.Errorf("exploit HTTP server is not running. err: %s", err)
+			util.Log.Errorf("Run go-exploitdb as server mode before reporting")
+			return subcommands.ExitFailure
 		}
 	}

@@ -192,6 +211,7 @@ func (p *ServerCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}
 		CveDictCnf:  c.Conf.CveDict,
 		OvalDictCnf: c.Conf.OvalDict,
 		GostCnf:     c.Conf.Gost,
+		ExploitCnf:  c.Conf.Exploit,
 		DebugSQL:    c.Conf.DebugSQL,
 	})
 	if locked {
--- a/commands/tui.go
+++ b/commands/tui.go
@@ -37,7 +37,7 @@ import (
 // TuiCmd is Subcommand of host discovery mode
 type TuiCmd struct {
 	configPath  string
-	cvelDict    c.GoCveDictConf
+	cveDict     c.GoCveDictConf
 	ovalDict    c.GovalDictConf
 	gostConf    c.GostConf
 	exploitConf c.ExploitConf
@@ -64,15 +64,18 @@ func (*TuiCmd) Usage() string {
 		[-debug]
 		[-debug-sql]
 		[-pipe]
-		[-cvedb-type=sqlite3|mysql|postgres|redis]
-		[-cvedb-path=/path/to/cve.sqlite3]
+		[-cvedb-type=sqlite3|mysql|postgres|redis|http]
+		[-cvedb-sqlite3-path=/path/to/cve.sqlite3]
 		[-cvedb-url=http://127.0.0.1:1323 or DB connection string]
-		[-ovaldb-type=sqlite3|mysql|redis]
-		[-ovaldb-path=/path/to/oval.sqlite3]
+		[-ovaldb-type=sqlite3|mysql|redis|http]
+		[-ovaldb-sqlite3-path=/path/to/oval.sqlite3]
 		[-ovaldb-url=http://127.0.0.1:1324 or DB connection string]
-		[-gostdb-type=sqlite3|mysql|redis]
-		[-gostdb-path=/path/to/gost.sqlite3]
+		[-gostdb-type=sqlite3|mysql|redis|http]
+		[-gostdb-sqlite3-path=/path/to/gost.sqlite3]
 		[-gostdb-url=http://127.0.0.1:1325 or DB connection string]
+		[-exploitdb-type=sqlite3|mysql|redis|http]
+		[-exploitdb-sqlite3-path=/path/to/exploitdb.sqlite3]
+		[-exploitdb-url=http://127.0.0.1:1326 or DB connection string]

 `
 }
@@ -111,10 +114,10 @@ func (p *TuiCmd) SetFlags(f *flag.FlagSet) {

 	f.BoolVar(&c.Conf.Pipe, "pipe", false, "Use stdin via PIPE")

-	f.StringVar(&p.cvelDict.Type, "cvedb-type", "sqlite3",
+	f.StringVar(&p.cveDict.Type, "cvedb-type", "",
 		"DB type of go-cve-dictionary (sqlite3, mysql, postgres or redis)")
-	f.StringVar(&p.cvelDict.SQLite3Path, "cvedb-path", "", "/path/to/sqlite3")
-	f.StringVar(&p.cvelDict.URL, "cvedb-url", "",
+	f.StringVar(&p.cveDict.SQLite3Path, "cvedb-path", "", "/path/to/sqlite3")
+	f.StringVar(&p.cveDict.URL, "cvedb-url", "",
 		"http://go-cve-dictionary.com:1323 or DB connection string")

 	f.StringVar(&p.ovalDict.Type, "ovaldb-type", "",
@@ -130,7 +133,7 @@ func (p *TuiCmd) SetFlags(f *flag.FlagSet) {
 		"http://gost.com:1325 or DB connection string")

 	f.StringVar(&p.exploitConf.Type, "exploitdb-type", "",
-		"DB type of exploit (sqlite3, mysql, postgres or redis)")
+		"DB type of exploit (sqlite3, mysql, postgres, redis or http)")
 	f.StringVar(&p.exploitConf.SQLite3Path, "exploitdb-sqlite3-path", "", "/path/to/sqlite3")
 	f.StringVar(&p.exploitConf.URL, "exploitdb-url", "",
 		"http://exploit.com:1326 or DB connection string")
@@ -150,7 +153,7 @@ func (p *TuiCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}) s
 		return subcommands.ExitUsageError
 	}

-	c.Conf.CveDict.Overwrite(p.cvelDict)
+	c.Conf.CveDict.Overwrite(p.cveDict)
 	c.Conf.OvalDict.Overwrite(p.ovalDict)
 	c.Conf.Gost.Overwrite(p.gostConf)
 	c.Conf.Exploit.Overwrite(p.exploitConf)
@@ -179,31 +182,26 @@ func (p *TuiCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}) s
 	}
 	util.Log.Infof("Loaded: %s", dir)

-	if err := report.CveClient.CheckHealth(); err != nil {
-		util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
-		util.Log.Errorf("Run go-cve-dictionary as server mode before reporting or run with -cvedb-sqlite3-path option instead of -cvedb-url")
-		return subcommands.ExitFailure
+	util.Log.Info("Validating db config...")
+	if !c.Conf.ValidateOnReportDB() {
+		return subcommands.ExitUsageError
 	}
+
 	if c.Conf.CveDict.URL != "" {
-		util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.URL)
-	} else {
-		if c.Conf.CveDict.Type == "sqlite3" {
-			util.Log.Infof("cve-dictionary: %s", c.Conf.CveDict.SQLite3Path)
+		if err := report.CveClient.CheckHealth(); err != nil {
+			util.Log.Errorf("CVE HTTP server is not running. err: %s", err)
+			util.Log.Errorf("Run go-cve-dictionary as server mode before reporting or run with `-cvedb-type=sqlite3 -cvedb-sqlite3-path` option instead of -cvedb-url")
+			return subcommands.ExitFailure
 		}
 	}

 	if c.Conf.OvalDict.URL != "" {
-		util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.URL)
 		err := oval.Base{}.CheckHTTPHealth()
 		if err != nil {
 			util.Log.Errorf("OVAL HTTP server is not running. err: %s", err)
-			util.Log.Errorf("Run goval-dictionary as server mode before reporting or run with -ovaldb-sqlite3-path option instead of -ovaldb-url")
+			util.Log.Errorf("Run goval-dictionary as server mode before reporting or run with `-ovaldb-type=sqlite3 -ovaldb-sqlite3-path` option instead of -ovaldb-url")
 			return subcommands.ExitFailure
 		}
-	} else {
-		if c.Conf.OvalDict.Type == "sqlite3" {
-			util.Log.Infof("oval-dictionary: %s", c.Conf.OvalDict.SQLite3Path)
-		}
 	}

 	if c.Conf.Gost.URL != "" {
@@ -211,27 +209,18 @@ func (p *TuiCmd) Execute(_ context.Context, f *flag.FlagSet, _ ...interface{}) s
 		err := gost.Base{}.CheckHTTPHealth()
 		if err != nil {
 			util.Log.Errorf("gost HTTP server is not running. err: %s", err)
-			util.Log.Errorf("Run gost as server mode before reporting or run with -gostdb-sqlite3-path option instead of -gostdb-url")
+			util.Log.Errorf("Run gost as server mode before reporting or run with `-gostdb-type=sqlite3 -gostdb-sqlite3-path` option instead of -gostdb-url")
 			return subcommands.ExitFailure
 		}
-	} else {
-		if c.Conf.Gost.Type == "sqlite3" {
-			util.Log.Infof("gost: %s", c.Conf.Gost.SQLite3Path)
-		}
 	}

 	if c.Conf.Exploit.URL != "" {
-		util.Log.Infof("exploit: %s", c.Conf.Exploit.URL)
 		err := exploit.CheckHTTPHealth()
 		if err != nil {
 			util.Log.Errorf("exploit HTTP server is not running. err: %s", err)
-			util.Log.Errorf("Run exploit as server mode before reporting or run with -exploitdb-sqlite3-path option instead of -exploitdb-url")
+			util.Log.Errorf("Run go-exploitdb as server mode before reporting")
 			return subcommands.ExitFailure
 		}
-	} else {
-		if c.Conf.Exploit.Type == "sqlite3" {
-			util.Log.Infof("exploit: %s", c.Conf.Exploit.SQLite3Path)
-		}
 	}
 	dbclient, locked, err := report.NewDBClient(report.DBClientConf{
 		CveDictCnf:  c.Conf.CveDict,
--- a/commands/util.go
+++ b/commands/util.go
@@ -24,6 +24,7 @@ import (

 	"github.com/howeyc/gopass"
 	homedir "github.com/mitchellh/go-homedir"
+	"golang.org/x/xerrors"
 )

 func getPasswd(prompt string) (string, error) {
@@ -31,7 +32,7 @@ func getPasswd(prompt string) (string, error) {
 		fmt.Print(prompt)
 		pass, err := gopass.GetPasswdMasked()
 		if err != nil {
-			return "", fmt.Errorf("Failed to read password")
+			return "", xerrors.New("Failed to read a password")
 		}
 		if 0 < len(pass) {
 			return string(pass), nil
--- a/config/config.go
+++ b/config/config.go
@@ -27,13 +27,14 @@ import (
 	"strings"

 	syslog "github.com/RackSec/srslog"
+	"golang.org/x/xerrors"

 	valid "github.com/asaskevich/govalidator"
 	log "github.com/sirupsen/logrus"
 )

 // Version of Vuls
-var Version = "0.5.0"
+var Version = "0.7.0"

 // Revision of Git
 var Revision string
@@ -98,31 +99,34 @@ const (

 //Config is struct of Configuration
 type Config struct {
-	Debug      bool   `json:"debug"`
-	DebugSQL   bool   `json:"debugSQL"`
-	Lang       string `json:"lang"`
-	HTTPProxy  string `valid:"url" json:"httpProxy"`
-	LogDir     string `json:"logDir"`
-	ResultsDir string `json:"resultsDir"`
-	Pipe       bool   `json:"pipe"`
+	Debug      bool   `json:"debug,omitempty"`
+	DebugSQL   bool   `json:"debugSQL,omitempty"`
+	Lang       string `json:"lang,omitempty"`
+	HTTPProxy  string `valid:"url" json:"httpProxy,omitempty"`
+	LogDir     string `json:"logDir,omitempty"`
+	ResultsDir string `json:"resultsDir,omitempty"`
+	Pipe       bool   `json:"pipe,omitempty"`

-	Default            ServerInfo            `json:"default"`
-	Servers            map[string]ServerInfo `json:"servers"`
-	CvssScoreOver      float64               `json:"cvssScoreOver"`
-	IgnoreUnscoredCves bool                  `json:"ignoreUnscoredCves"`
-	IgnoreUnfixed      bool                  `json:"ignoreUnfixed"`
-	SSHNative          bool                  `json:"sshNative"`
-	SSHConfig          bool                  `json:"sshConfig"`
-	ContainersOnly     bool                  `json:"containersOnly"`
-	SkipBroken         bool                  `json:"skipBroken"`
-	CacheDBPath        string                `json:"cacheDBPath"`
-	Vvv                bool                  `json:"vvv"`
-	UUID               bool                  `json:"uuid"`
+	Default       ServerInfo            `json:"default,omitempty"`
+	Servers       map[string]ServerInfo `json:"servers,omitempty"`
+	CvssScoreOver float64               `json:"cvssScoreOver,omitempty"`

-	CveDict  GoCveDictConf `json:"cveDict"`
-	OvalDict GovalDictConf `json:"ovalDict"`
-	Gost     GostConf      `json:"gost"`
-	Exploit  ExploitConf   `json:"exploit"`
+	IgnoreUnscoredCves    bool `json:"ignoreUnscoredCves,omitempty"`
+	IgnoreUnfixed         bool `json:"ignoreUnfixed,omitempty"`
+	IgnoreGitHubDismissed bool `json:"ignore_git_hub_dismissed,omitempty"`
+
+	SSHNative      bool   `json:"sshNative,omitempty"`
+	SSHConfig      bool   `json:"sshConfig,omitempty"`
+	ContainersOnly bool   `json:"containersOnly,omitempty"`
+	SkipBroken     bool   `json:"skipBroken,omitempty"`
+	CacheDBPath    string `json:"cacheDBPath,omitempty"`
+	Vvv            bool   `json:"vvv,omitempty"`
+	UUID           bool   `json:"uuid,omitempty"`
+
+	CveDict  GoCveDictConf `json:"cveDict,omitempty"`
+	OvalDict GovalDictConf `json:"ovalDict,omitempty"`
+	Gost     GostConf      `json:"gost,omitempty"`
+	Exploit  ExploitConf   `json:"exploit,omitempty"`

 	Slack    SlackConf    `json:"-"`
 	EMail    SMTPConf     `json:"-"`
@@ -133,28 +137,30 @@ type Config struct {
 	Stride   StrideConf   `json:"-"`
 	HipChat  HipChatConf  `json:"-"`
 	ChatWork ChatWorkConf `json:"-"`
+	Telegram TelegramConf `json:"-"`
 	Saas     SaasConf     `json:"-"`

-	RefreshCve        bool `json:"refreshCve"`
-	ToSlack           bool `json:"toSlack"`
-	ToStride          bool `json:"toStride"`
-	ToHipChat         bool `json:"toHipChat"`
-	ToChatWork        bool `json:"toChatWork"`
-	ToEmail           bool `json:"toEmail"`
-	ToSyslog          bool `json:"toSyslog"`
-	ToLocalFile       bool `json:"toLocalFile"`
-	ToS3              bool `json:"toS3"`
-	ToAzureBlob       bool `json:"toAzureBlob"`
-	ToSaas            bool `json:"toSaas"`
-	ToHTTP            bool `json:"toHTTP"`
-	FormatXML         bool `json:"formatXML"`
-	FormatJSON        bool `json:"formatJSON"`
-	FormatOneEMail    bool `json:"formatOneEMail"`
-	FormatOneLineText bool `json:"formatOneLineText"`
-	FormatList        bool `json:"formatList"`
-	FormatFullText    bool `json:"formatFullText"`
-	GZIP              bool `json:"gzip"`
-	Diff              bool `json:"diff"`
+	RefreshCve        bool `json:"refreshCve,omitempty"`
+	ToSlack           bool `json:"toSlack,omitempty"`
+	ToStride          bool `json:"toStride,omitempty"`
+	ToHipChat         bool `json:"toHipChat,omitempty"`
+	ToChatWork        bool `json:"toChatWork,omitempty"`
+	ToTelegram        bool `json:"ToTelegram,omitempty"`
+	ToEmail           bool `json:"toEmail,omitempty"`
+	ToSyslog          bool `json:"toSyslog,omitempty"`
+	ToLocalFile       bool `json:"toLocalFile,omitempty"`
+	ToS3              bool `json:"toS3,omitempty"`
+	ToAzureBlob       bool `json:"toAzureBlob,omitempty"`
+	ToSaas            bool `json:"toSaas,omitempty"`
+	ToHTTP            bool `json:"toHTTP,omitempty"`
+	FormatXML         bool `json:"formatXML,omitempty"`
+	FormatJSON        bool `json:"formatJSON,omitempty"`
+	FormatOneEMail    bool `json:"formatOneEMail,omitempty"`
+	FormatOneLineText bool `json:"formatOneLineText,omitempty"`
+	FormatList        bool `json:"formatList,omitempty"`
+	FormatFullText    bool `json:"formatFullText,omitempty"`
+	GZIP              bool `json:"gzip,omitempty"`
+	Diff              bool `json:"diff,omitempty"`
 }

 // ValidateOnConfigtest validates
@@ -162,7 +168,7 @@ func (c Config) ValidateOnConfigtest() bool {
 	errs := []error{}

 	if runtime.GOOS == "windows" && !c.SSHNative {
-		errs = append(errs, fmt.Errorf("-ssh-native-insecure is needed on windows"))
+		errs = append(errs, xerrors.New("-ssh-native-insecure is needed on windows"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -183,25 +189,25 @@ func (c Config) ValidateOnScan() bool {

 	if len(c.ResultsDir) != 0 {
 		if ok, _ := valid.IsFilePath(c.ResultsDir); !ok {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"JSON base directory must be a *Absolute* file path. -results-dir: %s", c.ResultsDir))
 		}
 	}

 	if runtime.GOOS == "windows" && !c.SSHNative {
-		errs = append(errs, fmt.Errorf("-ssh-native-insecure is needed on windows"))
+		errs = append(errs, xerrors.New("-ssh-native-insecure is needed on windows"))
 	}

 	if len(c.ResultsDir) != 0 {
 		if ok, _ := valid.IsFilePath(c.ResultsDir); !ok {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"JSON base directory must be a *Absolute* file path. -results-dir: %s", c.ResultsDir))
 		}
 	}

 	if len(c.CacheDBPath) != 0 {
 		if ok, _ := valid.IsFilePath(c.CacheDBPath); !ok {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"Cache DB path must be a *Absolute* file path. -cache-dbpath: %s",
 				c.CacheDBPath))
 		}
@@ -228,7 +234,7 @@ func (c Config) ValidateOnReportDB() bool {
 	}
 	if c.CveDict.Type == "sqlite3" {
 		if _, err := os.Stat(c.CveDict.SQLite3Path); os.IsNotExist(err) {
-			errs = append(errs, fmt.Errorf("SQLite3 DB path (%s) is not exist: %s", "cvedb", c.CveDict.SQLite3Path))
+			errs = append(errs, xerrors.Errorf("SQLite3 DB path (%s) is not exist: %s", "cvedb", c.CveDict.SQLite3Path))
 		}
 	}

@@ -236,6 +242,14 @@ func (c Config) ValidateOnReportDB() bool {
 		errs = append(errs, err)
 	}

+	if err := validateDB("gostdb", c.Gost.Type, c.Gost.SQLite3Path, c.Gost.URL); err != nil {
+		errs = append(errs, err)
+	}
+
+	if err := validateDB("exploitdb", c.Exploit.Type, c.Exploit.SQLite3Path, c.Exploit.URL); err != nil {
+		errs = append(errs, err)
+	}
+
 	for _, err := range errs {
 		log.Error(err)
 	}
@@ -249,7 +263,7 @@ func (c Config) ValidateOnReport() bool {

 	if len(c.ResultsDir) != 0 {
 		if ok, _ := valid.IsFilePath(c.ResultsDir); !ok {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"JSON base directory must be a *Absolute* file path. -results-dir: %s", c.ResultsDir))
 		}
 	}
@@ -279,6 +293,10 @@ func (c Config) ValidateOnReport() bool {
 		errs = append(errs, strideerrs...)
 	}

+	if telegramerrs := c.Telegram.Validate(); 0 < len(telegramerrs) {
+		errs = append(errs, telegramerrs...)
+	}
+
 	if saaserrs := c.Saas.Validate(); 0 < len(saaserrs) {
 		errs = append(errs, saaserrs...)
 	}
@@ -304,7 +322,7 @@ func (c Config) ValidateOnTui() bool {

 	if len(c.ResultsDir) != 0 {
 		if ok, _ := valid.IsFilePath(c.ResultsDir); !ok {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"JSON base directory must be a *Absolute* file path. -results-dir: %s", c.ResultsDir))
 		}
 	}
@@ -314,7 +332,7 @@ func (c Config) ValidateOnTui() bool {
 	}
 	if c.CveDict.Type == "sqlite3" {
 		if _, err := os.Stat(c.CveDict.SQLite3Path); os.IsNotExist(err) {
-			errs = append(errs, fmt.Errorf("SQLite3 DB path (%s) is not exist: %s", "cvedb", c.CveDict.SQLite3Path))
+			errs = append(errs, xerrors.Errorf("SQLite3 DB path (%s) is not exist: %s", "cvedb", c.CveDict.SQLite3Path))
 		}
 	}

@@ -328,39 +346,42 @@ func (c Config) ValidateOnTui() bool {
 // validateDB validates configuration
 //  dictionaryDB name is 'cvedb' or 'ovaldb'
 func validateDB(dictionaryDBName, dbType, dbPath, dbURL string) error {
+	log.Infof("-%s-type: %s, -%s-url: %s, -%s-path: %s",
+		dictionaryDBName, dbType, dictionaryDBName, dbURL, dictionaryDBName, dbPath)
+
 	switch dbType {
 	case "sqlite3":
+		if dbURL != "" {
+			return xerrors.Errorf("To use SQLite3, specify -%s-type=sqlite3 and -%s-path. To use as http server mode, specify -%s-type=http and -%s-url",
+				dictionaryDBName, dictionaryDBName, dictionaryDBName, dictionaryDBName)
+		}
 		if ok, _ := valid.IsFilePath(dbPath); !ok {
-			return fmt.Errorf(
-				"SQLite3 DB path (%s) must be a *Absolute* file path. -%s-path: %s",
-				dictionaryDBName,
-				dictionaryDBName,
-				dbPath)
+			return xerrors.Errorf("SQLite3 path must be a *Absolute* file path. -%s-path: %s",
+				dictionaryDBName, dbPath)
 		}
 	case "mysql":
 		if dbURL == "" {
-			return fmt.Errorf(
-				`MySQL connection string is needed. -%s-url="user:pass@tcp(localhost:3306)/dbname"`,
+			return xerrors.Errorf(`MySQL connection string is needed. -%s-url="user:pass@tcp(localhost:3306)/dbname"`,
 				dictionaryDBName)
 		}
 	case "postgres":
 		if dbURL == "" {
-			return fmt.Errorf(
-				`PostgreSQL connection string is needed. -%s-url="host=myhost user=user dbname=dbname sslmode=disable password=password"`,
+			return xerrors.Errorf(`PostgreSQL connection string is needed. -%s-url="host=myhost user=user dbname=dbname sslmode=disable password=password"`,
 				dictionaryDBName)
 		}
 	case "redis":
 		if dbURL == "" {
-			return fmt.Errorf(
-				`Redis connection string is needed. -%s-url="redis://localhost/0"`,
+			return xerrors.Errorf(`Redis connection string is needed. -%s-url="redis://localhost/0"`,
+				dictionaryDBName)
+		}
+	case "http":
+		if dbURL == "" {
+			return xerrors.Errorf(`URL is needed. -%s-url="http://localhost:1323"`,
 				dictionaryDBName)
 		}
 	default:
-		return fmt.Errorf(
-			"%s type must be either 'sqlite3', 'mysql', 'postgres' or 'redis'.  -%s-type: %s",
-			dictionaryDBName,
-			dictionaryDBName,
-			dbType)
+		return xerrors.Errorf("%s type must be either 'sqlite3', 'mysql', 'postgres', 'redis' or 'http'.  -%s-type: %s",
+			dictionaryDBName, dictionaryDBName, dbType)
 	}
 	return nil
 }
@@ -383,7 +404,7 @@ func checkEmails(emails []string) (errs []error) {
 			return
 		}
 		if ok := valid.IsEmail(addr); !ok {
-			errs = append(errs, fmt.Errorf("Invalid email address. email: %s", addr))
+			errs = append(errs, xerrors.Errorf("Invalid email address. email: %s", addr))
 		}
 	}
 	return
@@ -405,16 +426,16 @@ func (c *SMTPConf) Validate() (errs []error) {
 	}

 	if len(c.SMTPAddr) == 0 {
-		errs = append(errs, fmt.Errorf("email.smtpAddr must not be empty"))
+		errs = append(errs, xerrors.New("email.smtpAddr must not be empty"))
 	}
 	if len(c.SMTPPort) == 0 {
-		errs = append(errs, fmt.Errorf("email.smtpPort must not be empty"))
+		errs = append(errs, xerrors.New("email.smtpPort must not be empty"))
 	}
 	if len(c.To) == 0 {
-		errs = append(errs, fmt.Errorf("email.To required at least one address"))
+		errs = append(errs, xerrors.New("email.To required at least one address"))
 	}
 	if len(c.From) == 0 {
-		errs = append(errs, fmt.Errorf("email.From required at least one address"))
+		errs = append(errs, xerrors.New("email.From required at least one address"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -437,11 +458,11 @@ func (c *StrideConf) Validate() (errs []error) {
 	}

 	if len(c.HookURL) == 0 {
-		errs = append(errs, fmt.Errorf("stride.HookURL must not be empty"))
+		errs = append(errs, xerrors.New("stride.HookURL must not be empty"))
 	}

 	if len(c.AuthToken) == 0 {
-		errs = append(errs, fmt.Errorf("stride.AuthToken must not be empty"))
+		errs = append(errs, xerrors.New("stride.AuthToken must not be empty"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -469,21 +490,21 @@ func (c *SlackConf) Validate() (errs []error) {
 	}

 	if len(c.HookURL) == 0 && len(c.LegacyToken) == 0 {
-		errs = append(errs, fmt.Errorf("slack.hookURL or slack.LegacyToken must not be empty"))
+		errs = append(errs, xerrors.New("slack.hookURL or slack.LegacyToken must not be empty"))
 	}

 	if len(c.Channel) == 0 {
-		errs = append(errs, fmt.Errorf("slack.channel must not be empty"))
+		errs = append(errs, xerrors.New("slack.channel must not be empty"))
 	} else {
 		if !(strings.HasPrefix(c.Channel, "#") ||
 			c.Channel == "${servername}") {
-			errs = append(errs, fmt.Errorf(
+			errs = append(errs, xerrors.Errorf(
 				"channel's prefix must be '#', channel: %s", c.Channel))
 		}
 	}

 	if len(c.AuthUser) == 0 {
-		errs = append(errs, fmt.Errorf("slack.authUser must not be empty"))
+		errs = append(errs, xerrors.New("slack.authUser must not be empty"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -506,11 +527,11 @@ func (c *HipChatConf) Validate() (errs []error) {
 		return
 	}
 	if len(c.Room) == 0 {
-		errs = append(errs, fmt.Errorf("hipcaht.room must not be empty"))
+		errs = append(errs, xerrors.New("hipcaht.room must not be empty"))
 	}

 	if len(c.AuthToken) == 0 {
-		errs = append(errs, fmt.Errorf("hipcaht.AuthToken must not be empty"))
+		errs = append(errs, xerrors.New("hipcaht.AuthToken must not be empty"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -532,11 +553,37 @@ func (c *ChatWorkConf) Validate() (errs []error) {
 		return
 	}
 	if len(c.Room) == 0 {
-		errs = append(errs, fmt.Errorf("chatworkcaht.room must not be empty"))
+		errs = append(errs, xerrors.New("chatworkcaht.room must not be empty"))
 	}

 	if len(c.APIToken) == 0 {
-		errs = append(errs, fmt.Errorf("chatworkcaht.ApiToken must not be empty"))
+		errs = append(errs, xerrors.New("chatworkcaht.ApiToken must not be empty"))
+	}
+
+	_, err := valid.ValidateStruct(c)
+	if err != nil {
+		errs = append(errs, err)
+	}
+	return
+}
+
+// TelegramConf is Telegram config
+type TelegramConf struct {
+	Token  string `json:"-"`
+	ChatID string `json:"-"`
+}
+
+// Validate validates configuration
+func (c *TelegramConf) Validate() (errs []error) {
+	if !Conf.ToTelegram {
+		return
+	}
+	if len(c.ChatID) == 0 {
+		errs = append(errs, xerrors.New("TelegramConf.ChatID must not be empty"))
+	}
+
+	if len(c.Token) == 0 {
+		errs = append(errs, xerrors.New("TelegramConf.Token must not be empty"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -560,15 +607,15 @@ func (c *SaasConf) Validate() (errs []error) {
 	}

 	if c.GroupID == 0 {
-		errs = append(errs, fmt.Errorf("saas.GroupID must not be empty"))
+		errs = append(errs, xerrors.New("saas.GroupID must not be empty"))
 	}

 	if len(c.Token) == 0 {
-		errs = append(errs, fmt.Errorf("saas.Token must not be empty"))
+		errs = append(errs, xerrors.New("saas.Token must not be empty"))
 	}

 	if len(c.URL) == 0 {
-		errs = append(errs, fmt.Errorf("saas.URL must not be empty"))
+		errs = append(errs, xerrors.New("saas.URL must not be empty"))
 	}

 	_, err := valid.ValidateStruct(c)
@@ -642,7 +689,7 @@ func (c *SyslogConf) GetSeverity() (syslog.Priority, error) {
 	case "debug":
 		return syslog.LOG_DEBUG, nil
 	default:
-		return -1, fmt.Errorf("Invalid severity: %s", c.Severity)
+		return -1, xerrors.Errorf("Invalid severity: %s", c.Severity)
 	}
 }

@@ -694,7 +741,7 @@ func (c *SyslogConf) GetFacility() (syslog.Priority, error) {
 	case "local7":
 		return syslog.LOG_LOCAL7, nil
 	default:
-		return -1, fmt.Errorf("Invalid facility: %s", c.Facility)
+		return -1, xerrors.Errorf("Invalid facility: %s", c.Facility)
 	}
 }

@@ -783,6 +830,11 @@ func (cnf *GoCveDictConf) Overwrite(cmdOpt GoCveDictConf) {
 	cnf.setDefault()
 }

+// IsFetchViaHTTP returns wether fetch via http
+func (cnf *GoCveDictConf) IsFetchViaHTTP() bool {
+	return Conf.CveDict.Type == "http"
+}
+
 // GovalDictConf is goval-dictionary config
 type GovalDictConf struct {

@@ -837,6 +889,11 @@ func (cnf *GovalDictConf) Overwrite(cmdOpt GovalDictConf) {
 	cnf.setDefault()
 }

+// IsFetchViaHTTP returns wether fetch via http
+func (cnf *GovalDictConf) IsFetchViaHTTP() bool {
+	return Conf.OvalDict.Type == "http"
+}
+
 // GostConf is gost config
 type GostConf struct {
 	// DB type for gost dictionary (sqlite3, mysql, postgres or redis)
@@ -890,6 +947,11 @@ func (cnf *GostConf) Overwrite(cmdOpt GostConf) {
 	cnf.setDefault()
 }

+// IsFetchViaHTTP returns wether fetch via http
+func (cnf *GostConf) IsFetchViaHTTP() bool {
+	return Conf.Gost.Type == "http"
+}
+
 // ExploitConf is exploit config
 type ExploitConf struct {
 	// DB type for exploit dictionary (sqlite3, mysql, postgres or redis)
@@ -943,6 +1005,11 @@ func (cnf *ExploitConf) Overwrite(cmdOpt ExploitConf) {
 	cnf.setDefault()
 }

+// IsFetchViaHTTP returns wether fetch via http
+func (cnf *ExploitConf) IsFetchViaHTTP() bool {
+	return Conf.Exploit.Type == "http"
+}
+
 // AWS is aws config
 type AWS struct {
 	// AWS profile to use
@@ -975,31 +1042,36 @@ type Azure struct {

 // ServerInfo has SSH Info, additional CPE packages to scan.
 type ServerInfo struct {
-	ServerName             string                      `toml:"-" json:"serverName"`
-	User                   string                      `toml:"user,omitempty" json:"user"`
-	Host                   string                      `toml:"host,omitempty" json:"host"`
-	Port                   string                      `toml:"port,omitempty" json:"port"`
-	KeyPath                string                      `toml:"keyPath,omitempty" json:"keyPath"`
-	KeyPassword            string                      `json:"-" toml:"-"`
+	ServerName             string                      `toml:"-" json:"serverName,omitempty"`
+	User                   string                      `toml:"user,omitempty" json:"user,omitempty"`
+	Host                   string                      `toml:"host,omitempty" json:"host,omitempty"`
+	Port                   string                      `toml:"port,omitempty" json:"port,omitempty"`
+	KeyPath                string                      `toml:"keyPath,omitempty" json:"keyPath,omitempty"`
+	KeyPassword            string                      `json:"-,omitempty" toml:"-"`
 	CpeNames               []string                    `toml:"cpeNames,omitempty" json:"cpeNames,omitempty"`
 	ScanMode               []string                    `toml:"scanMode,omitempty" json:"scanMode,omitempty"`
 	DependencyCheckXMLPath string                      `toml:"dependencyCheckXMLPath,omitempty" json:"-"` // TODO Deprecated remove in near future
-	OwaspDCXMLPath         string                      `toml:"owaspDCXMLPath,omitempty" json:"owaspDCXMLPath"`
+	OwaspDCXMLPath         string                      `toml:"owaspDCXMLPath,omitempty" json:"owaspDCXMLPath,omitempty"`
 	ContainersIncluded     []string                    `toml:"containersIncluded,omitempty" json:"containersIncluded,omitempty"`
 	ContainersExcluded     []string                    `toml:"containersExcluded,omitempty" json:"containersExcluded,omitempty"`
 	ContainerType          string                      `toml:"containerType,omitempty" json:"containerType,omitempty"`
 	Containers             map[string]ContainerSetting `toml:"containers" json:"containers,omitempty"`
 	IgnoreCves             []string                    `toml:"ignoreCves,omitempty" json:"ignoreCves,omitempty"`
 	IgnorePkgsRegexp       []string                    `toml:"ignorePkgsRegexp,omitempty" json:"ignorePkgsRegexp,omitempty"`
+	GitHubRepos            map[string]GitHubConf       `toml:"githubs" json:"githubs,omitempty"` // key: owner/repo
 	UUIDs                  map[string]string           `toml:"uuids,omitempty" json:"uuids,omitempty"`
-	Memo                   string                      `toml:"memo,omitempty" json:"memo"`
+	Memo                   string                      `toml:"memo,omitempty" json:"memo,omitempty"`
 	Enablerepo             []string                    `toml:"enablerepo,omitempty" json:"enablerepo,omitempty"` // For CentOS, RHEL, Amazon
 	Optional               map[string]interface{}      `toml:"optional,omitempty" json:"optional,omitempty"`     // Optional key-value set that will be outputted to JSON
-	Type                   string                      `toml:"type,omitempty" json:"type"`                       // "pseudo" or ""
-	IPv4Addrs              []string                    `toml:"-" json:"ipv4Addrs,omitempty"`
-	IPv6Addrs              []string                    `toml:"-" json:"ipv6Addrs,omitempty"`
+
+	Type string `toml:"type,omitempty" json:"type,omitempty"` // "pseudo" or ""
+
+	WordPress WordPressConf `toml:"wordpress,omitempty" json:"wordpress,omitempty"`

 	// used internal
+	IPv4Addrs []string `toml:"-" json:"ipv4Addrs,omitempty"`
+	IPv6Addrs []string `toml:"-" json:"ipv6Addrs,omitempty"`
+
 	LogMsgAnsiColor string    `toml:"-" json:"-"` // DebugLog Color
 	Container       Container `toml:"-" json:"-"`
 	Distro          Distro    `toml:"-" json:"-"`
@@ -1014,6 +1086,20 @@ type ContainerSetting struct {
 	IgnoreCves       []string `json:"ignoreCves,omitempty"`
 }

+// WordPressConf used for WordPress Scanning
+type WordPressConf struct {
+	OSUser         string `toml:"osUser" json:"osUser,omitempty"`
+	DocRoot        string `toml:"docRoot" json:"docRoot,omitempty"`
+	CmdPath        string `toml:"cmdPath" json:"cmdPath,omitempty"`
+	WPVulnDBToken  string `toml:"wpVulnDBToken" json:"-,omitempty"`
+	IgnoreInactive bool   `json:"ignoreInactive,omitempty"`
+}
+
+// GitHubConf is used for GitHub integration
+type GitHubConf struct {
+	Token string `json:"-"`
+}
+
 // ScanMode has a type of scan mode. fast, fast-root, deep and offline
 type ScanMode struct {
 	flag byte
@@ -1054,9 +1140,9 @@ func (s ScanMode) validate() error {
 	if numTrue == 0 {
 		s.Set(Fast)
 	} else if s.IsDeep() && s.IsOffline() {
-		return fmt.Errorf("Don't specify both of -deep and offline")
+		return xerrors.New("Don't specify both of -deep and offline")
 	} else if numTrue != 1 {
-		return fmt.Errorf("Specify only one of -fast, -fast-root or -deep")
+		return xerrors.New("Specify only one of -fast, -fast-root or -deep")
 	}
 	return nil
 }
@@ -1119,7 +1205,7 @@ func (l Distro) MajorVersion() (ver int, err error) {
 	if 0 < len(l.Release) {
 		ver, err = strconv.Atoi(strings.Split(l.Release, ".")[0])
 	} else {
-		err = fmt.Errorf("Release is empty")
+		err = xerrors.New("Release is empty")
 	}
 	return
 }
--- a/config/jsonloader.go
+++ b/config/jsonloader.go
@@ -17,7 +17,7 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.

 package config

-import "fmt"
+import "golang.org/x/xerrors"

 // JSONLoader loads configuration
 type JSONLoader struct {
@@ -25,5 +25,5 @@ type JSONLoader struct {

 // Load load the configuration JSON file specified by path arg.
 func (c JSONLoader) Load(path, sudoPass, keyPass string) (err error) {
-	return fmt.Errorf("Not implement yet")
+	return xerrors.New("Not implement yet")
 }
--- a/config/tomlloader.go
+++ b/config/tomlloader.go
@@ -18,13 +18,13 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package config

 import (
-	"fmt"
 	"os"
 	"regexp"
 	"strings"

 	"github.com/BurntSushi/toml"
 	"github.com/knqyf263/go-cpe/naming"
+	"golang.org/x/xerrors"
 )

 // TOMLLoader loads config
@@ -42,6 +42,7 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 	Conf.Stride = conf.Stride
 	Conf.HipChat = conf.HipChat
 	Conf.ChatWork = conf.ChatWork
+	Conf.Telegram = conf.Telegram
 	Conf.Saas = conf.Saas
 	Conf.Syslog = conf.Syslog
 	Conf.HTTP = conf.HTTP
@@ -64,14 +65,14 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 	i := 0
 	for serverName, v := range conf.Servers {
 		if 0 < len(v.KeyPassword) {
-			return fmt.Errorf("[Deprecated] KEYPASSWORD IN CONFIG FILE ARE UNSECURE. REMOVE THEM IMMEDIATELY FOR A SECURITY REASONS. THEY WILL BE REMOVED IN A FUTURE RELEASE: %s", serverName)
+			return xerrors.Errorf("[Deprecated] KEYPASSWORD IN CONFIG FILE ARE UNSECURE. REMOVE THEM IMMEDIATELY FOR A SECURITY REASONS. THEY WILL BE REMOVED IN A FUTURE RELEASE: %s", serverName)
 		}

 		s := ServerInfo{ServerName: serverName}
 		if v.Type != ServerTypePseudo {
 			s.Host = v.Host
 			if len(s.Host) == 0 {
-				return fmt.Errorf("%s is invalid. host is empty", serverName)
+				return xerrors.Errorf("%s is invalid. host is empty", serverName)
 			}

 			switch {
@@ -90,7 +91,7 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 				s.User = d.User
 			default:
 				if s.Port != "local" {
-					return fmt.Errorf("%s is invalid. User is empty", serverName)
+					return xerrors.Errorf("%s is invalid. User is empty", serverName)
 				}
 			}

@@ -100,7 +101,7 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 			}
 			if s.KeyPath != "" {
 				if _, err := os.Stat(s.KeyPath); err != nil {
-					return fmt.Errorf(
+					return xerrors.Errorf(
 						"%s is invalid. keypath: %s not exists", serverName, s.KeyPath)
 				}
 			}
@@ -129,11 +130,11 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 			case "offline":
 				s.Mode.Set(Offline)
 			default:
-				return fmt.Errorf("scanMode: %s of %s is invalie. Specify -fast, -fast-root, -deep or offline", m, serverName)
+				return xerrors.Errorf("scanMode: %s of %s is invalie. Specify -fast, -fast-root, -deep or offline", m, serverName)
 			}
 		}
 		if err := s.Mode.validate(); err != nil {
-			return fmt.Errorf("%s in %s", err, serverName)
+			return xerrors.Errorf("%s in %s", err, serverName)
 		}

 		s.CpeNames = v.CpeNames
@@ -144,7 +145,7 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 		for i, n := range s.CpeNames {
 			uri, err := toCpeURI(n)
 			if err != nil {
-				return fmt.Errorf("Failed to parse CPENames %s in %s: %s", n, serverName, err)
+				return xerrors.Errorf("Failed to parse CPENames %s in %s, err: %w", n, serverName, err)
 			}
 			s.CpeNames[i] = uri
 		}
@@ -171,7 +172,7 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 		}

 		if len(v.DependencyCheckXMLPath) != 0 || len(d.DependencyCheckXMLPath) != 0 {
-			return fmt.Errorf("[DEPRECATED] dependencyCheckXMLPath IS DEPRECATED. USE owaspDCXMLPath INSTEAD: %s", serverName)
+			return xerrors.Errorf("[DEPRECATED] dependencyCheckXMLPath IS DEPRECATED. USE owaspDCXMLPath INSTEAD: %s", serverName)
 		}

 		s.OwaspDCXMLPath = v.OwaspDCXMLPath
@@ -214,14 +215,14 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 		for _, reg := range s.IgnorePkgsRegexp {
 			_, err := regexp.Compile(reg)
 			if err != nil {
-				return fmt.Errorf("Faild to parse %s in %s. err: %s", reg, serverName, err)
+				return xerrors.Errorf("Faild to parse %s in %s. err: %w", reg, serverName, err)
 			}
 		}
 		for contName, cont := range s.Containers {
 			for _, reg := range cont.IgnorePkgsRegexp {
 				_, err := regexp.Compile(reg)
 				if err != nil {
-					return fmt.Errorf("Faild to parse %s in %s@%s. err: %s",
+					return xerrors.Errorf("Faild to parse %s in %s@%s. err: %w",
 						reg, contName, serverName, err)
 				}
 			}
@@ -246,16 +247,34 @@ func (c TOMLLoader) Load(pathToToml, keyPass string) error {
 				case "base", "updates":
 					// nop
 				default:
-					return fmt.Errorf(
+					return xerrors.Errorf(
 						"For now, enablerepo have to be base or updates: %s, servername: %s",
 						s.Enablerepo, serverName)
 				}
 			}
 		}

+		s.GitHubRepos = v.GitHubRepos
+		for ownerRepo, githubSetting := range s.GitHubRepos {
+			if ss := strings.Split(ownerRepo, "/"); len(ss) != 2 {
+				return xerrors.Errorf("Failed to parse GitHub owner/repo: %s in %s",
+					ownerRepo, serverName)
+			}
+			if githubSetting.Token == "" {
+				return xerrors.Errorf("GitHub owner/repo: %s in %s token is empty",
+					ownerRepo, serverName)
+			}
+		}
+
 		s.UUIDs = v.UUIDs
 		s.Type = v.Type

+		s.WordPress.WPVulnDBToken = v.WordPress.WPVulnDBToken
+		s.WordPress.CmdPath = v.WordPress.CmdPath
+		s.WordPress.DocRoot = v.WordPress.DocRoot
+		s.WordPress.OSUser = v.WordPress.OSUser
+		s.WordPress.IgnoreInactive = v.WordPress.IgnoreInactive
+
 		s.LogMsgAnsiColor = Colors[i%len(Colors)]
 		i++

@@ -279,5 +298,5 @@ func toCpeURI(cpename string) (string, error) {
 		}
 		return naming.BindToURI(wfn), nil
 	}
-	return "", fmt.Errorf("Unknow CPE format: %s", cpename)
+	return "", xerrors.Errorf("Unknow CPE format: %s", cpename)
 }
--- a/contrib/owasp-dependency-check/parser/parser.go
+++ b/contrib/owasp-dependency-check/parser/parser.go
@@ -2,12 +2,12 @@ package parser

 import (
 	"encoding/xml"
-	"fmt"
 	"io/ioutil"
 	"os"
 	"strings"

 	log "github.com/sirupsen/logrus"
+	"golang.org/x/xerrors"
 )

 type analysis struct {
@@ -49,7 +49,7 @@ func Parse(path string) ([]string, error) {

 	var anal analysis
 	if err := xml.Unmarshal(b, &anal); err != nil {
-		return nil, fmt.Errorf("Failed to unmarshal: %s", err)
+		return nil, xerrors.Errorf("Failed to unmarshal: %s", err)
 	}

 	cpes := []string{}
--- a/exploit/exploit.go
+++ b/exploit/exploit.go
@@ -18,64 +18,82 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package exploit

 import (
+	"encoding/json"
 	"fmt"
 	"net/http"

 	cnf "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
+	"github.com/future-architect/vuls/util"
 	"github.com/mozqnet/go-exploitdb/db"
 	exploitmodels "github.com/mozqnet/go-exploitdb/models"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 // FillWithExploit fills exploit information that has in Exploit
 func FillWithExploit(driver db.DB, r *models.ScanResult) (nExploitCve int, err error) {
-	if isFetchViaHTTP() {
-		// TODO
-		return 0, fmt.Errorf("We are not yet supporting data acquisition in exploitdb server mode")
-	}
-
-	if driver == nil {
-		return 0, nil
-	}
-	for cveID, vuln := range r.ScannedCves {
-		es := driver.GetExploitByCveID(cveID)
-		if len(es) == 0 {
-			continue
+	if cnf.Conf.Exploit.IsFetchViaHTTP() {
+		var cveIDs []string
+		for cveID := range r.ScannedCves {
+			cveIDs = append(cveIDs, cveID)
+		}
+		prefix, _ := util.URLPathJoin(cnf.Conf.Exploit.URL, "cves")
+		responses, err := getCvesViaHTTP(cveIDs, prefix)
+		if err != nil {
+			return 0, err
+		}
+		for _, res := range responses {
+			exps := []*exploitmodels.Exploit{}
+			if err := json.Unmarshal([]byte(res.json), &exps); err != nil {
+				return 0, err
+			}
+			exploits := ConvertToModels(exps)
+			v, ok := r.ScannedCves[res.request.cveID]
+			if ok {
+				v.Exploits = exploits
+			}
+			r.ScannedCves[res.request.cveID] = v
+			nExploitCve++
+		}
+	} else {
+		if driver == nil {
+			return 0, nil
+		}
+		for cveID, vuln := range r.ScannedCves {
+			es := driver.GetExploitByCveID(cveID)
+			if len(es) == 0 {
+				continue
+			}
+			exploits := ConvertToModels(es)
+			vuln.Exploits = exploits
+			r.ScannedCves[cveID] = vuln
+			nExploitCve++
 		}
-		exploits := ConvertToModel(es)
-		vuln.Exploits = exploits
-		r.ScannedCves[cveID] = vuln
-		nExploitCve++
 	}
 	return nExploitCve, nil
 }

-// ConvertToModel converts gost model to vuls model
-func ConvertToModel(es []*exploitmodels.Exploit) (exploits []models.Exploit) {
+// ConvertToModels converts gost model to vuls model
+func ConvertToModels(es []*exploitmodels.Exploit) (exploits []models.Exploit) {
 	for _, e := range es {
-		var documentURL, paperURL, shellURL *string
-		var description string
-		if e.Document != nil {
-			documentURL = &e.Document.DocumentURL
-			description = e.Document.Description
-		}
-		if e.ShellCode != nil {
-			shellURL = &e.ShellCode.ShellCodeURL
-			description = e.ShellCode.Description
-		}
-		if e.Paper != nil {
-			paperURL = &e.Paper.PaperURL
-			description = e.Paper.Description
+		var documentURL, shellURL *string
+		if e.OffensiveSecurity != nil {
+			os := e.OffensiveSecurity
+			if os.Document != nil {
+				documentURL = &os.Document.DocumentURL
+			}
+			if os.ShellCode != nil {
+				shellURL = &os.ShellCode.ShellCodeURL
+			}
 		}
 		exploit := models.Exploit{
-			ExploitType:  models.ExploitDB,
-			ID:           e.ExploitDBID,
-			URL:          e.ExploitDBURL,
-			Description:  description,
+			ExploitType:  e.ExploitType,
+			ID:           e.ExploitUniqueID,
+			URL:          e.URL,
+			Description:  e.Description,
 			DocumentURL:  documentURL,
 			ShellCodeURL: shellURL,
-			PaperURL:     paperURL,
 		}
 		exploits = append(exploits, exploit)
 	}
@@ -84,7 +102,7 @@ func ConvertToModel(es []*exploitmodels.Exploit) (exploits []models.Exploit) {

 // CheckHTTPHealth do health check
 func CheckHTTPHealth() error {
-	if !isFetchViaHTTP() {
+	if !cnf.Conf.Exploit.IsFetchViaHTTP() {
 		return nil
 	}

@@ -95,8 +113,7 @@ func CheckHTTPHealth() error {
 	//  resp, _, errs = gorequest.New().SetDebug(config.Conf.Debug).Get(url).End()
 	//  resp, _, errs = gorequest.New().Proxy(api.httpProxy).Get(url).End()
 	if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-		return fmt.Errorf("Failed to connect to exploit server. url: %s, errs: %v",
-			url, errs)
+		return xerrors.Errorf("Failed to connect to exploit server. url: %s, errs: %w", url, errs)
 	}
 	return nil
 }
@@ -112,8 +129,3 @@ func CheckIfExploitFresh(driver db.DB, osFamily string) (ok bool, err error) {
 	//TODO
 	return true, nil
 }
-
-func isFetchViaHTTP() bool {
-	// Default value of OvalDBType is sqlite3
-	return cnf.Conf.Exploit.URL != "" && cnf.Conf.Exploit.Type == "sqlite3"
-}
--- a/exploit/util.go
+++ b/exploit/util.go
@@ -18,13 +18,13 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package exploit

 import (
-	"fmt"
 	"net/http"
 	"time"

 	"github.com/cenkalti/backoff"
 	"github.com/future-architect/vuls/util"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 type response struct {
@@ -79,11 +79,11 @@ func getCvesViaHTTP(cveIDs []string, urlPrefix string) (
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			return nil, fmt.Errorf("Timeout Fetching OVAL")
+			return nil, xerrors.New("Timeout Fetching OVAL")
 		}
 	}
 	if len(errs) != 0 {
-		return nil, fmt.Errorf("Failed to fetch OVAL. err: %v", errs)
+		return nil, xerrors.Errorf("Failed to fetch OVAL. err: %w", errs)
 	}
 	return
 }
@@ -108,8 +108,7 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 			if count == retryMax {
 				return nil
 			}
-			return fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-				errs, url, resp)
+			return xerrors.Errorf("HTTP GET error, url: %s, resp: %v, err: %w", url, resp, errs)
 		}
 		return nil
 	}
@@ -118,11 +117,11 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 	}
 	err := backoff.RetryNotify(f, backoff.NewExponentialBackOff(), notify)
 	if err != nil {
-		errChan <- fmt.Errorf("HTTP Error %s", err)
+		errChan <- xerrors.Errorf("HTTP Error %w", err)
 		return
 	}
 	if count == retryMax {
-		errChan <- fmt.Errorf("HRetry count exceeded")
+		errChan <- xerrors.New("Retry count exceeded")
 		return
 	}

--- a/github/github.go
+++ b/github/github.go
@@ -0,0 +1,144 @@
+/* Vuls - Vulnerability Scanner
+Copyright (C) 2016  Future Corporation , Japan.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+package github
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/future-architect/vuls/config"
+	"github.com/future-architect/vuls/models"
+	"github.com/future-architect/vuls/util"
+	"github.com/k0kubun/pp"
+	"golang.org/x/oauth2"
+)
+
+// FillGitHubSecurityAlerts access to owner/repo on GitHub and fetch scurity alerts of the repository via GitHub API v4 GraphQL and then set to the given ScanResult.
+// https://help.github.com/articles/about-security-alerts-for-vulnerable-dependencies/
+func FillGitHubSecurityAlerts(r *models.ScanResult, owner, repo, token string) (nCVEs int, err error) {
+	src := oauth2.StaticTokenSource(
+		&oauth2.Token{AccessToken: token},
+	)
+	httpClient := oauth2.NewClient(context.Background(), src)
+
+	// TODO Use `https://github.com/shurcooL/githubv4` if the tool supports vulnerabilityAlerts Endpoint
+	const jsonfmt = `{"query":
+	"query { repository(owner:\"%s\", name:\"%s\") { url, vulnerabilityAlerts(first: %d, %s) { pageInfo{ endCursor, hasNextPage, startCursor}, edges { node { id, externalIdentifier, externalReference, fixedIn, packageName,  dismissReason, dismissedAt } } } } }"}`
+	after := ""
+
+	for {
+		jsonStr := fmt.Sprintf(jsonfmt, owner, repo, 100, after)
+		req, err := http.NewRequest("POST",
+			"https://api.github.com/graphql",
+			bytes.NewBuffer([]byte(jsonStr)),
+		)
+		if err != nil {
+			return 0, err
+		}
+
+		// https://developer.github.com/v4/previews/#repository-vulnerability-alerts
+		// To toggle this preview and access data, need to provide a custom media type in the Accept header:
+		// MEMO: I tried to get the affected version via GitHub API. Bit it seems difficult to determin the affected version if there are multiple dependency files such as package.json.
+		// TODO remove this header if it is no longer preview status in the future.
+		req.Header.Set("Accept", "application/vnd.github.vixen-preview+json")
+		req.Header.Set("Content-Type", "application/json")
+
+		resp, err := httpClient.Do(req)
+		if err != nil {
+			return 0, err
+		}
+		defer resp.Body.Close()
+		alerts := SecurityAlerts{}
+		if json.NewDecoder(resp.Body).Decode(&alerts); err != nil {
+			return 0, err
+		}
+
+		util.Log.Debugf("%s", pp.Sprint(alerts))
+
+		for _, v := range alerts.Data.Repository.VulnerabilityAlerts.Edges {
+			if config.Conf.IgnoreGitHubDismissed && v.Node.DismissReason != "" {
+				continue
+			}
+
+			pkgName := fmt.Sprintf("%s %s",
+				alerts.Data.Repository.URL, v.Node.PackageName)
+
+			m := models.GitHubSecurityAlert{
+				PackageName:   pkgName,
+				FixedIn:       v.Node.FixedIn,
+				AffectedRange: v.Node.AffectedRange,
+				Dismissed:     len(v.Node.DismissReason) != 0,
+				DismissedAt:   v.Node.DismissedAt,
+				DismissReason: v.Node.DismissReason,
+			}
+
+			cveID := v.Node.ExternalIdentifier
+
+			if val, ok := r.ScannedCves[cveID]; ok {
+				val.GitHubSecurityAlerts = val.GitHubSecurityAlerts.Add(m)
+				r.ScannedCves[cveID] = val
+				nCVEs++
+			} else {
+				v := models.VulnInfo{
+					CveID:                cveID,
+					Confidences:          models.Confidences{models.GitHubMatch},
+					GitHubSecurityAlerts: models.GitHubSecurityAlerts{m},
+				}
+				r.ScannedCves[cveID] = v
+				nCVEs++
+			}
+		}
+		if !alerts.Data.Repository.VulnerabilityAlerts.PageInfo.HasNextPage {
+			break
+		}
+		after = fmt.Sprintf(`after: \"%s\"`, alerts.Data.Repository.VulnerabilityAlerts.PageInfo.EndCursor)
+	}
+	return nCVEs, err
+}
+
+//SecurityAlerts has detected CVE-IDs, PackageNames, Refs
+type SecurityAlerts struct {
+	Data struct {
+		Repository struct {
+			URL                 string `json:"url,omitempty"`
+			VulnerabilityAlerts struct {
+				PageInfo struct {
+					EndCursor   string `json:"endCursor,omitempty"`
+					HasNextPage bool   `json:"hasNextPage,omitempty"`
+					StartCursor string `json:"startCursor,omitempty"`
+				} `json:"pageInfo,omitempty"`
+				Edges []struct {
+					Node struct {
+						ID                 string    `json:"id,omitempty"`
+						ExternalIdentifier string    `json:"externalIdentifier,omitempty"`
+						ExternalReference  string    `json:"externalReference,omitempty"`
+						FixedIn            string    `json:"fixedIn,omitempty"`
+						AffectedRange      string    `json:"affectedRange,omitempty"`
+						PackageName        string    `json:"packageName,omitempty"`
+						DismissReason      string    `json:"dismissReason,omitempty"`
+						DismissedAt        time.Time `json:"dismissedAt,omitempty"`
+					} `json:"node,omitempty"`
+				} `json:"edges,omitempty"`
+			} `json:"vulnerabilityAlerts,omitempty"`
+		} `json:"repository,omitempty"`
+	} `json:"data,omitempty"`
+}
--- a/gost/debian.go
+++ b/gost/debian.go
@@ -55,7 +55,7 @@ func (deb Debian) FillWithGost(driver db.DB, r *models.ScanResult) (nCVEs int, e
 	}

 	packCvesList := []packCves{}
-	if deb.isFetchViaHTTP() {
+	if config.Conf.Gost.IsFetchViaHTTP() {
 		url, _ := util.URLPathJoin(config.Conf.Gost.URL, "debian", major(r.Release), "pkgs")
 		responses, err := getAllUnfixedCvesViaHTTP(r, url)
 		if err != nil {
@@ -115,7 +115,11 @@ func (deb Debian) FillWithGost(driver db.DB, r *models.ScanResult) (nCVEs int, e
 		for _, cve := range p.cves {
 			v, ok := r.ScannedCves[cve.CveID]
 			if ok {
-				v.CveContents[models.DebianSecurityTracker] = cve
+				if v.CveContents == nil {
+					v.CveContents = models.NewCveContents(cve)
+				} else {
+					v.CveContents[models.DebianSecurityTracker] = cve
+				}
 			} else {
 				v = models.VulnInfo{
 					CveID:       cve.CveID,
@@ -143,7 +147,7 @@ func (deb Debian) FillWithGost(driver db.DB, r *models.ScanResult) (nCVEs int, e
 			}

 			for _, name := range names {
-				v.AffectedPackages = v.AffectedPackages.Store(models.PackageStatus{
+				v.AffectedPackages = v.AffectedPackages.Store(models.PackageFixStatus{
 					Name:        name,
 					FixState:    "open",
 					NotFixedYet: true,
--- a/gost/gost.go
+++ b/gost/gost.go
@@ -26,6 +26,7 @@ import (
 	"github.com/future-architect/vuls/models"
 	"github.com/knqyf263/gost/db"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 // Client is the interface of OVAL client.
@@ -60,7 +61,7 @@ type Base struct {

 // CheckHTTPHealth do health check
 func (b Base) CheckHTTPHealth() error {
-	if !b.isFetchViaHTTP() {
+	if !cnf.Conf.Gost.IsFetchViaHTTP() {
 		return nil
 	}

@@ -71,8 +72,7 @@ func (b Base) CheckHTTPHealth() error {
 	//  resp, _, errs = gorequest.New().SetDebug(config.Conf.Debug).Get(url).End()
 	//  resp, _, errs = gorequest.New().Proxy(api.httpProxy).Get(url).End()
 	if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-		return fmt.Errorf("Failed to connect to gost server. url: %s, errs: %v",
-			url, errs)
+		return xerrors.Errorf("Failed to connect to gost server. url: %s, errs: %w", url, errs)
 	}
 	return nil
 }
@@ -89,11 +89,6 @@ func (b Base) CheckIfGostFresh(driver db.DB, osFamily string) (ok bool, err erro
 	return true, nil
 }

-func (b Base) isFetchViaHTTP() bool {
-	// Default value of OvalDBType is sqlite3
-	return cnf.Conf.Gost.URL != "" && cnf.Conf.Gost.Type == "sqlite3"
-}
-
 // Pseudo is Gost client except for RedHat family and Debian
 type Pseudo struct {
 	Base
--- a/gost/gost_test.go
+++ b/gost/gost_test.go
@@ -14,7 +14,7 @@ func TestSetPackageStates(t *testing.T) {
 		installed models.Packages
 		release   string
 		in        models.VulnInfo
-		out       models.PackageStatuses
+		out       models.PackageFixStatuses
 	}{

 		//0 one
@@ -31,7 +31,7 @@ func TestSetPackageStates(t *testing.T) {
 			},
 			release: "7",
 			in:      models.VulnInfo{},
-			out: []models.PackageStatus{
+			out: []models.PackageFixStatus{
 				{
 					Name:        "bouncycastle",
 					FixState:    "Will not fix",
@@ -66,7 +66,7 @@ func TestSetPackageStates(t *testing.T) {
 			},
 			release: "7",
 			in:      models.VulnInfo{},
-			out: []models.PackageStatus{
+			out: []models.PackageFixStatus{
 				{
 					Name:        "bouncycastle",
 					FixState:    "Will not fix",
@@ -94,9 +94,9 @@ func TestSetPackageStates(t *testing.T) {
 			},
 			release: "7",
 			in: models.VulnInfo{
-				AffectedPackages: models.PackageStatuses{},
+				AffectedPackages: models.PackageFixStatuses{},
 			},
-			out: models.PackageStatuses{},
+			out: models.PackageFixStatuses{},
 		},

 		//3 look only the same os release.
@@ -113,9 +113,9 @@ func TestSetPackageStates(t *testing.T) {
 			},
 			release: "7",
 			in: models.VulnInfo{
-				AffectedPackages: models.PackageStatuses{},
+				AffectedPackages: models.PackageFixStatuses{},
 			},
-			out: models.PackageStatuses{},
+			out: models.PackageFixStatuses{},
 		},
 	}

--- a/gost/microsoft.go
+++ b/gost/microsoft.go
@@ -45,6 +45,9 @@ func (ms Microsoft) FillWithGost(driver db.DB, r *models.ScanResult) (nCVEs int,
 		}
 		cveCont := ms.ConvertToModel(&msCve)
 		v, _ := r.ScannedCves[cveID]
+		if v.CveContents == nil {
+			v.CveContents = models.CveContents{}
+		}
 		v.CveContents[models.Microsoft] = *cveCont
 		r.ScannedCves[cveID] = v
 	}
--- a/gost/redhat.go
+++ b/gost/redhat.go
@@ -51,7 +51,7 @@ func (red RedHat) fillFixed(driver db.DB, r *models.ScanResult) error {
 		cveIDs = append(cveIDs, cveID)
 	}

-	if red.isFetchViaHTTP() {
+	if config.Conf.Gost.IsFetchViaHTTP() {
 		prefix, _ := util.URLPathJoin(config.Conf.Gost.URL,
 			"redhat", "cves")
 		responses, err := getCvesViaHTTP(cveIDs, prefix)
@@ -67,8 +67,20 @@ func (red RedHat) fillFixed(driver db.DB, r *models.ScanResult) error {
 				continue
 			}
 			cveCont := red.ConvertToModel(&redCve)
-			v, _ := r.ScannedCves[res.request.cveID]
-			v.CveContents[models.RedHatAPI] = *cveCont
+			v, ok := r.ScannedCves[res.request.cveID]
+			if ok {
+				if v.CveContents == nil {
+					v.CveContents = models.NewCveContents(*cveCont)
+				} else {
+					v.CveContents[models.RedHatAPI] = *cveCont
+				}
+			} else {
+				v = models.VulnInfo{
+					CveID:       cveCont.CveID,
+					CveContents: models.NewCveContents(*cveCont),
+					Confidences: models.Confidences{models.RedHatAPIMatch},
+				}
+			}
 			r.ScannedCves[res.request.cveID] = v
 		}
 	} else {
@@ -80,8 +92,20 @@ func (red RedHat) fillFixed(driver db.DB, r *models.ScanResult) error {
 				continue
 			}
 			cveCont := red.ConvertToModel(&redCve)
-			v, _ := r.ScannedCves[cveID]
-			v.CveContents[models.RedHatAPI] = *cveCont
+			v, ok := r.ScannedCves[cveID]
+			if ok {
+				if v.CveContents == nil {
+					v.CveContents = models.NewCveContents(*cveCont)
+				} else {
+					v.CveContents[models.RedHatAPI] = *cveCont
+				}
+			} else {
+				v = models.VulnInfo{
+					CveID:       cveCont.CveID,
+					CveContents: models.NewCveContents(*cveCont),
+					Confidences: models.Confidences{models.RedHatAPIMatch},
+				}
+			}
 			r.ScannedCves[cveID] = v
 		}
 	}
@@ -90,7 +114,7 @@ func (red RedHat) fillFixed(driver db.DB, r *models.ScanResult) error {
 }

 func (red RedHat) fillUnfixed(driver db.DB, r *models.ScanResult) (nCVEs int, err error) {
-	if red.isFetchViaHTTP() {
+	if config.Conf.Gost.IsFetchViaHTTP() {
 		prefix, _ := util.URLPathJoin(config.Conf.Gost.URL,
 			"redhat", major(r.Release), "pkgs")
 		responses, err := getAllUnfixedCvesViaHTTP(r, prefix)
@@ -108,14 +132,10 @@ func (red RedHat) fillUnfixed(driver db.DB, r *models.ScanResult) (nCVEs int, er
 				cveCont := red.ConvertToModel(&cve)
 				v, ok := r.ScannedCves[cve.Name]
 				if ok {
-					if _, ok := v.CveContents[models.RedHatAPI]; ok {
-						v.CveContents[models.RedHatAPI] = *cveCont
+					if v.CveContents == nil {
+						v.CveContents = models.NewCveContents(*cveCont)
 					} else {
-						v = models.VulnInfo{
-							CveID:       cveCont.CveID,
-							CveContents: models.NewCveContents(*cveCont),
-							Confidences: models.Confidences{models.RedHatAPIMatch},
-						}
+						v.CveContents[models.RedHatAPI] = *cveCont
 					}
 				} else {
 					v = models.VulnInfo{
@@ -125,7 +145,6 @@ func (red RedHat) fillUnfixed(driver db.DB, r *models.ScanResult) (nCVEs int, er
 					}
 					nCVEs++
 				}
-
 				pkgStats := red.mergePackageStates(v,
 					cve.PackageState, r.Packages, r.Release)
 				if 0 < len(pkgStats) {
@@ -146,14 +165,10 @@ func (red RedHat) fillUnfixed(driver db.DB, r *models.ScanResult) (nCVEs int, er
 				cveCont := red.ConvertToModel(&cve)
 				v, ok := r.ScannedCves[cve.Name]
 				if ok {
-					if _, ok := v.CveContents[models.RedHatAPI]; ok {
-						v.CveContents[models.RedHatAPI] = *cveCont
+					if v.CveContents == nil {
+						v.CveContents = models.NewCveContents(*cveCont)
 					} else {
-						v = models.VulnInfo{
-							CveID:       cveCont.CveID,
-							CveContents: models.NewCveContents(*cveCont),
-							Confidences: models.Confidences{models.RedHatAPIMatch},
-						}
+						v.CveContents[models.RedHatAPI] = *cveCont
 					}
 				} else {
 					v = models.VulnInfo{
@@ -176,7 +191,7 @@ func (red RedHat) fillUnfixed(driver db.DB, r *models.ScanResult) (nCVEs int, er
 	return nCVEs, nil
 }

-func (red RedHat) mergePackageStates(v models.VulnInfo, ps []gostmodels.RedhatPackageState, installed models.Packages, release string) (pkgStats models.PackageStatuses) {
+func (red RedHat) mergePackageStates(v models.VulnInfo, ps []gostmodels.RedhatPackageState, installed models.Packages, release string) (pkgStats models.PackageFixStatuses) {
 	pkgStats = v.AffectedPackages
 	for _, pstate := range ps {
 		if pstate.Cpe !=
@@ -199,7 +214,7 @@ func (red RedHat) mergePackageStates(v models.VulnInfo, ps []gostmodels.RedhatPa
 			notFixedYet = true
 		}

-		pkgStats = pkgStats.Store(models.PackageStatus{
+		pkgStats = pkgStats.Store(models.PackageFixStatus{
 			Name:        pstate.PackageName,
 			FixState:    pstate.FixState,
 			NotFixedYet: notFixedYet,
--- a/gost/util.go
+++ b/gost/util.go
@@ -18,7 +18,6 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package gost

 import (
-	"fmt"
 	"net/http"
 	"time"

@@ -26,6 +25,7 @@ import (
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 type response struct {
@@ -80,11 +80,11 @@ func getCvesViaHTTP(cveIDs []string, urlPrefix string) (
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			return nil, fmt.Errorf("Timeout Fetching OVAL")
+			return nil, xerrors.New("Timeout Fetching OVAL")
 		}
 	}
 	if len(errs) != 0 {
-		return nil, fmt.Errorf("Failed to fetch OVAL. err: %v", errs)
+		return nil, xerrors.Errorf("Failed to fetch OVAL. err: %w", errs)
 	}
 	return
 }
@@ -154,11 +154,11 @@ func getAllUnfixedCvesViaHTTP(r *models.ScanResult, urlPrefix string) (
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			return nil, fmt.Errorf("Timeout Fetching OVAL")
+			return nil, xerrors.New("Timeout Fetching OVAL")
 		}
 	}
 	if len(errs) != 0 {
-		return nil, fmt.Errorf("Failed to fetch OVAL. err: %v", errs)
+		return nil, xerrors.Errorf("Failed to fetch OVAL. err: %w", errs)
 	}
 	return
 }
@@ -176,8 +176,7 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 			if count == retryMax {
 				return nil
 			}
-			return fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-				errs, url, resp)
+			return xerrors.Errorf("HTTP GET error, url: %s, resp: %v, err: %w", url, resp, errs)
 		}
 		return nil
 	}
@@ -186,11 +185,11 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 	}
 	err := backoff.RetryNotify(f, backoff.NewExponentialBackOff(), notify)
 	if err != nil {
-		errChan <- fmt.Errorf("HTTP Error %s", err)
+		errChan <- xerrors.Errorf("HTTP Error %w", err)
 		return
 	}
 	if count == retryMax {
-		errChan <- fmt.Errorf("HRetry count exceeded")
+		errChan <- xerrors.New("Retry count exceeded")
 		return
 	}

--- a/img/vuls-abstract.png
+++ b/img/vuls-abstract.png
--- a/models/cvecontents.go
+++ b/models/cvecontents.go
@@ -108,7 +108,7 @@ type CveContentCpes struct {
 // Cpes returns affected CPEs of this Vulnerability
 func (v CveContents) Cpes(myFamily string) (values []CveContentCpes) {
 	order := CveContentTypes{NewCveContentType(myFamily)}
-	order = append(order, AllCveContetTypes.Except(append(order)...)...)
+	order = append(order, AllCveContetTypes.Except(order...)...)

 	for _, ctype := range order {
 		if cont, found := v[ctype]; found && 0 < len(cont.Cpes) {
@@ -130,7 +130,7 @@ type CveContentRefs struct {
 // References returns References
 func (v CveContents) References(myFamily string) (values []CveContentRefs) {
 	order := CveContentTypes{NewCveContentType(myFamily)}
-	order = append(order, AllCveContetTypes.Except(append(order)...)...)
+	order = append(order, AllCveContetTypes.Except(order...)...)

 	for _, ctype := range order {
 		if cont, found := v[ctype]; found && 0 < len(cont.References) {
@@ -140,13 +140,14 @@ func (v CveContents) References(myFamily string) (values []CveContentRefs) {
 			})
 		}
 	}
+
 	return
 }

 // CweIDs returns related CweIDs of the vulnerability
 func (v CveContents) CweIDs(myFamily string) (values []CveContentStr) {
 	order := CveContentTypes{NewCveContentType(myFamily)}
-	order = append(order, AllCveContetTypes.Except(append(order)...)...)
+	order = append(order, AllCveContetTypes.Except(order...)...)
 	for _, ctype := range order {
 		if cont, found := v[ctype]; found && 0 < len(cont.CweIDs) {
 			for _, cweID := range cont.CweIDs {
@@ -230,6 +231,8 @@ func NewCveContentType(name string) CveContentType {
 		return DebianSecurityTracker
 	case "microsoft":
 		return Microsoft
+	case "wordpress":
+		return WPVulnDB
 	default:
 		return Unknown
 	}
@@ -269,6 +272,9 @@ const (
 	// Microsoft is Microsoft
 	Microsoft CveContentType = "microsoft"

+	// WPVulnDB is WordPress
+	WPVulnDB CveContentType = "wpvulndb"
+
 	// Unknown is Unknown
 	Unknown CveContentType = "unknown"
 )
@@ -286,6 +292,7 @@ var AllCveContetTypes = CveContentTypes{
 	Ubuntu,
 	RedHatAPI,
 	DebianSecurityTracker,
+	WPVulnDB,
 }

 // Except returns CveContentTypes except for given args
--- a/models/packages.go
+++ b/models/packages.go
@@ -21,6 +21,8 @@ import (
 	"bytes"
 	"fmt"
 	"strings"
+
+	"golang.org/x/xerrors"
 )

 // Packages is Map of Package
@@ -83,7 +85,7 @@ func (ps Packages) FindByFQPN(nameVerRelArc string) (*Package, error) {
 			return &p, nil
 		}
 	}
-	return nil, fmt.Errorf("Failed to find the package: %s", nameVerRelArc)
+	return nil, xerrors.Errorf("Failed to find the package: %s", nameVerRelArc)
 }

 // Package has installed binary packages.
--- a/models/scanresults.go
+++ b/models/scanresults.go
@@ -24,6 +24,8 @@ import (
 	"strings"
 	"time"

+	"github.com/future-architect/vuls/alert"
+
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/cwe"
 	"github.com/future-architect/vuls/util"
@@ -34,32 +36,37 @@ type ScanResults []ScanResult

 // ScanResult has the result of scanned CVE information.
 type ScanResult struct {
-	JSONVersion      int                    `json:"jsonVersion"`
-	Lang             string                 `json:"lang"`
-	ServerUUID       string                 `json:"serverUUID"`
-	ServerName       string                 `json:"serverName"` // TOML Section key
-	Family           string                 `json:"family"`
-	Release          string                 `json:"release"`
-	Container        Container              `json:"container"`
-	Platform         Platform               `json:"platform"`
-	IPv4Addrs        []string               `json:"ipv4Addrs,omitempty"` // only global unicast address (https://golang.org/pkg/net/#IP.IsGlobalUnicast)
-	IPv6Addrs        []string               `json:"ipv6Addrs,omitempty"` // only global unicast address (https://golang.org/pkg/net/#IP.IsGlobalUnicast)
-	ScannedAt        time.Time              `json:"scannedAt"`
-	ScannedVersion   string                 `json:"scannedVersion"`
-	ScannedRevision  string                 `json:"scannedRevision"`
-	ScannedBy        string                 `json:"scannedBy"`
-	ReportedAt       time.Time              `json:"reportedAt"`
-	ReportedVersion  string                 `json:"reportedVersion"`
-	ReportedRevision string                 `json:"reportedRevision"`
-	ReportedBy       string                 `json:"reportedBy"`
-	ScannedCves      VulnInfos              `json:"scannedCves"`
-	RunningKernel    Kernel                 `json:"runningKernel"`
-	Packages         Packages               `json:"packages"`
-	CweDict          CweDict                `json:"cweDict"`
-	Optional         map[string]interface{} `json:",omitempty"`
-	SrcPackages      SrcPackages            `json:",omitempty"`
-	Errors           []string               `json:"errors"`
-	Config           struct {
+	JSONVersion      int       `json:"jsonVersion"`
+	Lang             string    `json:"lang"`
+	ServerUUID       string    `json:"serverUUID"`
+	ServerName       string    `json:"serverName"` // TOML Section key
+	Family           string    `json:"family"`
+	Release          string    `json:"release"`
+	Container        Container `json:"container"`
+	Platform         Platform  `json:"platform"`
+	IPv4Addrs        []string  `json:"ipv4Addrs,omitempty"` // only global unicast address (https://golang.org/pkg/net/#IP.IsGlobalUnicast)
+	IPv6Addrs        []string  `json:"ipv6Addrs,omitempty"` // only global unicast address (https://golang.org/pkg/net/#IP.IsGlobalUnicast)
+	ScannedAt        time.Time `json:"scannedAt"`
+	ScanMode         string    `json:"scanMode"`
+	ScannedVersion   string    `json:"scannedVersion"`
+	ScannedRevision  string    `json:"scannedRevision"`
+	ScannedBy        string    `json:"scannedBy"`
+	ScannedIPv4Addrs []string  `json:"scannedIpv4Addrs,omitempty"`
+	ScannedIPv6Addrs []string  `json:"scannedIpv6Addrs,omitempty"`
+	ReportedAt       time.Time `json:"reportedAt"`
+	ReportedVersion  string    `json:"reportedVersion"`
+	ReportedRevision string    `json:"reportedRevision"`
+	ReportedBy       string    `json:"reportedBy"`
+	Errors           []string  `json:"errors"`
+
+	ScannedCves       VulnInfos              `json:"scannedCves"`
+	RunningKernel     Kernel                 `json:"runningKernel"`
+	Packages          Packages               `json:"packages"`
+	SrcPackages       SrcPackages            `json:",omitempty"`
+	WordPressPackages *WordPressPackages     `json:",omitempty"`
+	CweDict           CweDict                `json:"cweDict,omitempty"`
+	Optional          map[string]interface{} `json:",omitempty"`
+	Config            struct {
 		Scan   config.Config `json:"scan"`
 		Report config.Config `json:"report"`
 	} `json:"config"`
@@ -106,6 +113,12 @@ type CweDictEntry struct {
 	OwaspTopTen2017 string   `json:"owaspTopTen2017"`
 }

+// GetAlertsByCveID return alerts fetched by cveID
+func GetAlertsByCveID(cveID string, lang string) (alerts []alert.Alert) {
+	alerts = alert.GenerateAlertDict(cveID, lang)
+	return alerts
+}
+
 // Kernel has the Release, version and whether need restart
 type Kernel struct {
 	Release        string `json:"release"`
@@ -171,6 +184,9 @@ func (r ScanResult) FilterUnfixed() ScanResult {
 		return r
 	}
 	filtered := r.ScannedCves.Find(func(v VulnInfo) bool {
+		if len(v.CpeURIs) != 0 {
+			return true
+		}
 		NotFixedAll := true
 		for _, p := range v.AffectedPackages {
 			NotFixedAll = NotFixedAll && p.NotFixedYet
@@ -238,6 +254,30 @@ func (r ScanResult) FilterIgnorePkgs() ScanResult {
 	return r
 }

+// FilterInactiveWordPressLibs is filter function.
+func (r ScanResult) FilterInactiveWordPressLibs() ScanResult {
+	if !config.Conf.Servers[r.ServerName].WordPress.IgnoreInactive {
+		return r
+	}
+
+	filtered := r.ScannedCves.Find(func(v VulnInfo) bool {
+		if len(v.WpPackageFixStats) == 0 {
+			return true
+		}
+		// Ignore if all libs in this vulnInfo inactive
+		for _, wp := range v.WpPackageFixStats {
+			if p, ok := r.WordPressPackages.Find(wp.Name); ok {
+				if p.Status != Inactive {
+					return true
+				}
+			}
+		}
+		return false
+	})
+	r.ScannedCves = filtered
+	return r
+}
+
 // ReportFileName returns the filename on localhost without extention
 func (r ScanResult) ReportFileName() (name string) {
 	if len(r.Container.ContainerID) == 0 {
@@ -309,13 +349,14 @@ func (r ScanResult) FormatTextReportHeadedr() string {
 		buf.WriteString("=")
 	}

-	return fmt.Sprintf("%s\n%s\n%s, %s, %s, %s\n",
+	return fmt.Sprintf("%s\n%s\n%s, %s, %s, %s, %s\n",
 		r.ServerInfo(),
 		buf.String(),
 		r.ScannedCves.FormatCveSummary(),
 		r.ScannedCves.FormatFixedStatus(r.Packages),
 		r.FormatUpdatablePacksSummary(),
 		r.FormatExploitCveSummary(),
+		r.FormatAlertSummary(),
 	)
 }

@@ -347,7 +388,22 @@ func (r ScanResult) FormatExploitCveSummary() string {
 			nExploitCve++
 		}
 	}
-	return fmt.Sprintf("%d cves with exploit", nExploitCve)
+	return fmt.Sprintf("%d exploits", nExploitCve)
+}
+
+// FormatAlertSummary returns a summary of XCERT alerts
+func (r ScanResult) FormatAlertSummary() string {
+	jaCnt := 0
+	enCnt := 0
+	for _, vuln := range r.ScannedCves {
+		if len(vuln.AlertDict.En) > 0 {
+			enCnt += len(vuln.AlertDict.En)
+		}
+		if len(vuln.AlertDict.Ja) > 0 {
+			jaCnt += len(vuln.AlertDict.Ja)
+		}
+	}
+	return fmt.Sprintf("en: %d, ja: %d alerts", enCnt, jaCnt)
 }

 func (r ScanResult) isDisplayUpdatableNum() bool {
--- a/models/scanresults_test.go
+++ b/models/scanresults_test.go
@@ -348,7 +348,7 @@ func TestFilterUnfixed(t *testing.T) {
 				ScannedCves: VulnInfos{
 					"CVE-2017-0001": {
 						CveID: "CVE-2017-0001",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{
 								Name:        "a",
 								NotFixedYet: true,
@@ -357,7 +357,7 @@ func TestFilterUnfixed(t *testing.T) {
 					},
 					"CVE-2017-0002": {
 						CveID: "CVE-2017-0002",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{
 								Name:        "b",
 								NotFixedYet: false,
@@ -366,7 +366,7 @@ func TestFilterUnfixed(t *testing.T) {
 					},
 					"CVE-2017-0003": {
 						CveID: "CVE-2017-0003",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{
 								Name:        "c",
 								NotFixedYet: true,
@@ -383,7 +383,7 @@ func TestFilterUnfixed(t *testing.T) {
 				ScannedCves: VulnInfos{
 					"CVE-2017-0002": {
 						CveID: "CVE-2017-0002",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{
 								Name:        "b",
 								NotFixedYet: false,
@@ -392,7 +392,7 @@ func TestFilterUnfixed(t *testing.T) {
 					},
 					"CVE-2017-0003": {
 						CveID: "CVE-2017-0003",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{
 								Name:        "c",
 								NotFixedYet: true,
@@ -435,7 +435,7 @@ func TestFilterIgnorePkgs(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 							},
 						},
@@ -462,7 +462,7 @@ func TestFilterIgnorePkgs(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 								{Name: "vim"},
 							},
@@ -475,7 +475,7 @@ func TestFilterIgnorePkgs(t *testing.T) {
 				ScannedCves: VulnInfos{
 					"CVE-2017-0001": {
 						CveID: "CVE-2017-0001",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{Name: "kernel"},
 							{Name: "vim"},
 						},
@@ -491,7 +491,7 @@ func TestFilterIgnorePkgs(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 								{Name: "vim"},
 							},
@@ -545,7 +545,7 @@ func TestFilterIgnorePkgsContainer(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 							},
 						},
@@ -574,7 +574,7 @@ func TestFilterIgnorePkgsContainer(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 								{Name: "vim"},
 							},
@@ -588,7 +588,7 @@ func TestFilterIgnorePkgsContainer(t *testing.T) {
 				ScannedCves: VulnInfos{
 					"CVE-2017-0001": {
 						CveID: "CVE-2017-0001",
-						AffectedPackages: PackageStatuses{
+						AffectedPackages: PackageFixStatuses{
 							{Name: "kernel"},
 							{Name: "vim"},
 						},
@@ -605,7 +605,7 @@ func TestFilterIgnorePkgsContainer(t *testing.T) {
 					ScannedCves: VulnInfos{
 						"CVE-2017-0001": {
 							CveID: "CVE-2017-0001",
-							AffectedPackages: PackageStatuses{
+							AffectedPackages: PackageFixStatuses{
 								{Name: "kernel"},
 								{Name: "vim"},
 							},
--- a/models/vulninfos.go
+++ b/models/vulninfos.go
@@ -24,7 +24,10 @@ import (
 	"strings"
 	"time"

+	"github.com/future-architect/vuls/alert"
+
 	"github.com/future-architect/vuls/config"
+	exploitmodels "github.com/mozqnet/go-exploitdb/models"
 )

 // VulnInfos has a map of VulnInfo
@@ -119,20 +122,19 @@ func (v VulnInfos) FormatFixedStatus(packs Packages) string {
 	return fmt.Sprintf("%d/%d Fixed", fixed, total)
 }

-// PackageStatuses is a list of PackageStatus
-type PackageStatuses []PackageStatus
+// PackageFixStatuses is a list of PackageStatus
+type PackageFixStatuses []PackageFixStatus

-// FormatTuiSummary format packname to show TUI summary
-func (ps PackageStatuses) FormatTuiSummary() string {
-	names := []string{}
+// Names return a slice of package names
+func (ps PackageFixStatuses) Names() (names []string) {
 	for _, p := range ps {
 		names = append(names, p.Name)
 	}
-	return strings.Join(names, ", ")
+	return names
 }

 // Store insert given pkg if missing, update pkg if exists
-func (ps PackageStatuses) Store(pkg PackageStatus) PackageStatuses {
+func (ps PackageFixStatuses) Store(pkg PackageFixStatus) PackageFixStatuses {
 	for i, p := range ps {
 		if p.Name == pkg.Name {
 			ps[i] = pkg
@@ -144,15 +146,15 @@ func (ps PackageStatuses) Store(pkg PackageStatus) PackageStatuses {
 }

 // Sort by Name
-func (ps PackageStatuses) Sort() {
+func (ps PackageFixStatuses) Sort() {
 	sort.Slice(ps, func(i, j int) bool {
 		return ps[i].Name < ps[j].Name
 	})
 	return
 }

-// PackageStatus has name and other status abount the package
-type PackageStatus struct {
+// PackageFixStatus has name and other status abount the package
+type PackageFixStatus struct {
 	Name        string `json:"name"`
 	NotFixedYet bool   `json:"notFixedYet"`
 	FixState    string `json:"fixState"`
@@ -160,13 +162,73 @@ type PackageStatus struct {

 // VulnInfo has a vulnerability information and unsecure packages
 type VulnInfo struct {
-	CveID            string           `json:"cveID"`
-	Confidences      Confidences      `json:"confidences"`
-	AffectedPackages PackageStatuses  `json:"affectedPackages"`
-	DistroAdvisories []DistroAdvisory `json:"distroAdvisories,omitempty"` // for Aamazon, RHEL, FreeBSD
-	CpeURIs          []string         `json:"cpeURIs,omitempty"`          // CpeURIs related to this CVE defined in config.toml
-	CveContents      CveContents      `json:"cveContents"`
-	Exploits         []Exploit        `json:"exploits"`
+	CveID                string               `json:"cveID,omitempty"`
+	Confidences          Confidences          `json:"confidences,omitempty"`
+	AffectedPackages     PackageFixStatuses   `json:"affectedPackages,omitempty"`
+	DistroAdvisories     []DistroAdvisory     `json:"distroAdvisories,omitempty"` // for Aamazon, RHEL, FreeBSD
+	CveContents          CveContents          `json:"cveContents,omitempty"`
+	Exploits             []Exploit            `json:"exploits,omitempty"`
+	AlertDict            AlertDict            `json:"alertDict,omitempty"`
+	CpeURIs              []string             `json:"cpeURIs,omitempty"` // CpeURIs related to this CVE defined in config.toml
+	GitHubSecurityAlerts GitHubSecurityAlerts `json:"gitHubSecurityAlerts,omitempty"`
+	WpPackageFixStats    WpPackageFixStats    `json:"wpPackageFixStats,omitempty"`
+
+	VulnType string `json:"vulnType,omitempty"`
+}
+
+// GitHubSecurityAlerts is a list of GitHubSecurityAlert
+type GitHubSecurityAlerts []GitHubSecurityAlert
+
+// Add adds given arg to the slice and return the slice (immutable)
+func (g GitHubSecurityAlerts) Add(alert GitHubSecurityAlert) GitHubSecurityAlerts {
+	for _, a := range g {
+		if a.PackageName == alert.PackageName {
+			return g
+		}
+	}
+	return append(g, alert)
+}
+
+// Names return a slice of lib names
+func (g GitHubSecurityAlerts) Names() (names []string) {
+	for _, a := range g {
+		names = append(names, a.PackageName)
+	}
+	return names
+}
+
+// GitHubSecurityAlert has detected CVE-ID, PackageName, Status fetched via GitHub API
+type GitHubSecurityAlert struct {
+	PackageName   string    `json:"packageName"`
+	FixedIn       string    `json:"fixedIn"`
+	AffectedRange string    `json:"affectedRange"`
+	Dismissed     bool      `json:"dismissed"`
+	DismissedAt   time.Time `json:"dismissedAt"`
+	DismissReason string    `json:"dismissReason"`
+}
+
+// WpPackageFixStats is a list of WpPackageFixStatus
+type WpPackageFixStats []WpPackageFixStatus
+
+// Names return a slice of names
+func (ws WpPackageFixStats) Names() (names []string) {
+	for _, w := range ws {
+		names = append(names, w.Name)
+	}
+	return names
+}
+
+// WpPackages has a list of WpPackage
+type WpPackages []WpPackage
+
+// Add adds given arg to the slice and return the slice (immutable)
+func (g WpPackages) Add(pkg WpPackage) WpPackages {
+	for _, a := range g {
+		if a.Name == pkg.Name {
+			return g
+		}
+	}
+	return append(g, pkg)
 }

 // Titles returns tilte (TUI)
@@ -241,6 +303,13 @@ func (v VulnInfo) Summaries(lang, myFamily string) (values []CveContentStr) {
 		})
 	}

+	if v, ok := v.CveContents[WPVulnDB]; ok {
+		values = append(values, CveContentStr{
+			Type:  "WPVDB",
+			Value: v.Title,
+		})
+	}
+
 	if len(values) == 0 {
 		return []CveContentStr{{
 			Type:  Unknown,
@@ -274,7 +343,7 @@ func (v VulnInfo) Mitigations(myFamily string) (values []CveContentStr) {

 // Cvss2Scores returns CVSS V2 Scores
 func (v VulnInfo) Cvss2Scores(myFamily string) (values []CveContentCvss) {
-	order := []CveContentType{Nvd, NvdXML, RedHat, Jvn}
+	order := []CveContentType{Nvd, NvdXML, RedHatAPI, RedHat, Jvn}
 	if myFamily != config.RedHat && myFamily != config.CentOS {
 		order = append(order, NewCveContentType(myFamily))
 	}
@@ -296,26 +365,6 @@ func (v VulnInfo) Cvss2Scores(myFamily string) (values []CveContentCvss) {
 		}
 	}

-	for _, v := range values {
-		if v.Type == RedHat {
-			return
-		}
-	}
-	// Set the CVSS v2 score of vuln that exists only in gost.
-	// Unfixed vulnerabilities detected by gost are not in OVAL, because
-	// OVAL data has only vulnerabilities for already fixed.
-	if cont, found := v.CveContents[RedHatAPI]; found {
-		values = append(values, CveContentCvss{
-			Type: RedHatAPI,
-			Value: Cvss{
-				Type:     CVSS2,
-				Score:    cont.Cvss2Score,
-				Vector:   cont.Cvss2Vector,
-				Severity: strings.ToUpper(cont.Cvss2Severity),
-			},
-		})
-	}
-
 	for _, adv := range v.DistroAdvisories {
 		if adv.Severity != "" {
 			values = append(values, CveContentCvss{
@@ -358,7 +407,7 @@ func (v VulnInfo) Cvss2Scores(myFamily string) (values []CveContentCvss) {

 // Cvss3Scores returns CVSS V3 Score
 func (v VulnInfo) Cvss3Scores() (values []CveContentCvss) {
-	order := []CveContentType{Nvd, RedHat, Jvn}
+	order := []CveContentType{Nvd, RedHatAPI, RedHat, Jvn}
 	for _, ctype := range order {
 		if cont, found := v.CveContents[ctype]; found {
 			// https://nvd.nist.gov/vuln-metrics/cvss
@@ -373,27 +422,6 @@ func (v VulnInfo) Cvss3Scores() (values []CveContentCvss) {
 			})
 		}
 	}
-
-	for _, v := range values {
-		if v.Type == RedHat {
-			return
-		}
-	}
-
-	// Set the CVSS v3 score of vuln that exists only in gost.
-	// Unfixed vulnerabilities detected by gost are not in OVAL, because
-	// OVAL data has only vulnerabilities for already fixed.
-	if cont, found := v.CveContents[RedHatAPI]; found {
-		values = append(values, CveContentCvss{
-			Type: RedHatAPI,
-			Value: Cvss{
-				Type:     CVSS3,
-				Score:    cont.Cvss3Score,
-				Vector:   cont.Cvss3Vector,
-				Severity: strings.ToUpper(cont.Cvss3Severity),
-			},
-		})
-	}
 	return
 }

@@ -515,15 +543,15 @@ func (v VulnInfo) AttackVector() string {
 	for _, cnt := range v.CveContents {
 		if strings.HasPrefix(cnt.Cvss2Vector, "AV:N") ||
 			strings.HasPrefix(cnt.Cvss3Vector, "CVSS:3.0/AV:N") {
-			return "Network"
+			return "N"
 		} else if strings.HasPrefix(cnt.Cvss2Vector, "AV:A") ||
 			strings.HasPrefix(cnt.Cvss3Vector, "CVSS:3.0/AV:A") {
-			return "Adjacent"
+			return "A"
 		} else if strings.HasPrefix(cnt.Cvss2Vector, "AV:L") ||
 			strings.HasPrefix(cnt.Cvss3Vector, "CVSS:3.0/AV:L") {
-			return "Local"
+			return "L"
 		} else if strings.HasPrefix(cnt.Cvss3Vector, "CVSS:3.0/AV:P") {
-			return "Physical"
+			return "P"
 		}
 	}
 	if cont, found := v.CveContents[DebianSecurityTracker]; found {
@@ -542,17 +570,17 @@ func (v VulnInfo) PatchStatus(packs Packages) string {
 	}
 	for _, p := range v.AffectedPackages {
 		if p.NotFixedYet {
-			return "Unfixed"
+			return "unfixed"
 		}

 		// fast, offline mode doesn't have new version
 		if pack, ok := packs[p.Name]; ok {
 			if pack.NewVersion == "" {
-				return "Unknown"
+				return "unknown"
 			}
 		}
 	}
-	return "Fixed"
+	return "fixed"
 }

 // CveContentCvss has CVSS information
@@ -652,6 +680,12 @@ func (v VulnInfo) Cvss3CalcURL() string {
 // VendorLinks returns links of vendor support's URL
 func (v VulnInfo) VendorLinks(family string) map[string]string {
 	links := map[string]string{}
+	if strings.HasPrefix(v.CveID, "WPVDBID") {
+		links["WPVulnDB"] = fmt.Sprintf("https://wpvulndb.com/vulnerabilities/%s",
+			strings.TrimPrefix(v.CveID, "WPVDBID-"))
+		return links
+	}
+
 	switch family {
 	case config.RedHat, config.CentOS:
 		links["RHEL-CVE"] = "https://access.redhat.com/security/cve/" + v.CveID
@@ -714,24 +748,38 @@ func (p DistroAdvisory) Format() string {
 	return strings.Join(buf, "\n")
 }

-// ExploitType is exploit type
-type ExploitType string
-
-const (
-	// ExploitDB : https://www.exploit-db.com/
-	ExploitDB ExploitType = "exploitdb"
-)
-
 // Exploit :
 type Exploit struct {
-	ExploitType  ExploitType `json:"exploitType"`
-	ID           string      `json:"id"`
-	URL          string      `json:"url"`
-	Description  string      `json:"description"`
-	DocumentURL  *string     `json:"documentURL,omitempty"`
-	PaperURL     *string     `json:"paperURL,omitempty"`
-	ShellCodeURL *string     `json:"shellCodeURL,omitempty"`
-	BinaryURL    *string     `json:"binaryURL,omitempty"`
+	ExploitType  exploitmodels.ExploitType `json:"exploitType"`
+	ID           string                    `json:"id"`
+	URL          string                    `json:"url"`
+	Description  string                    `json:"description"`
+	DocumentURL  *string                   `json:"documentURL,omitempty"`
+	ShellCodeURL *string                   `json:"shellCodeURL,omitempty"`
+	BinaryURL    *string                   `json:"binaryURL,omitempty"`
+}
+
+// AlertDict has target cve's JPCERT and USCERT alert data
+type AlertDict struct {
+	Ja []alert.Alert `json:"ja"`
+	En []alert.Alert `json:"en"`
+}
+
+// HasAlert returns whether or not it has En or Ja entries.
+func (a AlertDict) HasAlert() bool {
+	return len(a.En) != 0 || len(a.Ja) != 0
+}
+
+// FormatSource returns which source has this alert
+func (a AlertDict) FormatSource() string {
+	s := []string{}
+	if len(a.En) != 0 {
+		s = append(s, "USCERT")
+	}
+	if len(a.Ja) != 0 {
+		s = append(s, "JPCERT")
+	}
+	return strings.Join(s, "/")
 }

 // Confidences is a list of Confidence
@@ -797,6 +845,12 @@ const (
 	// ChangelogLenientMatchStr is a String representation of ChangelogLenientMatch
 	ChangelogLenientMatchStr = "ChangelogLenientMatch"

+	// GitHubMatchStr is a String representation of GitHubMatch
+	GitHubMatchStr = "GitHubMatch"
+
+	// WPVulnDBMatchStr is a String representation of WordPress VulnDB scanning
+	WPVulnDBMatchStr = "WPVulnDBMatch"
+
 	// FailedToGetChangelog is a String representation of FailedToGetChangelog
 	FailedToGetChangelog = "FailedToGetChangelog"

@@ -828,4 +882,10 @@ var (

 	// ChangelogLenientMatch is a ranking how confident the CVE-ID was deteted correctly
 	ChangelogLenientMatch = Confidence{50, ChangelogLenientMatchStr, 4}
+
+	// GitHubMatch is a ranking how confident the CVE-ID was deteted correctly
+	GitHubMatch = Confidence{97, GitHubMatchStr, 2}
+
+	// WPVulnDBMatch is a ranking how confident the CVE-ID was deteted correctly
+	WPVulnDBMatch = Confidence{100, WPVulnDBMatchStr, 0}
 )
--- a/models/vulninfos_test.go
+++ b/models/vulninfos_test.go
@@ -916,15 +916,15 @@ func TestFormatMaxCvssScore(t *testing.T) {

 func TestSortPackageStatues(t *testing.T) {
 	var tests = []struct {
-		in  PackageStatuses
-		out PackageStatuses
+		in  PackageFixStatuses
+		out PackageFixStatuses
 	}{
 		{
-			in: PackageStatuses{
+			in: PackageFixStatuses{
 				{Name: "b"},
 				{Name: "a"},
 			},
-			out: PackageStatuses{
+			out: PackageFixStatuses{
 				{Name: "a"},
 				{Name: "b"},
 			},
@@ -940,19 +940,19 @@ func TestSortPackageStatues(t *testing.T) {

 func TestStorePackageStatueses(t *testing.T) {
 	var tests = []struct {
-		pkgstats PackageStatuses
-		in       PackageStatus
-		out      PackageStatuses
+		pkgstats PackageFixStatuses
+		in       PackageFixStatus
+		out      PackageFixStatuses
 	}{
 		{
-			pkgstats: PackageStatuses{
+			pkgstats: PackageFixStatuses{
 				{Name: "a"},
 				{Name: "b"},
 			},
-			in: PackageStatus{
+			in: PackageFixStatus{
 				Name: "c",
 			},
-			out: PackageStatuses{
+			out: PackageFixStatuses{
 				{Name: "a"},
 				{Name: "b"},
 				{Name: "c"},
--- a/models/wordpress.go
+++ b/models/wordpress.go
@@ -0,0 +1,88 @@
+/* Vuls - Vulnerability Scanner
+Copyright (C) 2016  Future Corporation , Japan.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+package models
+
+// WordPressPackages has Core version, plugins and themes.
+type WordPressPackages []WpPackage
+
+// CoreVersion returns the core version of the installed WordPress
+func (w WordPressPackages) CoreVersion() string {
+	for _, p := range w {
+		if p.Type == WPCore {
+			return p.Version
+		}
+	}
+	return ""
+}
+
+// Plugins returns a slice of plugins of the installed WordPress
+func (w WordPressPackages) Plugins() (ps []WpPackage) {
+	for _, p := range w {
+		if p.Type == WPPlugin {
+			ps = append(ps, p)
+		}
+	}
+	return
+}
+
+// Themes returns a slice of themes of the installed WordPress
+func (w WordPressPackages) Themes() (ps []WpPackage) {
+	for _, p := range w {
+		if p.Type == WPTheme {
+			ps = append(ps, p)
+		}
+	}
+	return
+}
+
+// Find searches by specified name
+func (w WordPressPackages) Find(name string) (ps *WpPackage, found bool) {
+	for _, p := range w {
+		if p.Name == name {
+			return &p, true
+		}
+	}
+	return nil, false
+}
+
+const (
+	// WPCore is a type `core` in WPPackage struct
+	WPCore = "core"
+	// WPPlugin is a type `plugin` in WPPackage struct
+	WPPlugin = "plugin"
+	// WPTheme is a type `theme` in WPPackage struct
+	WPTheme = "theme"
+
+	// Inactive is a inactive status in WPPackage struct
+	Inactive = "inactive"
+)
+
+// WpPackage has a details of plugin and theme
+type WpPackage struct {
+	Name    string `json:"name,omitempty"`
+	Status  string `json:"status,omitempty"` // active, inactive or must-use
+	Update  string `json:"update,omitempty"` // available or none
+	Version string `json:"version,omitempty"`
+	Type    string `json:"type,omitempty"` // core, plugin, theme
+}
+
+// WpPackageFixStatus is used in Vulninfo.WordPress
+type WpPackageFixStatus struct {
+	Name    string `json:"name,omitempty"`
+	FixedIn string `json:"fixedIn,omitempty"`
+}
--- a/oval/alpine.go
+++ b/oval/alpine.go
@@ -41,7 +41,7 @@ func NewAlpine() Alpine {
 // FillWithOval returns scan result after updating CVE info by OVAL
 func (o Alpine) FillWithOval(driver db.DB, r *models.ScanResult) (nCVEs int, err error) {
 	var relatedDefs ovalResult
-	if o.IsFetchViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		if relatedDefs, err = getDefsByPackNameViaHTTP(r); err != nil {
 			return 0, err
 		}
--- a/oval/debian.go
+++ b/oval/debian.go
@@ -133,7 +133,7 @@ func (o Debian) FillWithOval(driver db.DB, r *models.ScanResult) (nCVEs int, err
 	}

 	var relatedDefs ovalResult
-	if o.IsFetchViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		if relatedDefs, err = getDefsByPackNameViaHTTP(r); err != nil {
 			return 0, err
 		}
@@ -243,7 +243,7 @@ func (o Ubuntu) FillWithOval(driver db.DB, r *models.ScanResult) (nCVEs int, err
 	}

 	var relatedDefs ovalResult
-	if o.IsFetchViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		if relatedDefs, err = getDefsByPackNameViaHTTP(r); err != nil {
 			return 0, err
 		}
--- a/oval/debian_test.go
+++ b/oval/debian_test.go
@@ -36,7 +36,7 @@ func TestPackNamesOfUpdateDebian(t *testing.T) {
 			in: models.ScanResult{
 				ScannedCves: models.VulnInfos{
 					"CVE-2000-1000": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
+						AffectedPackages: models.PackageFixStatuses{
 							{Name: "packA"},
 							{Name: "packC"},
 						},
@@ -56,7 +56,7 @@ func TestPackNamesOfUpdateDebian(t *testing.T) {
 			out: models.ScanResult{
 				ScannedCves: models.VulnInfos{
 					"CVE-2000-1000": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
+						AffectedPackages: models.PackageFixStatuses{
 							{Name: "packA"},
 							{Name: "packB", NotFixedYet: true},
 							{Name: "packC"},
--- a/oval/oval.go
+++ b/oval/oval.go
@@ -28,6 +28,7 @@ import (
 	"github.com/future-architect/vuls/util"
 	"github.com/kotakanbe/goval-dictionary/db"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 // Client is the interface of OVAL client.
@@ -38,7 +39,6 @@ type Client interface {
 	// CheckIfOvalFetched checks if oval entries are in DB by family, release.
 	CheckIfOvalFetched(db.DB, string, string) (bool, error)
 	CheckIfOvalFresh(db.DB, string, string) (bool, error)
-	IsFetchViaHTTP() bool
 }

 // Base is a base struct
@@ -48,7 +48,7 @@ type Base struct {

 // CheckHTTPHealth do health check
 func (b Base) CheckHTTPHealth() error {
-	if !b.IsFetchViaHTTP() {
+	if !cnf.Conf.OvalDict.IsFetchViaHTTP() {
 		return nil
 	}

@@ -59,7 +59,7 @@ func (b Base) CheckHTTPHealth() error {
 	//  resp, _, errs = gorequest.New().SetDebug(config.Conf.Debug).Get(url).End()
 	//  resp, _, errs = gorequest.New().Proxy(api.httpProxy).Get(url).End()
 	if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-		return fmt.Errorf("Failed to request to OVAL server. url: %s, errs: %v",
+		return xerrors.Errorf("Failed to request to OVAL server. url: %s, errs: %w",
 			url, errs)
 	}
 	return nil
@@ -67,11 +67,10 @@ func (b Base) CheckHTTPHealth() error {

 // CheckIfOvalFetched checks if oval entries are in DB by family, release.
 func (b Base) CheckIfOvalFetched(driver db.DB, osFamily, release string) (fetched bool, err error) {
-	if !b.IsFetchViaHTTP() {
+	if !cnf.Conf.OvalDict.IsFetchViaHTTP() {
 		count, err := driver.CountDefs(osFamily, release)
 		if err != nil {
-			return false, fmt.Errorf("Failed to count OVAL defs: %s, %s, %v",
-				osFamily, release, err)
+			return false, xerrors.Errorf("Failed to count OVAL defs: %s, %s, %w", osFamily, release, err)
 		}
 		return 0 < count, nil
 	}
@@ -79,13 +78,11 @@ func (b Base) CheckIfOvalFetched(driver db.DB, osFamily, release string) (fetche
 	url, _ := util.URLPathJoin(cnf.Conf.OvalDict.URL, "count", osFamily, release)
 	resp, body, errs := gorequest.New().Get(url).End()
 	if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-		return false, fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-			errs, url, resp)
+		return false, xerrors.Errorf("HTTP GET error, url: %s, resp: %v, err: %w", url, resp, errs)
 	}
 	count := 0
 	if err := json.Unmarshal([]byte(body), &count); err != nil {
-		return false, fmt.Errorf("Failed to Unmarshall. body: %s, err: %s",
-			body, err)
+		return false, xerrors.Errorf("Failed to Unmarshall. body: %s, err: %w", body, err)
 	}
 	return 0 < count, nil
 }
@@ -93,19 +90,17 @@ func (b Base) CheckIfOvalFetched(driver db.DB, osFamily, release string) (fetche
 // CheckIfOvalFresh checks if oval entries are fresh enough
 func (b Base) CheckIfOvalFresh(driver db.DB, osFamily, release string) (ok bool, err error) {
 	var lastModified time.Time
-	if !b.IsFetchViaHTTP() {
+	if !cnf.Conf.OvalDict.IsFetchViaHTTP() {
 		lastModified = driver.GetLastModified(osFamily, release)
 	} else {
 		url, _ := util.URLPathJoin(cnf.Conf.OvalDict.URL, "lastmodified", osFamily, release)
 		resp, body, errs := gorequest.New().Get(url).End()
 		if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-			return false, fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-				errs, url, resp)
+			return false, xerrors.Errorf("HTTP GET error, url: %s, resp: %v, err: %w", url, resp, errs)
 		}

 		if err := json.Unmarshal([]byte(body), &lastModified); err != nil {
-			return false, fmt.Errorf("Failed to Unmarshall. body: %s, err: %s",
-				body, err)
+			return false, xerrors.Errorf("Failed to Unmarshall. body: %s, err: %w", body, err)
 		}
 	}

@@ -119,9 +114,3 @@ func (b Base) CheckIfOvalFresh(driver db.DB, osFamily, release string) (ok bool,
 	util.Log.Infof("OVAL is fresh: %s %s ", osFamily, release)
 	return true, nil
 }
-
-// IsFetchViaHTTP checks whether fetch via HTTP
-func (b Base) IsFetchViaHTTP() bool {
-	// Default value of OvalDBType is sqlite3
-	return cnf.Conf.OvalDict.URL != "" && cnf.Conf.OvalDict.Type == "sqlite3"
-}
--- a/oval/redhat.go
+++ b/oval/redhat.go
@@ -37,7 +37,7 @@ type RedHatBase struct {
 // FillWithOval returns scan result after updating CVE info by OVAL
 func (o RedHatBase) FillWithOval(driver db.DB, r *models.ScanResult) (nCVEs int, err error) {
 	var relatedDefs ovalResult
-	if o.IsFetchViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		if relatedDefs, err = getDefsByPackNameViaHTTP(r); err != nil {
 			return 0, err
 		}
--- a/oval/redhat_test.go
+++ b/oval/redhat_test.go
@@ -102,7 +102,7 @@ func TestPackNamesOfUpdate(t *testing.T) {
 			in: models.ScanResult{
 				ScannedCves: models.VulnInfos{
 					"CVE-2000-1000": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
+						AffectedPackages: models.PackageFixStatuses{
 							{Name: "packA"},
 							{Name: "packB", NotFixedYet: false},
 						},
@@ -126,7 +126,7 @@ func TestPackNamesOfUpdate(t *testing.T) {
 			out: models.ScanResult{
 				ScannedCves: models.VulnInfos{
 					"CVE-2000-1000": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
+						AffectedPackages: models.PackageFixStatuses{
 							{Name: "packA"},
 							{Name: "packB", NotFixedYet: true},
 						},
--- a/oval/suse.go
+++ b/oval/suse.go
@@ -43,7 +43,7 @@ func NewSUSE() SUSE {
 // FillWithOval returns scan result after updating CVE info by OVAL
 func (o SUSE) FillWithOval(driver db.DB, r *models.ScanResult) (nCVEs int, err error) {
 	var relatedDefs ovalResult
-	if o.IsFetchViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		if relatedDefs, err = getDefsByPackNameViaHTTP(r); err != nil {
 			return 0, err
 		}
--- a/oval/util.go
+++ b/oval/util.go
@@ -19,7 +19,6 @@ package oval

 import (
 	"encoding/json"
-	"fmt"
 	"net/http"
 	"regexp"
 	"strings"
@@ -34,6 +33,7 @@ import (
 	"github.com/kotakanbe/goval-dictionary/db"
 	ovalmodels "github.com/kotakanbe/goval-dictionary/models"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"
 )

 type ovalResult struct {
@@ -47,9 +47,9 @@ type defPacks struct {
 	actuallyAffectedPackNames map[string]bool
 }

-func (e defPacks) toPackStatuses() (ps models.PackageStatuses) {
+func (e defPacks) toPackStatuses() (ps models.PackageFixStatuses) {
 	for name, notFixedYet := range e.actuallyAffectedPackNames {
-		ps = append(ps, models.PackageStatus{
+		ps = append(ps, models.PackageFixStatus{
 			Name:        name,
 			NotFixedYet: notFixedYet,
 		})
@@ -164,11 +164,11 @@ func getDefsByPackNameViaHTTP(r *models.ScanResult) (
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			return relatedDefs, fmt.Errorf("Timeout Fetching OVAL")
+			return relatedDefs, xerrors.New("Timeout Fetching OVAL")
 		}
 	}
 	if len(errs) != 0 {
-		return relatedDefs, fmt.Errorf("Failed to fetch OVAL. err: %v", errs)
+		return relatedDefs, xerrors.Errorf("Failed to fetch OVAL. err: %w", errs)
 	}
 	return
 }
@@ -186,8 +186,7 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 			if count == retryMax {
 				return nil
 			}
-			return fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-				errs, url, resp)
+			return xerrors.Errorf("HTTP GET error, url: %s, resp: %v, err: %w", url, resp, errs)
 		}
 		return nil
 	}
@@ -196,18 +195,17 @@ func httpGet(url string, req request, resChan chan<- response, errChan chan<- er
 	}
 	err := backoff.RetryNotify(f, backoff.NewExponentialBackOff(), notify)
 	if err != nil {
-		errChan <- fmt.Errorf("HTTP Error %s", err)
+		errChan <- xerrors.Errorf("HTTP Error %w", err)
 		return
 	}
 	if count == retryMax {
-		errChan <- fmt.Errorf("HRetry count exceeded")
+		errChan <- xerrors.New("HRetry count exceeded")
 		return
 	}

 	defs := []ovalmodels.Definition{}
 	if err := json.Unmarshal([]byte(body), &defs); err != nil {
-		errChan <- fmt.Errorf("Failed to Unmarshall. body: %s, err: %s",
-			body, err)
+		errChan <- xerrors.Errorf("Failed to Unmarshall. body: %s, err: %w", body, err)
 		return
 	}
 	resChan <- response{
@@ -238,7 +236,7 @@ func getDefsByPackNameFromOvalDB(driver db.DB, r *models.ScanResult) (relatedDef
 	for _, req := range requests {
 		definitions, err := driver.GetByPackName(r.Release, req.packName)
 		if err != nil {
-			return relatedDefs, fmt.Errorf("Failed to get %s OVAL info by package: %#v, err: %s", r.Family, req, err)
+			return relatedDefs, xerrors.Errorf("Failed to get %s OVAL info by package: %#v, err: %w", r.Family, req, err)
 		}
 		for _, def := range definitions {
 			affected, notFixedYet := isOvalDefAffected(def, req, r.Family, r.RunningKernel)
@@ -349,5 +347,5 @@ func lessThan(family, versionRelease string, packB ovalmodels.Package) (bool, er
 	default:
 		util.Log.Errorf("Not implemented yet: %s", family)
 	}
-	return false, fmt.Errorf("Package version comparison not supported: %s", family)
+	return false, xerrors.Errorf("Package version comparison not supported: %s", family)
 }
--- a/oval/util_test.go
+++ b/oval/util_test.go
@@ -110,7 +110,7 @@ func TestDefpacksToPackStatuses(t *testing.T) {
 	}
 	var tests = []struct {
 		in  in
-		out models.PackageStatuses
+		out models.PackageFixStatuses
 	}{
 		// Ubuntu
 		{
@@ -135,7 +135,7 @@ func TestDefpacksToPackStatuses(t *testing.T) {
 					},
 				},
 			},
-			out: models.PackageStatuses{
+			out: models.PackageFixStatuses{
 				{
 					Name:        "a",
 					NotFixedYet: true,
--- a/report/azureblob.go
+++ b/report/azureblob.go
@@ -25,6 +25,7 @@ import (
 	"time"

 	storage "github.com/Azure/azure-sdk-for-go/storage"
+	"golang.org/x/xerrors"

 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
@@ -60,7 +61,7 @@ func (w AzureBlobWriter) Write(rs ...models.ScanResult) (err error) {
 			k := key + ".json"
 			var b []byte
 			if b, err = json.Marshal(r); err != nil {
-				return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+				return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 			}
 			if err := createBlockBlob(cli, k, b); err != nil {
 				return err
@@ -87,7 +88,7 @@ func (w AzureBlobWriter) Write(rs ...models.ScanResult) (err error) {
 			k := key + ".xml"
 			var b []byte
 			if b, err = xml.Marshal(r); err != nil {
-				return fmt.Errorf("Failed to Marshal to XML: %s", err)
+				return xerrors.Errorf("Failed to Marshal to XML: %w", err)
 			}
 			allBytes := bytes.Join([][]byte{[]byte(xml.Header + vulsOpenTag), b, []byte(vulsCloseTag)}, []byte{})
 			if err := createBlockBlob(cli, k, allBytes); err != nil {
@@ -117,7 +118,7 @@ func CheckIfAzureContainerExists() error {
 		}
 	}
 	if !found {
-		return fmt.Errorf("Container not found. Container: %s", c.Conf.Azure.ContainerName)
+		return xerrors.Errorf("Container not found. Container: %s", c.Conf.Azure.ContainerName)
 	}
 	return nil
 }
@@ -142,7 +143,7 @@ func createBlockBlob(cli storage.BlobStorageClient, k string, b []byte) error {
 	ref := cli.GetContainerReference(c.Conf.Azure.ContainerName)
 	blob := ref.GetBlobReference(k)
 	if err := blob.CreateBlockBlobFromReader(bytes.NewReader(b), nil); err != nil {
-		return fmt.Errorf("Failed to upload data to %s/%s, %s",
+		return xerrors.Errorf("Failed to upload data to %s/%s, err: %w",
 			c.Conf.Azure.ContainerName, k, err)
 	}
 	return nil
--- a/report/cve_client.go
+++ b/report/cve_client.go
@@ -25,6 +25,7 @@ import (

 	"github.com/cenkalti/backoff"
 	"github.com/parnurzeal/gorequest"
+	"golang.org/x/xerrors"

 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/util"
@@ -45,7 +46,7 @@ func (api *cvedictClient) initialize() {
 }

 func (api cvedictClient) CheckHealth() error {
-	if !api.isFetchViaHTTP() {
+	if !config.Conf.CveDict.IsFetchViaHTTP() {
 		util.Log.Debugf("get cve-dictionary from %s", config.Conf.CveDict.Type)
 		return nil
 	}
@@ -57,7 +58,7 @@ func (api cvedictClient) CheckHealth() error {
 	resp, _, errs = gorequest.New().SetDebug(config.Conf.Debug).Get(url).End()
 	//  resp, _, errs = gorequest.New().Proxy(api.httpProxy).Get(url).End()
 	if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-		return fmt.Errorf("Failed to request to CVE server. url: %s, errs: %v",
+		return xerrors.Errorf("Failed to request to CVE server. url: %s, errs: %w",
 			url, errs)
 	}
 	return nil
@@ -69,11 +70,11 @@ type response struct {
 }

 func (api cvedictClient) FetchCveDetails(driver cvedb.DB, cveIDs []string) (cveDetails []cve.CveDetail, err error) {
-	if !api.isFetchViaHTTP() {
+	if !config.Conf.CveDict.IsFetchViaHTTP() {
 		for _, cveID := range cveIDs {
 			cveDetail, err := driver.Get(cveID)
 			if err != nil {
-				return nil, fmt.Errorf("Failed to fetch CVE. err: %s", err)
+				return nil, xerrors.Errorf("Failed to fetch CVE. err: %w", err)
 			}
 			if len(cveDetail.CveID) == 0 {
 				cveDetails = append(cveDetails, cve.CveDetail{
@@ -132,12 +133,12 @@ func (api cvedictClient) FetchCveDetails(driver cvedb.DB, cveIDs []string) (cveD
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			return nil, fmt.Errorf("Timeout Fetching CVE")
+			return nil, xerrors.New("Timeout Fetching CVE")
 		}
 	}
 	if len(errs) != 0 {
 		return nil,
-			fmt.Errorf("Failed to fetch CVE. err: %v", errs)
+			xerrors.Errorf("Failed to fetch CVE. err: %w", errs)
 	}
 	return
 }
@@ -150,8 +151,8 @@ func (api cvedictClient) httpGet(key, url string, resChan chan<- response, errCh
 		//  resp, body, errs = gorequest.New().SetDebug(config.Conf.Debug).Get(url).End()
 		resp, body, errs = gorequest.New().Get(url).End()
 		if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-			return fmt.Errorf("HTTP GET error: %v, url: %s, resp: %v",
-				errs, url, resp)
+			return xerrors.Errorf("HTTP GET Error, url: %s, resp: %v, err: %w",
+				url, resp, errs)
 		}
 		return nil
 	}
@@ -161,13 +162,12 @@ func (api cvedictClient) httpGet(key, url string, resChan chan<- response, errCh
 	}
 	err := backoff.RetryNotify(f, backoff.NewExponentialBackOff(), notify)
 	if err != nil {
-		errChan <- fmt.Errorf("HTTP Error %s", err)
+		errChan <- xerrors.Errorf("HTTP Error: %w", err)
 		return
 	}
 	cveDetail := cve.CveDetail{}
 	if err := json.Unmarshal([]byte(body), &cveDetail); err != nil {
-		errChan <- fmt.Errorf("Failed to Unmarshall. body: %s, err: %s",
-			body, err)
+		errChan <- xerrors.Errorf("Failed to Unmarshall. body: %s, err: %w", body, err)
 		return
 	}
 	resChan <- response{
@@ -176,16 +176,8 @@ func (api cvedictClient) httpGet(key, url string, resChan chan<- response, errCh
 	}
 }

-func (api cvedictClient) isFetchViaHTTP() bool {
-	// Default value of CveDBType is sqlite3
-	if config.Conf.CveDict.URL != "" && config.Conf.CveDict.Type == "sqlite3" {
-		return true
-	}
-	return false
-}
-
 func (api cvedictClient) FetchCveDetailsByCpeName(driver cvedb.DB, cpeName string) ([]cve.CveDetail, error) {
-	if api.isFetchViaHTTP() {
+	if config.Conf.CveDict.IsFetchViaHTTP() {
 		api.baseURL = config.Conf.CveDict.URL
 		url, err := util.URLPathJoin(api.baseURL, "cpes")
 		if err != nil {
@@ -211,7 +203,7 @@ func (api cvedictClient) httpPost(key, url string, query map[string]string) ([]c
 		}
 		resp, body, errs = req.End()
 		if 0 < len(errs) || resp == nil || resp.StatusCode != 200 {
-			return fmt.Errorf("HTTP POST error: %v, url: %s, resp: %v", errs, url, resp)
+			return xerrors.Errorf("HTTP POST error. url: %s, resp: %v, err: %w", url, resp, errs)
 		}
 		return nil
 	}
@@ -220,13 +212,13 @@ func (api cvedictClient) httpPost(key, url string, query map[string]string) ([]c
 	}
 	err := backoff.RetryNotify(f, backoff.NewExponentialBackOff(), notify)
 	if err != nil {
-		return nil, fmt.Errorf("HTTP Error %s", err)
+		return nil, xerrors.Errorf("HTTP Error: %w", err)
 	}

 	cveDetails := []cve.CveDetail{}
 	if err := json.Unmarshal([]byte(body), &cveDetails); err != nil {
 		return nil,
-			fmt.Errorf("Failed to Unmarshall. body: %s, err: %s", body, err)
+			xerrors.Errorf("Failed to Unmarshall. body: %s, err: %w", body, err)
 	}
 	return cveDetails, nil
 }
--- a/report/db_client.go
+++ b/report/db_client.go
@@ -1,7 +1,6 @@
 package report

 import (
-	"fmt"
 	"os"

 	"github.com/future-architect/vuls/config"
@@ -10,6 +9,7 @@ import (
 	cvedb "github.com/kotakanbe/go-cve-dictionary/db"
 	ovaldb "github.com/kotakanbe/goval-dictionary/db"
 	exploitdb "github.com/mozqnet/go-exploitdb/db"
+	"golang.org/x/xerrors"
 )

 // DBClient is a dictionarie's db client for reporting
@@ -29,32 +29,19 @@ type DBClientConf struct {
 	DebugSQL    bool
 }

-func (c DBClientConf) isCveDBViaHTTP() bool {
-	return c.CveDictCnf.URL != "" && c.CveDictCnf.Type == "sqlite3"
-}
-
-func (c DBClientConf) isOvalViaHTTP() bool {
-	return c.OvalDictCnf.URL != "" && c.OvalDictCnf.Type == "sqlite3"
-}
-
-func (c DBClientConf) isGostViaHTTP() bool {
-	return c.GostCnf.URL != "" && c.GostCnf.Type == "sqlite3"
-}
-
-func (c DBClientConf) isExploitViaHTTP() bool {
-	return c.ExploitCnf.URL != "" && c.ExploitCnf.Type == "sqlite3"
-}
-
 // NewDBClient returns db clients
 func NewDBClient(cnf DBClientConf) (dbclient *DBClient, locked bool, err error) {
 	cveDriver, locked, err := NewCveDB(cnf)
-	if err != nil {
+	if locked {
+		return nil, true, xerrors.Errorf("CveDB is locked: %s",
+			cnf.OvalDictCnf.SQLite3Path)
+	} else if err != nil {
 		return nil, locked, err
 	}

 	ovaldb, locked, err := NewOvalDB(cnf)
 	if locked {
-		return nil, true, fmt.Errorf("OvalDB is locked: %s",
+		return nil, true, xerrors.Errorf("OvalDB is locked: %s",
 			cnf.OvalDictCnf.SQLite3Path)
 	} else if err != nil {
 		util.Log.Warnf("Unable to use OvalDB: %s, err: %s",
@@ -63,7 +50,7 @@ func NewDBClient(cnf DBClientConf) (dbclient *DBClient, locked bool, err error)

 	gostdb, locked, err := NewGostDB(cnf)
 	if locked {
-		return nil, true, fmt.Errorf("gostDB is locked: %s",
+		return nil, true, xerrors.Errorf("gostDB is locked: %s",
 			cnf.GostCnf.SQLite3Path)
 	} else if err != nil {
 		util.Log.Warnf("Unable to use gostDB: %s, err: %s",
@@ -72,7 +59,7 @@ func NewDBClient(cnf DBClientConf) (dbclient *DBClient, locked bool, err error)

 	exploitdb, locked, err := NewExploitDB(cnf)
 	if locked {
-		return nil, true, fmt.Errorf("exploitDB is locked: %s",
+		return nil, true, xerrors.Errorf("exploitDB is locked: %s",
 			cnf.ExploitCnf.SQLite3Path)
 	} else if err != nil {
 		util.Log.Warnf("Unable to use exploitDB: %s, err: %s",
@@ -89,7 +76,7 @@ func NewDBClient(cnf DBClientConf) (dbclient *DBClient, locked bool, err error)

 // NewCveDB returns cve db client
 func NewCveDB(cnf DBClientConf) (driver cvedb.DB, locked bool, err error) {
-	if cnf.isCveDBViaHTTP() {
+	if config.Conf.CveDict.IsFetchViaHTTP() {
 		return nil, false, nil
 	}
 	util.Log.Debugf("open cve-dictionary db (%s)", cnf.CveDictCnf.Type)
@@ -101,7 +88,7 @@ func NewCveDB(cnf DBClientConf) (driver cvedb.DB, locked bool, err error) {
 	util.Log.Debugf("Open cve-dictionary db (%s): %s", cnf.CveDictCnf.Type, path)
 	driver, locked, err = cvedb.NewDB(cnf.CveDictCnf.Type, path, cnf.DebugSQL)
 	if err != nil {
-		err = fmt.Errorf("Failed to init CVE DB. err: %s, path: %s", err, path)
+		err = xerrors.Errorf("Failed to init CVE DB. err: %w, path: %s", err, path)
 		return nil, locked, err
 	}
 	return driver, false, nil
@@ -109,7 +96,7 @@ func NewCveDB(cnf DBClientConf) (driver cvedb.DB, locked bool, err error) {

 // NewOvalDB returns oval db client
 func NewOvalDB(cnf DBClientConf) (driver ovaldb.DB, locked bool, err error) {
-	if cnf.isOvalViaHTTP() {
+	if config.Conf.OvalDict.IsFetchViaHTTP() {
 		return nil, false, nil
 	}
 	path := cnf.OvalDictCnf.URL
@@ -125,7 +112,7 @@ func NewOvalDB(cnf DBClientConf) (driver ovaldb.DB, locked bool, err error) {
 	util.Log.Debugf("Open oval-dictionary db (%s): %s", cnf.OvalDictCnf.Type, path)
 	driver, locked, err = ovaldb.NewDB("", cnf.OvalDictCnf.Type, path, cnf.DebugSQL)
 	if err != nil {
-		err = fmt.Errorf("Failed to new OVAL DB. err: %s", err)
+		err = xerrors.Errorf("Failed to new OVAL DB. err: %w", err)
 		if locked {
 			return nil, true, err
 		}
@@ -136,7 +123,7 @@ func NewOvalDB(cnf DBClientConf) (driver ovaldb.DB, locked bool, err error) {

 // NewGostDB returns db client for Gost
 func NewGostDB(cnf DBClientConf) (driver gostdb.DB, locked bool, err error) {
-	if cnf.isGostViaHTTP() {
+	if config.Conf.Gost.IsFetchViaHTTP() {
 		return nil, false, nil
 	}
 	path := cnf.GostCnf.URL
@@ -162,7 +149,7 @@ func NewGostDB(cnf DBClientConf) (driver gostdb.DB, locked bool, err error) {

 // NewExploitDB returns db client for Exploit
 func NewExploitDB(cnf DBClientConf) (driver exploitdb.DB, locked bool, err error) {
-	if cnf.isExploitViaHTTP() {
+	if config.Conf.Exploit.IsFetchViaHTTP() {
 		return nil, false, nil
 	}
 	path := cnf.ExploitCnf.URL
--- a/report/email.go
+++ b/report/email.go
@@ -27,6 +27,7 @@ import (

 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
+	"golang.org/x/xerrors"
 )

 // EMailWriter send mail
@@ -41,7 +42,6 @@ func (w EMailWriter) Write(rs ...models.ScanResult) (err error) {
 	for _, r := range rs {
 		if conf.FormatOneEMail {
 			message += formatFullPlainText(r) + "\r\n\r\n"
-
 			mm := r.ScannedCves.CountGroupBySeverity()
 			keys := []string{"High", "Medium", "Low", "Unknown"}
 			for _, k := range keys {
@@ -58,13 +58,19 @@ func (w EMailWriter) Write(rs ...models.ScanResult) (err error) {
 					r.ServerInfo(),
 					r.ScannedCves.FormatCveSummary())
 			}
-			message = formatFullPlainText(r)
+			if conf.FormatList {
+				message = formatList(r)
+			} else {
+				message = formatFullPlainText(r)
+			}
+			if conf.FormatOneLineText {
+				message = fmt.Sprintf("One Line Summary\r\n================\r\n%s", formatOneLineSummary(r))
+			}
 			if err := sender.Send(subject, message); err != nil {
 				return err
 			}
 		}
 	}
-
 	summary := ""
 	if config.Conf.IgnoreUnscoredCves {
 		summary = fmt.Sprintf("Total: %d (High:%d Medium:%d Low:%d)",
@@ -73,17 +79,12 @@ func (w EMailWriter) Write(rs ...models.ScanResult) (err error) {
 	summary = fmt.Sprintf("Total: %d (High:%d Medium:%d Low:%d ?:%d)",
 		m["High"]+m["Medium"]+m["Low"]+m["Unknown"],
 		m["High"], m["Medium"], m["Low"], m["Unknown"])
-
+	origmessage := message
 	if conf.FormatOneEMail {
-		message = fmt.Sprintf(
-			`
-One Line Summary
-================
-%s
-
-
-%s`,
-			formatOneLineSummary(rs...), message)
+		message = fmt.Sprintf("One Line Summary\r\n================\r\n%s", formatOneLineSummary(rs...))
+		if !conf.FormatOneLineText {
+			message += fmt.Sprintf("\r\n\r\n%s", origmessage)
+		}

 		subject := fmt.Sprintf("%s %s",
 			conf.EMail.SubjectPrefix, summary)
@@ -108,7 +109,7 @@ func (e *emailSender) Send(subject, body string) (err error) {
 	cc := strings.Join(emailConf.Cc[:], ", ")
 	mailAddresses := append(emailConf.To, emailConf.Cc...)
 	if _, err := mail.ParseAddressList(strings.Join(mailAddresses[:], ", ")); err != nil {
-		return fmt.Errorf("Failed to parse email addresses: %s", err)
+		return xerrors.Errorf("Failed to parse email addresses: %w", err)
 	}

 	headers := make(map[string]string)
@@ -126,20 +127,34 @@ func (e *emailSender) Send(subject, body string) (err error) {
 	message := fmt.Sprintf("%s\r\n%s", header, body)

 	smtpServer := net.JoinHostPort(emailConf.SMTPAddr, emailConf.SMTPPort)
+
+	if emailConf.User != "" && emailConf.Password != "" {
+		err = e.send(
+			smtpServer,
+			smtp.PlainAuth(
+				"",
+				emailConf.User,
+				emailConf.Password,
+				emailConf.SMTPAddr,
+			),
+			emailConf.From,
+			mailAddresses,
+			[]byte(message),
+		)
+		if err != nil {
+			return xerrors.Errorf("Failed to send emails: %w", err)
+		}
+		return nil
+	}
 	err = e.send(
 		smtpServer,
-		smtp.PlainAuth(
-			"",
-			emailConf.User,
-			emailConf.Password,
-			emailConf.SMTPAddr,
-		),
+		nil,
 		emailConf.From,
 		mailAddresses,
 		[]byte(message),
 	)
 	if err != nil {
-		return fmt.Errorf("Failed to send emails: %s", err)
+		return xerrors.Errorf("Failed to send emails: %w", err)
 	}
 	return nil
 }
--- a/report/email_test.go
+++ b/report/email_test.go
@@ -100,7 +100,7 @@ func TestSend(t *testing.T) {
 			t.Errorf("#%d: wrong 'addr' field.\r\nexpected: %s\n got: %s", i, test.out.addr, r.addr)
 		}

-		if !reflect.DeepEqual(r.auth, test.out.auth) {
+		if !reflect.DeepEqual(r.auth, test.out.auth) && r.auth != nil {
 			t.Errorf("#%d: wrong 'auth' field.\r\nexpected: %v\n got: %v", i, test.out.auth, r.auth)
 		}

--- a/report/http.go
+++ b/report/http.go
@@ -22,10 +22,9 @@ import (
 	"encoding/json"
 	"net/http"

-	"github.com/pkg/errors"
-
 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
+	"golang.org/x/xerrors"
 )

 // HTTPRequestWriter writes results to HTTP request
@@ -53,7 +52,7 @@ type HTTPResponseWriter struct {
 func (w HTTPResponseWriter) Write(rs ...models.ScanResult) (err error) {
 	res, err := json.Marshal(rs)
 	if err != nil {
-		return errors.Wrap(err, "Failed to marshal scah results")
+		return xerrors.Errorf("Failed to marshal scah results: %w", err)
 	}
 	w.Writer.Header().Set("Content-Type", "application/json")
 	_, err = w.Writer.Write(res)
--- a/report/localfile.go
+++ b/report/localfile.go
@@ -21,13 +21,13 @@ import (
 	"bytes"
 	"encoding/json"
 	"encoding/xml"
-	"fmt"
 	"io/ioutil"
 	"os"
 	"path/filepath"

 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
+	"golang.org/x/xerrors"
 )

 // LocalFileWriter writes results to a local file.
@@ -40,8 +40,8 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {
 		path := filepath.Join(w.CurrentDir, "summary.txt")
 		text := formatOneLineSummary(rs...)
 		if err := writeFile(path, []byte(text), 0600); err != nil {
-			return fmt.Errorf(
-				"Failed to write to file. path: %s, err: %s",
+			return xerrors.Errorf(
+				"Failed to write to file. path: %s, err: %w",
 				path, err)
 		}
 	}
@@ -60,15 +60,15 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {
 			var b []byte
 			if c.Conf.Debug {
 				if b, err = json.MarshalIndent(r, "", "    "); err != nil {
-					return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+					return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 				}
 			} else {
 				if b, err = json.Marshal(r); err != nil {
-					return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+					return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 				}
 			}
 			if err := writeFile(p, b, 0600); err != nil {
-				return fmt.Errorf("Failed to write JSON. path: %s, err: %s", p, err)
+				return xerrors.Errorf("Failed to write JSON. path: %s, err: %w", p, err)
 			}
 		}

@@ -82,8 +82,8 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {

 			if err := writeFile(
 				p, []byte(formatList(r)), 0600); err != nil {
-				return fmt.Errorf(
-					"Failed to write text files. path: %s, err: %s", p, err)
+				return xerrors.Errorf(
+					"Failed to write text files. path: %s, err: %w", p, err)
 			}
 		}

@@ -97,8 +97,8 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {

 			if err := writeFile(
 				p, []byte(formatFullPlainText(r)), 0600); err != nil {
-				return fmt.Errorf(
-					"Failed to write text files. path: %s, err: %s", p, err)
+				return xerrors.Errorf(
+					"Failed to write text files. path: %s, err: %w", p, err)
 			}
 		}

@@ -112,11 +112,11 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {

 			var b []byte
 			if b, err = xml.Marshal(r); err != nil {
-				return fmt.Errorf("Failed to Marshal to XML: %s", err)
+				return xerrors.Errorf("Failed to Marshal to XML: %w", err)
 			}
 			allBytes := bytes.Join([][]byte{[]byte(xml.Header + vulsOpenTag), b, []byte(vulsCloseTag)}, []byte{})
 			if err := writeFile(p, allBytes, 0600); err != nil {
-				return fmt.Errorf("Failed to write XML. path: %s, err: %s", p, err)
+				return xerrors.Errorf("Failed to write XML. path: %s, err: %w", p, err)
 			}
 		}
 	}
--- a/report/report.go
+++ b/report/report.go
@@ -29,19 +29,23 @@ import (
 	"time"

 	"github.com/BurntSushi/toml"
+	"github.com/future-architect/vuls/config"
 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/contrib/owasp-dependency-check/parser"
 	"github.com/future-architect/vuls/cwe"
 	"github.com/future-architect/vuls/exploit"
+	"github.com/future-architect/vuls/github"
 	"github.com/future-architect/vuls/gost"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/oval"
 	"github.com/future-architect/vuls/util"
+	"github.com/future-architect/vuls/wordpress"
 	"github.com/hashicorp/uuid"
 	gostdb "github.com/knqyf263/gost/db"
 	cvedb "github.com/kotakanbe/go-cve-dictionary/db"
 	ovaldb "github.com/kotakanbe/goval-dictionary/db"
 	exploitdb "github.com/mozqnet/go-exploitdb/db"
+	"golang.org/x/xerrors"
 )

 const (
@@ -56,6 +60,9 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 	hostname, _ := os.Hostname()
 	for _, r := range rs {
 		if c.Conf.RefreshCve || needToRefreshCve(r) {
+			if ovalSupported(&r) {
+				r.ScannedCves = models.VulnInfos{}
+			}
 			cpeURIs := []string{}
 			if len(r.Container.ContainerID) == 0 {
 				cpeURIs = c.Conf.Servers[r.ServerName].CpeNames
@@ -63,7 +70,7 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 				if owaspDCXMLPath != "" {
 					cpes, err := parser.Parse(owaspDCXMLPath)
 					if err != nil {
-						return nil, fmt.Errorf("Failed to read OWASP Dependency Check XML: %s, %s, %s",
+						return nil, xerrors.Errorf("Failed to read OWASP Dependency Check XML on %s, `%s`, err: %w",
 							r.ServerName, owaspDCXMLPath, err)
 					}
 					cpeURIs = append(cpeURIs, cpes...)
@@ -76,7 +83,7 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 						if owaspDCXMLPath != "" {
 							cpes, err := parser.Parse(owaspDCXMLPath)
 							if err != nil {
-								return nil, fmt.Errorf("Failed to read OWASP Dependency Check XML: %s, %s, %s",
+								return nil, xerrors.Errorf("Failed to read OWASP Dependency Check XML on %s, `%s`, err: %w",
 									r.ServerInfo(), owaspDCXMLPath, err)
 							}
 							cpeURIs = append(cpeURIs, cpes...)
@@ -85,7 +92,16 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 				}
 			}

-			if err := FillCveInfo(dbclient, &r, cpeURIs); err != nil {
+			// Integrations
+			githubInts := GithubSecurityAlerts(c.Conf.Servers[r.ServerName].GitHubRepos)
+
+			wpOpt := WordPressOption{c.Conf.Servers[r.ServerName].WordPress.WPVulnDBToken}
+
+			if err := FillCveInfo(dbclient,
+				&r,
+				cpeURIs,
+				githubInts,
+				wpOpt); err != nil {
 				return nil, err
 			}
 			r.Lang = c.Conf.Lang
@@ -98,7 +114,7 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 				r.ServerName: c.Conf.Servers[r.ServerName],
 			}
 			if err := overwriteJSONFile(dir, r); err != nil {
-				return nil, fmt.Errorf("Failed to write JSON: %s", err)
+				return nil, xerrors.Errorf("Failed to write JSON: %w", err)
 			}
 			filledResults = append(filledResults, r)
 		} else {
@@ -132,6 +148,7 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 		r = r.FilterIgnoreCves()
 		r = r.FilterUnfixed()
 		r = r.FilterIgnorePkgs()
+		r = r.FilterInactiveWordPressLibs()
 		if c.Conf.IgnoreUnscoredCves {
 			r.ScannedCves = r.ScannedCves.FindScoredVulns()
 		}
@@ -141,12 +158,12 @@ func FillCveInfos(dbclient DBClient, rs []models.ScanResult, dir string) ([]mode
 }

 // FillCveInfo fill scanResult with cve info.
-func FillCveInfo(dbclient DBClient, r *models.ScanResult, cpeURIs []string) error {
+func FillCveInfo(dbclient DBClient, r *models.ScanResult, cpeURIs []string, integrations ...Integration) error {
 	util.Log.Debugf("need to refresh")

 	nCVEs, err := FillWithOval(dbclient.OvalDB, r)
 	if err != nil {
-		return fmt.Errorf("Failed to fill with OVAL: %s", err)
+		return xerrors.Errorf("Failed to fill with OVAL: %w", err)
 	}
 	util.Log.Infof("%s: %d CVEs are detected with OVAL",
 		r.FormatServerName(), nCVEs)
@@ -162,30 +179,42 @@ func FillCveInfo(dbclient DBClient, r *models.ScanResult, cpeURIs []string) erro

 	nCVEs, err = fillVulnByCpeURIs(dbclient.CveDB, r, cpeURIs)
 	if err != nil {
-		return fmt.Errorf("Failed to detect vulns of %s: %s", cpeURIs, err)
+		return xerrors.Errorf("Failed to detect vulns of `%s`: %w", cpeURIs, err)
 	}
 	util.Log.Infof("%s: %d CVEs are detected with CPE", r.FormatServerName(), nCVEs)

+	ints := &integrationResults{}
+	for _, o := range integrations {
+		if err = o.apply(r, ints); err != nil {
+			return err
+		}
+	}
+	util.Log.Infof("%s: %d CVEs are detected with GitHub Security Alerts", r.FormatServerName(), ints.GithubAlertsCveCounts)
+
 	nCVEs, err = FillWithGost(dbclient.GostDB, r)
 	if err != nil {
-		return fmt.Errorf("Failed to fill with gost: %s", err)
+		return xerrors.Errorf("Failed to fill with gost: %w", err)
 	}
 	util.Log.Infof("%s: %d unfixed CVEs are detected with gost",
 		r.FormatServerName(), nCVEs)

 	util.Log.Infof("Fill CVE detailed information with CVE-DB")
 	if err := fillCveDetail(dbclient.CveDB, r); err != nil {
-		return fmt.Errorf("Failed to fill with CVE: %s", err)
+		return xerrors.Errorf("Failed to fill with CVE: %w", err)
 	}

-	util.Log.Infof("Fill Exploit information with Exploit-DB")
+	util.Log.Infof("Fill exploit information with Exploit-DB")
 	nExploitCve, err := FillWithExploit(dbclient.ExploitDB, r)
 	if err != nil {
-		return fmt.Errorf("Failed to fill with exploit: %s", err)
+		return xerrors.Errorf("Failed to fill with exploit: %w", err)
 	}
-	util.Log.Infof("%s: %d Exploits are detected with exploit",
+	util.Log.Infof("%s: %d exploits are detected",
 		r.FormatServerName(), nExploitCve)

+	enAlertCnt, jaAlertCnt := fillAlerts(r)
+	util.Log.Infof("%s: en: %d, ja: %d alerts are detected",
+		r.FormatServerName(), enAlertCnt, jaAlertCnt)
+
 	fillCweDict(r)
 	return nil
 }
@@ -261,21 +290,21 @@ func FillWithOval(driver ovaldb.DB, r *models.ScanResult) (nCVEs int, err error)
 		return 0, nil
 	default:
 		if r.Family == "" {
-			return 0, fmt.Errorf("Probably an error occurred during scanning. Check the error message")
+			return 0, xerrors.New("Probably an error occurred during scanning. Check the error message")
 		}
-		return 0, fmt.Errorf("OVAL for %s is not implemented yet", r.Family)
+		return 0, xerrors.Errorf("OVAL for %s is not implemented yet", r.Family)
 	}

-	if !ovalClient.IsFetchViaHTTP() && driver == nil {
-		return 0, nil
+	if !c.Conf.OvalDict.IsFetchViaHTTP() {
+		if driver == nil {
+			return 0, nil
+		}
+		if err = driver.NewOvalDB(ovalFamily); err != nil {
+			return 0, xerrors.Errorf("Failed to New Oval DB. err: %w", err)
+		}
 	}

-	if err = driver.NewOvalDB(ovalFamily); err != nil {
-		return 0, fmt.Errorf("Failed to New Oval DB. err: %s", err)
-	}
-
-	util.Log.Debugf("Check whether oval fetched: %s %s",
-		ovalFamily, r.Release)
+	util.Log.Debugf("Check whether oval fetched: %s %s", ovalFamily, r.Release)
 	ok, err := ovalClient.CheckIfOvalFetched(driver, ovalFamily, r.Release)
 	if err != nil {
 		return 0, err
@@ -337,6 +366,61 @@ func fillVulnByCpeURIs(driver cvedb.DB, r *models.ScanResult, cpeURIs []string)
 	return nCVEs, nil
 }

+type integrationResults struct {
+	GithubAlertsCveCounts int
+	WordPressCveCounts    int
+}
+
+// Integration is integration of vuls report
+type Integration interface {
+	apply(*models.ScanResult, *integrationResults) error
+}
+
+// GithubSecurityAlerts :
+func GithubSecurityAlerts(githubConfs map[string]config.GitHubConf) Integration {
+	return GithubSecurityAlertOption{
+		GithubConfs: githubConfs,
+	}
+}
+
+// GithubSecurityAlertOption :
+type GithubSecurityAlertOption struct {
+	GithubConfs map[string]config.GitHubConf
+}
+
+// https://help.github.com/articles/about-security-alerts-for-vulnerable-dependencies/
+func (g GithubSecurityAlertOption) apply(r *models.ScanResult, ints *integrationResults) (err error) {
+	var nCVEs int
+	for ownerRepo, setting := range g.GithubConfs {
+		ss := strings.Split(ownerRepo, "/")
+		owner, repo := ss[0], ss[1]
+		n, err := github.FillGitHubSecurityAlerts(r, owner, repo, setting.Token)
+		if err != nil {
+			return xerrors.Errorf("Failed to access GitHub Security Alerts: %w", err)
+		}
+		nCVEs += n
+	}
+	ints.GithubAlertsCveCounts = nCVEs
+	return nil
+}
+
+// WordPressOption :
+type WordPressOption struct {
+	token string
+}
+
+func (g WordPressOption) apply(r *models.ScanResult, ints *integrationResults) (err error) {
+	if g.token == "" {
+		return nil
+	}
+	n, err := wordpress.FillWordPress(r, g.token)
+	if err != nil {
+		return xerrors.Errorf("Failed to fetch from WPVulnDB. Check the WPVulnDBToken in config.toml. err: %w", err)
+	}
+	ints.WordPressCveCounts = n
+	return nil
+}
+
 func fillCweDict(r *models.ScanResult) {
 	uniqCweIDMap := map[string]bool{}
 	for _, vinfo := range r.ScannedCves {
@@ -350,9 +434,6 @@ func fillCweDict(r *models.ScanResult) {
 		}
 	}

-	// TODO check the format of CWEID, clean CWEID
-	// JVN, NVD XML, JSON, OVALs
-
 	dict := map[string]models.CweDictEntry{}
 	for id := range uniqCweIDMap {
 		entry := models.CweDictEntry{}
@@ -383,6 +464,20 @@ func fillCweDict(r *models.ScanResult) {
 	return
 }

+func fillAlerts(r *models.ScanResult) (enCnt int, jaCnt int) {
+	for cveID, vuln := range r.ScannedCves {
+		enAs, jaAs := models.GetAlertsByCveID(cveID, "en"), models.GetAlertsByCveID(cveID, "ja")
+		vuln.AlertDict = models.AlertDict{
+			Ja: jaAs,
+			En: enAs,
+		}
+		r.ScannedCves[cveID] = vuln
+		enCnt += len(enAs)
+		jaCnt += len(jaAs)
+	}
+	return enCnt, jaCnt
+}
+
 const reUUID = "[\\da-f]{8}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{12}"

 // EnsureUUIDs generate a new UUID of the scan target server if UUID is not assigned yet.
@@ -554,21 +649,21 @@ func EnsureUUIDs(configPath string, results models.ScanResults) error {
 	// rename the current config.toml to config.toml.bak
 	info, err := os.Lstat(configPath)
 	if err != nil {
-		return fmt.Errorf("Failed to lstat %s: %s", configPath, err)
+		return xerrors.Errorf("Failed to lstat %s: %w", configPath, err)
 	}
 	realPath := configPath
 	if info.Mode()&os.ModeSymlink == os.ModeSymlink {
 		if realPath, err = os.Readlink(configPath); err != nil {
-			return fmt.Errorf("Failed to Read link %s: %s", configPath, err)
+			return xerrors.Errorf("Failed to Read link %s: %w", configPath, err)
 		}
 	}
 	if err := os.Rename(realPath, realPath+".bak"); err != nil {
-		return fmt.Errorf("Failed to rename %s: %s", configPath, err)
+		return xerrors.Errorf("Failed to rename %s: %w", configPath, err)
 	}

 	var buf bytes.Buffer
 	if err := toml.NewEncoder(&buf).Encode(c); err != nil {
-		return fmt.Errorf("Failed to encode to toml: %s", err)
+		return xerrors.Errorf("Failed to encode to toml: %w", err)
 	}
 	str := strings.Replace(buf.String(), "\n  [", "\n\n  [", -1)
 	str = fmt.Sprintf("%s\n\n%s",
--- a/report/s3.go
+++ b/report/s3.go
@@ -31,6 +31,7 @@ import (
 	"github.com/aws/aws-sdk-go/aws/ec2metadata"
 	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/aws/aws-sdk-go/service/s3"
+	"golang.org/x/xerrors"

 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
@@ -75,7 +76,7 @@ func (w S3Writer) Write(rs ...models.ScanResult) (err error) {
 			k := key + ".json"
 			var b []byte
 			if b, err = json.Marshal(r); err != nil {
-				return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+				return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 			}
 			if err := putObject(svc, k, b); err != nil {
 				return err
@@ -102,7 +103,7 @@ func (w S3Writer) Write(rs ...models.ScanResult) (err error) {
 			k := key + ".xml"
 			var b []byte
 			if b, err = xml.Marshal(r); err != nil {
-				return fmt.Errorf("Failed to Marshal to XML: %s", err)
+				return xerrors.Errorf("Failed to Marshal to XML: %w", err)
 			}
 			allBytes := bytes.Join([][]byte{[]byte(xml.Header + vulsOpenTag), b, []byte(vulsCloseTag)}, []byte{})
 			if err := putObject(svc, k, allBytes); err != nil {
@@ -118,8 +119,8 @@ func CheckIfBucketExists() error {
 	svc := getS3()
 	result, err := svc.ListBuckets(&s3.ListBucketsInput{})
 	if err != nil {
-		return fmt.Errorf(
-			"Failed to list buckets. err: %s, profile: %s, region: %s",
+		return xerrors.Errorf(
+			"Failed to list buckets. err: %w, profile: %s, region: %s",
 			err, c.Conf.AWS.Profile, c.Conf.AWS.Region)
 	}

@@ -131,7 +132,7 @@ func CheckIfBucketExists() error {
 		}
 	}
 	if !found {
-		return fmt.Errorf(
+		return xerrors.Errorf(
 			"Failed to find the buckets. profile: %s, region: %s, bucket: %s",
 			c.Conf.AWS.Profile, c.Conf.AWS.Region, c.Conf.AWS.S3Bucket)
 	}
@@ -158,7 +159,7 @@ func putObject(svc *s3.S3, k string, b []byte) error {
 	}

 	if _, err := svc.PutObject(putObjectInput); err != nil {
-		return fmt.Errorf("Failed to upload data to %s/%s, %s",
+		return xerrors.Errorf("Failed to upload data to %s/%s, err: %w",
 			c.Conf.AWS.S3Bucket, k, err)
 	}
 	return nil
--- a/report/saas.go
+++ b/report/saas.go
@@ -24,7 +24,9 @@ import (
 	"io/ioutil"
 	"net/http"
 	"net/url"
+	"os"
 	"path"
+	"strings"
 	"time"

 	"github.com/aws/aws-sdk-go/aws"
@@ -35,6 +37,7 @@ import (
 	c "github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // SaasWriter writes results to SaaS
@@ -48,8 +51,11 @@ type TempCredential struct {
 }

 type payload struct {
-	GroupID int    `json:"GroupID"`
-	Token   string `json:"Token"`
+	GroupID      int    `json:"GroupID"`
+	Token        string `json:"Token"`
+	ScannedBy    string `json:"ScannedBy"`
+	ScannedIPv4s string `json:"ScannedIPv4s"`
+	ScannedIPv6s string `json:"ScannedIPv6s"`
 }

 // UploadSaas : UploadSaas
@@ -59,14 +65,23 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {
 		return nil
 	}

+	ipv4s, ipv6s, err := util.IP()
+	if err != nil {
+		util.Log.Errorf("Failed to fetch scannedIPs: %s", err)
+	}
+	hostname, _ := os.Hostname()
+
 	payload := payload{
-		GroupID: c.Conf.Saas.GroupID,
-		Token:   c.Conf.Saas.Token,
+		GroupID:      c.Conf.Saas.GroupID,
+		Token:        c.Conf.Saas.Token,
+		ScannedBy:    hostname,
+		ScannedIPv4s: strings.Join(ipv4s, ", "),
+		ScannedIPv6s: strings.Join(ipv6s, ", "),
 	}

 	var body []byte
 	if body, err = json.Marshal(payload); err != nil {
-		return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+		return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 	}

 	var req *http.Request
@@ -95,7 +110,7 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {
 	}
 	defer resp.Body.Close()
 	if resp.StatusCode != 200 {
-		return fmt.Errorf("Failed to get Credential. Request JSON : %s,", string(body))
+		return xerrors.Errorf("Failed to get Credential. Request JSON : %s,", string(body))
 	}

 	var t []byte
@@ -105,7 +120,7 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {

 	var tempCredential TempCredential
 	if err = json.Unmarshal(t, &tempCredential); err != nil {
-		return fmt.Errorf("Failed to unmarshal saas credential file. err : %s", err)
+		return xerrors.Errorf("Failed to unmarshal saas credential file. err : %s", err)
 	}

 	credential := credentials.NewStaticCredentialsFromCreds(credentials.Value{
@@ -119,7 +134,7 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {
 		Credentials: credential,
 		Region:      aws.String("ap-northeast-1"),
 	}); err != nil {
-		return fmt.Errorf("Failed to new aws session. err : %s", err)
+		return xerrors.Errorf("Failed to new aws session. err: %w", err)
 	}

 	svc := s3.New(sess)
@@ -127,7 +142,7 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {
 		s3Key := renameKeyNameUTC(r.ScannedAt, r.ServerUUID, r.Container)
 		var b []byte
 		if b, err = json.Marshal(r); err != nil {
-			return fmt.Errorf("Failed to Marshal to JSON: %s", err)
+			return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
 		}
 		util.Log.Infof("Uploading...: ServerName: %s, ", r.ServerName)
 		putObjectInput := &s3.PutObjectInput{
@@ -137,7 +152,7 @@ func (w SaasWriter) Write(rs ...models.ScanResult) (err error) {
 		}

 		if _, err := svc.PutObject(putObjectInput); err != nil {
-			return fmt.Errorf("Failed to upload data to %s/%s, %s",
+			return xerrors.Errorf("Failed to upload data to %s/%s, err: %w",
 				tempCredential.S3Bucket, s3Key, err)
 		}
 	}
--- a/report/slack.go
+++ b/report/slack.go
@@ -30,6 +30,7 @@ import (
 	"github.com/nlopes/slack"
 	"github.com/parnurzeal/gorequest"
 	log "github.com/sirupsen/logrus"
+	"golang.org/x/xerrors"
 )

 type field struct {
@@ -39,12 +40,11 @@ type field struct {
 }

 type message struct {
-	Text            string             `json:"text"`
-	Username        string             `json:"username"`
-	IconEmoji       string             `json:"icon_emoji"`
-	Channel         string             `json:"channel"`
-	ThreadTimeStamp string             `json:"thread_ts"`
-	Attachments     []slack.Attachment `json:"attachments"`
+	Text        string             `json:"text"`
+	Username    string             `json:"username"`
+	IconEmoji   string             `json:"icon_emoji"`
+	Channel     string             `json:"channel"`
+	Attachments []slack.Attachment `json:"attachments"`
 }

 // SlackWriter send report to slack
@@ -60,19 +60,6 @@ func (w SlackWriter) Write(rs ...models.ScanResult) (err error) {
 			channel = fmt.Sprintf("#%s", r.ServerName)
 		}

-		if 0 < len(r.Errors) {
-			msg := message{
-				Text:      msgText(r),
-				Username:  conf.AuthUser,
-				IconEmoji: conf.IconEmoji,
-				Channel:   channel,
-			}
-			if err = send(msg); err != nil {
-				return err
-			}
-			continue
-		}
-
 		// A maximum of 100 attachments are allowed on a message.
 		// Split into chunks with 100 elements
 		// https://api.slack.com/methods/chat.postMessage
@@ -96,6 +83,13 @@ func (w SlackWriter) Write(rs ...models.ScanResult) (err error) {
 				IconEmoji: conf.IconEmoji,
 			}

+			if config.Conf.FormatOneLineText {
+				if _, _, err = api.PostMessage(channel, formatOneLineSummary(r), ParentMsg); err != nil {
+					return err
+				}
+				continue
+			}
+
 			var ts string
 			if _, ts, err = api.PostMessage(channel, msgText(r), ParentMsg); err != nil {
 				return err
@@ -114,6 +108,19 @@ func (w SlackWriter) Write(rs ...models.ScanResult) (err error) {
 				}
 			}
 		} else {
+			if config.Conf.FormatOneLineText {
+				msg := message{
+					Text:      formatOneLineSummary(r),
+					Username:  conf.AuthUser,
+					IconEmoji: conf.IconEmoji,
+					Channel:   channel,
+				}
+				if err := send(msg); err != nil {
+					return err
+				}
+				continue
+			}
+
 			for i, k := range chunkKeys {
 				txt := ""
 				if i == 0 {
@@ -149,9 +156,9 @@ func send(msg message) error {
 			if count == retryMax {
 				return nil
 			}
-			return fmt.Errorf(
-				"HTTP POST error: %v, url: %s, resp: %v, body: %s",
-				errs, conf.HookURL, resp, body)
+			return xerrors.Errorf(
+				"HTTP POST error. url: %s, resp: %v, body: %s, err: %w",
+				conf.HookURL, resp, body, errs)
 		}
 		return nil
 	}
@@ -161,10 +168,10 @@ func send(msg message) error {
 	}
 	boff := backoff.NewExponentialBackOff()
 	if err := backoff.RetryNotify(f, boff, notify); err != nil {
-		return fmt.Errorf("HTTP error: %s", err)
+		return xerrors.Errorf("HTTP error: %w", err)
 	}
 	if count == retryMax {
-		return fmt.Errorf("Retry count exceeded")
+		return xerrors.New("Retry count exceeded")
 	}
 	return nil
 }
@@ -196,33 +203,44 @@ func msgText(r models.ScanResult) string {
 func toSlackAttachments(r models.ScanResult) (attaches []slack.Attachment) {
 	vinfos := r.ScannedCves.ToSortedSlice()
 	for _, vinfo := range vinfos {
-		curent := []string{}
+
+		installed, candidate := []string{}, []string{}
 		for _, affected := range vinfo.AffectedPackages {
 			if p, ok := r.Packages[affected.Name]; ok {
-				curent = append(curent,
+				installed = append(installed,
 					fmt.Sprintf("%s-%s", p.Name, p.FormatVer()))
 			} else {
-				curent = append(curent, affected.Name)
+				installed = append(installed, affected.Name)
 			}
-		}
-		for _, n := range vinfo.CpeURIs {
-			curent = append(curent, n)
-		}

-		new := []string{}
-		for _, affected := range vinfo.AffectedPackages {
 			if p, ok := r.Packages[affected.Name]; ok {
 				if affected.NotFixedYet {
-					new = append(new, "Not Fixed Yet")
+					candidate = append(candidate, "Not Fixed Yet")
 				} else {
-					new = append(new, p.FormatNewVer())
+					candidate = append(candidate, p.FormatNewVer())
 				}
 			} else {
-				new = append(new, "?")
+				candidate = append(candidate, "?")
 			}
 		}
-		for range vinfo.CpeURIs {
-			new = append(new, "?")
+
+		for _, n := range vinfo.CpeURIs {
+			installed = append(installed, n)
+			candidate = append(candidate, "?")
+		}
+		for _, n := range vinfo.GitHubSecurityAlerts {
+			installed = append(installed, n.PackageName)
+			candidate = append(candidate, "?")
+		}
+
+		for _, wp := range vinfo.WpPackageFixStats {
+			if p, ok := r.WordPressPackages.Find(wp.Name); ok {
+				installed = append(installed, fmt.Sprintf("%s-%s", wp.Name, p.Version))
+				candidate = append(candidate, wp.FixedIn)
+			} else {
+				installed = append(installed, wp.Name)
+				candidate = append(candidate, "?")
+			}
 		}

 		a := slack.Attachment{
@@ -234,12 +252,12 @@ func toSlackAttachments(r models.ScanResult) (attaches []slack.Attachment) {
 				{
 					// Title: "Current Package/CPE",
 					Title: "Installed",
-					Value: strings.Join(curent, "\n"),
+					Value: strings.Join(installed, "\n"),
 					Short: true,
 				},
 				{
 					Title: "Candidate",
-					Value: strings.Join(new, "\n"),
+					Value: strings.Join(candidate, "\n"),
 					Short: true,
 				},
 			},
@@ -257,7 +275,7 @@ func cvssColor(cvssScore float64) string {
 		return "danger"
 	case 4 <= cvssScore && cvssScore < 7:
 		return "warning"
-	case cvssScore < 0:
+	case cvssScore == 0:
 		return "#C0C0C0"
 	default:
 		return "good"
--- a/report/syslog.go
+++ b/report/syslog.go
@@ -22,8 +22,7 @@ import (
 	"strings"

 	syslog "github.com/RackSec/srslog"
-
-	"github.com/pkg/errors"
+	"golang.org/x/xerrors"

 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
@@ -40,7 +39,7 @@ func (w SyslogWriter) Write(rs ...models.ScanResult) (err error) {

 	sysLog, err := syslog.Dial(conf.Protocol, raddr, severity|facility, conf.Tag)
 	if err != nil {
-		return errors.Wrap(err, "Failed to initialize syslog client")
+		return xerrors.Errorf("Failed to initialize syslog client: %w", err)
 	}

 	for _, r := range rs {
--- a/report/syslog_test.go
+++ b/report/syslog_test.go
@@ -22,15 +22,15 @@ func TestSyslogWriterEncodeSyslog(t *testing.T) {
 				IPv4Addrs:  []string{"192.168.0.1", "10.0.2.15"},
 				ScannedCves: models.VulnInfos{
 					"CVE-2017-0001": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
-							models.PackageStatus{Name: "pkg1"},
-							models.PackageStatus{Name: "pkg2"},
+						AffectedPackages: models.PackageFixStatuses{
+							models.PackageFixStatus{Name: "pkg1"},
+							models.PackageFixStatus{Name: "pkg2"},
 						},
 					},
 					"CVE-2017-0002": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
-							models.PackageStatus{Name: "pkg3"},
-							models.PackageStatus{Name: "pkg4"},
+						AffectedPackages: models.PackageFixStatuses{
+							models.PackageFixStatus{Name: "pkg3"},
+							models.PackageFixStatus{Name: "pkg4"},
 						},
 						CveContents: models.CveContents{
 							models.NvdXML: models.CveContent{
@@ -57,8 +57,8 @@ func TestSyslogWriterEncodeSyslog(t *testing.T) {
 				IPv6Addrs:  []string{"2001:0DB8::1"},
 				ScannedCves: models.VulnInfos{
 					"CVE-2017-0003": models.VulnInfo{
-						AffectedPackages: models.PackageStatuses{
-							models.PackageStatus{Name: "pkg5"},
+						AffectedPackages: models.PackageFixStatuses{
+							models.PackageFixStatus{Name: "pkg5"},
 						},
 						CveContents: models.CveContents{
 							models.RedHat: models.CveContent{
--- a/report/telegram.go
+++ b/report/telegram.go
@@ -0,0 +1,78 @@
+package report
+
+import (
+	"bytes"
+	"fmt"
+	"net/http"
+	"strconv"
+	"strings"
+
+	"github.com/future-architect/vuls/config"
+	"github.com/future-architect/vuls/models"
+	"golang.org/x/xerrors"
+)
+
+// TelegramWriter sends report to Telegram
+type TelegramWriter struct{}
+
+func (w TelegramWriter) Write(rs ...models.ScanResult) (err error) {
+	conf := config.Conf.Telegram
+	for _, r := range rs {
+		msgs := []string{fmt.Sprintf("*%s*\n%s\n%s\n%s",
+			r.ServerInfo(),
+			r.ScannedCves.FormatCveSummary(),
+			r.ScannedCves.FormatFixedStatus(r.Packages),
+			r.FormatUpdatablePacksSummary())}
+		for _, vinfo := range r.ScannedCves {
+			maxCvss := vinfo.MaxCvssScore()
+			severity := strings.ToUpper(maxCvss.Value.Severity)
+			if severity == "" {
+				severity = "?"
+			}
+			msgs = append(msgs, fmt.Sprintf(`[%s](https://nvd.nist.gov/vuln/detail/%s) _%s %s %s_\n%s`,
+				vinfo.CveID,
+				vinfo.CveID,
+				strconv.FormatFloat(maxCvss.Value.Score, 'f', 1, 64),
+				severity,
+				maxCvss.Value.Vector,
+				vinfo.Summaries(config.Conf.Lang, r.Family)[0].Value))
+			if len(msgs) == 5 {
+				if err = sendMessage(conf.ChatID, conf.Token, strings.Join(msgs, "\n\n")); err != nil {
+					return err
+				}
+				msgs = []string{}
+			}
+		}
+		if len(msgs) != 0 {
+			if err = sendMessage(conf.ChatID, conf.Token, strings.Join(msgs, "\n\n")); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func sendMessage(chatID, token, message string) error {
+	uri := fmt.Sprintf("https://api.telegram.org/bot%s/sendMessage", token)
+	payload := `{"text": "` + strings.Replace(message, `"`, `\"`, -1) + `", "chat_id": "` + chatID + `", "parse_mode": "Markdown" }`
+	req, err := http.NewRequest("POST", uri, bytes.NewBuffer([]byte(payload)))
+	req.Header.Add("Content-Type", "application/json")
+	if err != nil {
+		return err
+	}
+	client := &http.Client{}
+	resp, err := client.Do(req)
+	if checkResponse(resp) != nil && err != nil {
+		fmt.Println(err)
+		return err
+	}
+	defer resp.Body.Close()
+	return nil
+}
+
+func checkResponse(r *http.Response) error {
+	if c := r.StatusCode; 200 <= c && c <= 299 {
+		return nil
+	}
+	return xerrors.Errorf("API call to %s failed: %s", r.Request.URL.String(), r.Status)
+}
--- a/report/telegram_test.go
+++ b/report/telegram_test.go
@@ -0,0 +1 @@
+package report
--- a/report/tui.go
+++ b/report/tui.go
@@ -26,6 +26,9 @@ import (
 	"text/template"
 	"time"

+	"github.com/future-architect/vuls/alert"
+	"golang.org/x/xerrors"
+
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
@@ -579,7 +582,7 @@ func setSideLayout(g *gocui.Gui) error {
 			fmt.Fprintln(v, result.ServerInfoTui())
 		}
 		if len(scanResults) == 0 {
-			return fmt.Errorf("No scan results")
+			return xerrors.New("No scan results")
 		}
 		currentScanResult = scanResults[0]
 		vinfos = scanResults[0].ScannedCves.ToSortedSlice()
@@ -632,17 +635,24 @@ func summaryLines(r models.ScanResult) string {
 			cvssScore = fmt.Sprintf("| %4.1f", max)
 		}

-		packname := vinfo.AffectedPackages.FormatTuiSummary()
-		packname += strings.Join(vinfo.CpeURIs, ", ")
+		pkgNames := vinfo.AffectedPackages.Names()
+		pkgNames = append(pkgNames, vinfo.CpeURIs...)
+		pkgNames = append(pkgNames, vinfo.GitHubSecurityAlerts.Names()...)
+		pkgNames = append(pkgNames, vinfo.WpPackageFixStats.Names()...)
+
+		alert := "  "
+		if vinfo.AlertDict.HasAlert() {
+			alert = "! "
+		}

 		var cols []string
 		cols = []string{
 			fmt.Sprintf(indexFormat, i+1),
-			vinfo.CveID,
+			alert + vinfo.CveID,
 			cvssScore + " |",
-			fmt.Sprintf("%8s |", vinfo.AttackVector()),
+			fmt.Sprintf("%1s |", vinfo.AttackVector()),
 			fmt.Sprintf("%7s |", vinfo.PatchStatus(r.Packages)),
-			packname,
+			strings.Join(pkgNames, ", "),
 		}
 		icols := make([]interface{}, len(cols))
 		for j := range cols {
@@ -735,6 +745,26 @@ func setChangelogLayout(g *gocui.Gui) error {
 			lines = append(lines, "* "+uri)
 		}

+		for _, alert := range vinfo.GitHubSecurityAlerts {
+			lines = append(lines, "* "+alert.PackageName)
+		}
+
+		r := currentScanResult
+		for _, wp := range vinfo.WpPackageFixStats {
+			if p, ok := r.WordPressPackages.Find(wp.Name); ok {
+				if p.Type == models.WPCore {
+					lines = append(lines, fmt.Sprintf("* %s-%s, FixedIn: %s",
+						wp.Name, p.Version, wp.FixedIn))
+				} else {
+					lines = append(lines,
+						fmt.Sprintf("* %s-%s, Update: %s, FixedIn: %s, %s",
+							wp.Name, p.Version, p.Update, wp.FixedIn, p.Status))
+				}
+			} else {
+				lines = append(lines, fmt.Sprintf("* %s", wp.Name))
+			}
+		}
+
 		for _, adv := range vinfo.DistroAdvisories {
 			lines = append(lines, "\n",
 				"Advisories",
@@ -753,6 +783,30 @@ func setChangelogLayout(g *gocui.Gui) error {
 			}
 		}

+		if len(vinfo.AlertDict.En) > 0 {
+			lines = append(lines, "\n",
+				"USCERT Alert",
+				"=============",
+			)
+			for _, alert := range vinfo.AlertDict.En {
+				lines = append(lines, fmt.Sprintf("* [%s](%s)", alert.Title, alert.URL))
+			}
+		}
+
+		if len(vinfo.AlertDict.Ja) > 0 {
+			lines = append(lines, "\n",
+				"JPCERT Alert",
+				"=============",
+			)
+			for _, alert := range vinfo.AlertDict.Ja {
+				if config.Conf.Lang == "ja" {
+					lines = append(lines, fmt.Sprintf("* [%s](%s)", alert.Title, alert.URL))
+				} else {
+					lines = append(lines, fmt.Sprintf("* [JPCERT](%s)", alert.URL))
+				}
+			}
+		}
+
 		if currentScanResult.IsDeepScanMode() {
 			lines = append(lines, "\n",
 				"ChangeLogs",
@@ -785,6 +839,7 @@ type dataForTmpl struct {
 	Mitigation       string
 	Confidences      models.Confidences
 	Cwes             []models.CweDictEntry
+	Alerts           []alert.Alert
 	Links            []string
 	References       []models.Reference
 	Packages         []string
@@ -809,10 +864,13 @@ func detailLines() (string, error) {
 	}

 	vinfo := vinfos[currentVinfo]
-	links := []string{vinfo.CveContents.SourceLinks(
-		config.Conf.Lang, r.Family, vinfo.CveID)[0].Value,
-		vinfo.Cvss2CalcURL(),
-		vinfo.Cvss3CalcURL()}
+	links := []string{}
+	if strings.HasPrefix(vinfo.CveID, "CVE-") {
+		links = append(links, vinfo.CveContents.SourceLinks(
+			config.Conf.Lang, r.Family, vinfo.CveID)[0].Value,
+			vinfo.Cvss2CalcURL(),
+			vinfo.Cvss3CalcURL())
+	}
 	for _, url := range vinfo.VendorLinks(r.Family) {
 		links = append(links, url)
 	}
--- a/report/util.go
+++ b/report/util.go
@@ -35,6 +35,7 @@ import (
 	"github.com/future-architect/vuls/util"
 	"github.com/gosuri/uitable"
 	"github.com/olekukonko/tablewriter"
+	"golang.org/x/xerrors"
 )

 const maxColWidth = 100
@@ -50,7 +51,6 @@ func formatScanSummary(rs ...models.ScanResult) string {
 				r.FormatServerName(),
 				fmt.Sprintf("%s%s", r.Family, r.Release),
 				r.FormatUpdatablePacksSummary(),
-				r.FormatExploitCveSummary(),
 			}
 		} else {
 			cols = []interface{}{
@@ -78,6 +78,7 @@ func formatOneLineSummary(rs ...models.ScanResult) string {
 				r.ScannedCves.FormatFixedStatus(r.Packages),
 				r.FormatUpdatablePacksSummary(),
 				r.FormatExploitCveSummary(),
+				r.FormatAlertSummary(),
 			}
 		} else {
 			cols = []interface{}{
@@ -104,7 +105,7 @@ func formatList(r models.ScanResult) string {
 %s
 No CVE-IDs are found in updatable packages.
 %s
-	 `, header, r.FormatUpdatablePacksSummary())
+`, header, r.FormatUpdatablePacksSummary())
 	}

 	data := [][]string{}
@@ -116,16 +117,28 @@ No CVE-IDs are found in updatable packages.
 		// packname := vinfo.AffectedPackages.FormatTuiSummary()
 		// packname += strings.Join(vinfo.CpeURIs, ", ")

+		exploits := ""
+		if 0 < len(vinfo.Exploits) {
+			exploits = "   Y"
+		}
+
+		link := ""
+		if strings.HasPrefix(vinfo.CveID, "CVE-") {
+			link = fmt.Sprintf("https://nvd.nist.gov/vuln/detail/%s", vinfo.CveID)
+		} else if strings.HasPrefix(vinfo.CveID, "WPVDBID-") {
+			link = fmt.Sprintf("https://wpvulndb.com/vulnerabilities/%s", strings.TrimPrefix(vinfo.CveID, "WPVDBID-"))
+		}
+
 		data = append(data, []string{
 			vinfo.CveID,
+			fmt.Sprintf("%7s", vinfo.PatchStatus(r.Packages)),
+			vinfo.AlertDict.FormatSource(),
 			fmt.Sprintf("%4.1f", max),
 			// fmt.Sprintf("%4.1f", v2max),
 			// fmt.Sprintf("%4.1f", v3max),
-			fmt.Sprintf("%8s", vinfo.AttackVector()),
-			fmt.Sprintf("%7s", vinfo.PatchStatus(r.Packages)),
-			// packname,
-			fmt.Sprintf("https://nvd.nist.gov/vuln/detail/%s", vinfo.CveID),
-			fmt.Sprintf("%t", 0 < len(vinfo.Exploits)),
+			fmt.Sprintf("%2s", vinfo.AttackVector()),
+			exploits,
+			link,
 		})
 	}

@@ -133,14 +146,14 @@ No CVE-IDs are found in updatable packages.
 	table := tablewriter.NewWriter(&b)
 	table.SetHeader([]string{
 		"CVE-ID",
+		"Fixed",
+		"CERT",
 		"CVSS",
 		// "v3",
 		// "v2",
-		"Attack",
-		"Fixed",
-		// "Pkg",
+		"AV",
+		"PoC",
 		"NVD",
-		"Exploit",
 	})
 	table.SetBorder(true)
 	table.AppendBulk(data)
@@ -161,7 +174,7 @@ func formatFullPlainText(r models.ScanResult) (lines string) {
 %s
 No CVE-IDs are found in updatable packages.
 %s
-	 `, header, r.FormatUpdatablePacksSummary())
+`, header, r.FormatUpdatablePacksSummary())
 	}

 	lines = header + "\n"
@@ -232,19 +245,41 @@ No CVE-IDs are found in updatable packages.
 			data = append(data, []string{"CPE", name})
 		}

+		for _, alert := range vuln.GitHubSecurityAlerts {
+			data = append(data, []string{"GitHub", alert.PackageName})
+		}
+
+		for _, wp := range vuln.WpPackageFixStats {
+			if p, ok := r.WordPressPackages.Find(wp.Name); ok {
+				if p.Type == models.WPCore {
+					data = append(data, []string{"WordPress",
+						fmt.Sprintf("%s-%s, FixedIn: %s", wp.Name, p.Version, wp.FixedIn)})
+				} else {
+					data = append(data, []string{"WordPress",
+						fmt.Sprintf("%s-%s, Update: %s, FixedIn: %s, %s",
+							wp.Name, p.Version, p.Update, wp.FixedIn, p.Status)})
+				}
+			} else {
+				data = append(data, []string{"WordPress",
+					fmt.Sprintf("%s", wp.Name)})
+			}
+		}
+
 		for _, confidence := range vuln.Confidences {
 			data = append(data, []string{"Confidence", confidence.String()})
 		}

-		links := vuln.CveContents.SourceLinks(
-			config.Conf.Lang, r.Family, vuln.CveID)
-		data = append(data, []string{"Source", links[0].Value})
+		if strings.HasPrefix(vuln.CveID, "CVE-") {
+			links := vuln.CveContents.SourceLinks(
+				config.Conf.Lang, r.Family, vuln.CveID)
+			data = append(data, []string{"Source", links[0].Value})

-		if 0 < len(vuln.Cvss2Scores(r.Family)) {
-			data = append(data, []string{"CVSSv2 Calc", vuln.Cvss2CalcURL()})
-		}
-		if 0 < len(vuln.Cvss3Scores()) {
-			data = append(data, []string{"CVSSv3 Calc", vuln.Cvss3CalcURL()})
+			if 0 < len(vuln.Cvss2Scores(r.Family)) {
+				data = append(data, []string{"CVSSv2 Calc", vuln.Cvss2CalcURL()})
+			}
+			if 0 < len(vuln.Cvss3Scores()) {
+				data = append(data, []string{"CVSSv3 Calc", vuln.Cvss3CalcURL()})
+			}
 		}

 		vlinks := vuln.VendorLinks(r.Family)
@@ -261,6 +296,14 @@ No CVE-IDs are found in updatable packages.
 			data = append(data, []string{"OWASP Top10", url})
 		}

+		for _, alert := range vuln.AlertDict.Ja {
+			data = append(data, []string{"JPCERT Alert", alert.URL})
+		}
+
+		for _, alert := range vuln.AlertDict.En {
+			data = append(data, []string{"USCERT Alert", alert.URL})
+		}
+
 		// for _, rr := range vuln.CveContents.References(r.Family) {
 		// for _, ref := range rr.Value {
 		// data = append(data, []string{ref.Source, ref.Link})
@@ -273,7 +316,7 @@ No CVE-IDs are found in updatable packages.
 		table.SetHeaderAlignment(tablewriter.ALIGN_LEFT)
 		table.SetHeader([]string{
 			vuln.CveID,
-			"",
+			vuln.PatchStatus(r.Packages),
 		})
 		table.SetBorder(true)
 		table.AppendBulk(data)
@@ -303,6 +346,16 @@ func formatChangelogs(r models.ScanResult) string {
 	}
 	return strings.Join(buf, "\n")
 }
+func ovalSupported(r *models.ScanResult) bool {
+	switch r.Family {
+	case
+		config.Amazon,
+		config.FreeBSD,
+		config.Raspbian:
+		return false
+	}
+	return true
+}

 func needToRefreshCve(r models.ScanResult) bool {
 	if r.Lang != config.Conf.Lang {
@@ -324,7 +377,7 @@ func overwriteJSONFile(dir string, r models.ScanResult) error {
 	config.Conf.Diff = false
 	w := LocalFileWriter{CurrentDir: dir}
 	if err := w.Write(r); err != nil {
-		return fmt.Errorf("Failed to write summary report: %s", err)
+		return xerrors.Errorf("Failed to write summary report: %w", err)
 	}
 	config.Conf.FormatJSON = before
 	config.Conf.Diff = beforeDiff
@@ -492,7 +545,7 @@ var jsonDirPattern = regexp.MustCompile(
 func ListValidJSONDirs() (dirs []string, err error) {
 	var dirInfo []os.FileInfo
 	if dirInfo, err = ioutil.ReadDir(config.Conf.ResultsDir); err != nil {
-		err = fmt.Errorf("Failed to read %s: %s",
+		err = xerrors.Errorf("Failed to read %s: %w",
 			config.Conf.ResultsDir, err)
 		return
 	}
@@ -530,20 +583,20 @@ func JSONDir(args []string) (string, error) {
 			}
 		}

-		return "", fmt.Errorf("Invalid path: %s", path)
+		return "", xerrors.Errorf("Invalid path: %s", path)
 	}

 	// PIPE
 	if config.Conf.Pipe {
 		bytes, err := ioutil.ReadAll(os.Stdin)
 		if err != nil {
-			return "", fmt.Errorf("Failed to read stdin: %s", err)
+			return "", xerrors.Errorf("Failed to read stdin: %w", err)
 		}
 		fields := strings.Fields(string(bytes))
 		if 0 < len(fields) {
 			return filepath.Join(config.Conf.ResultsDir, fields[0]), nil
 		}
-		return "", fmt.Errorf("Stdin is invalid: %s", string(bytes))
+		return "", xerrors.Errorf("Stdin is invalid: %s", string(bytes))
 	}

 	// returns latest dir when no args or no PIPE
@@ -551,7 +604,7 @@ func JSONDir(args []string) (string, error) {
 		return "", err
 	}
 	if len(dirs) == 0 {
-		return "", fmt.Errorf("No results under %s",
+		return "", xerrors.Errorf("No results under %s",
 			config.Conf.ResultsDir)
 	}
 	return dirs[0], nil
@@ -561,7 +614,7 @@ func JSONDir(args []string) (string, error) {
 func LoadScanResults(jsonDir string) (results models.ScanResults, err error) {
 	var files []os.FileInfo
 	if files, err = ioutil.ReadDir(jsonDir); err != nil {
-		return nil, fmt.Errorf("Failed to read %s: %s", jsonDir, err)
+		return nil, xerrors.Errorf("Failed to read %s: %w", jsonDir, err)
 	}
 	for _, f := range files {
 		if filepath.Ext(f.Name()) != ".json" || strings.HasSuffix(f.Name(), "_diff.json") {
@@ -576,7 +629,7 @@ func LoadScanResults(jsonDir string) (results models.ScanResults, err error) {
 		results = append(results, *r)
 	}
 	if len(results) == 0 {
-		return nil, fmt.Errorf("There is no json file under %s", jsonDir)
+		return nil, xerrors.Errorf("There is no json file under %s", jsonDir)
 	}
 	return
 }
@@ -588,11 +641,11 @@ func loadOneServerScanResult(jsonFile string) (*models.ScanResult, error) {
 		err  error
 	)
 	if data, err = ioutil.ReadFile(jsonFile); err != nil {
-		return nil, fmt.Errorf("Failed to read %s: %s", jsonFile, err)
+		return nil, xerrors.Errorf("Failed to read %s: %w", jsonFile, err)
 	}
 	result := &models.ScanResult{}
 	if err := json.Unmarshal(data, result); err != nil {
-		return nil, fmt.Errorf("Failed to parse %s: %s", jsonFile, err)
+		return nil, xerrors.Errorf("Failed to parse %s: %w", jsonFile, err)
 	}
 	return result, nil
 }
--- a/report/util_test.go
+++ b/report/util_test.go
@@ -192,13 +192,13 @@ func TestDiff(t *testing.T) {
 					ScannedCves: models.VulnInfos{
 						"CVE-2012-6702": {
 							CveID:            "CVE-2012-6702",
-							AffectedPackages: models.PackageStatuses{{Name: "libexpat1"}},
+							AffectedPackages: models.PackageFixStatuses{{Name: "libexpat1"}},
 							DistroAdvisories: []models.DistroAdvisory{},
 							CpeURIs:          []string{},
 						},
 						"CVE-2014-9761": {
 							CveID:            "CVE-2014-9761",
-							AffectedPackages: models.PackageStatuses{{Name: "libc-bin"}},
+							AffectedPackages: models.PackageFixStatuses{{Name: "libc-bin"}},
 							DistroAdvisories: []models.DistroAdvisory{},
 							CpeURIs:          []string{},
 						},
@@ -217,13 +217,13 @@ func TestDiff(t *testing.T) {
 					ScannedCves: models.VulnInfos{
 						"CVE-2012-6702": {
 							CveID:            "CVE-2012-6702",
-							AffectedPackages: models.PackageStatuses{{Name: "libexpat1"}},
+							AffectedPackages: models.PackageFixStatuses{{Name: "libexpat1"}},
 							DistroAdvisories: []models.DistroAdvisory{},
 							CpeURIs:          []string{},
 						},
 						"CVE-2014-9761": {
 							CveID:            "CVE-2014-9761",
-							AffectedPackages: models.PackageStatuses{{Name: "libc-bin"}},
+							AffectedPackages: models.PackageFixStatuses{{Name: "libc-bin"}},
 							DistroAdvisories: []models.DistroAdvisory{},
 							CpeURIs:          []string{},
 						},
@@ -254,7 +254,7 @@ func TestDiff(t *testing.T) {
 					ScannedCves: models.VulnInfos{
 						"CVE-2016-6662": {
 							CveID:            "CVE-2016-6662",
-							AffectedPackages: models.PackageStatuses{{Name: "mysql-libs"}},
+							AffectedPackages: models.PackageFixStatuses{{Name: "mysql-libs"}},
 							DistroAdvisories: []models.DistroAdvisory{},
 							CpeURIs:          []string{},
 						},
@@ -292,7 +292,7 @@ func TestDiff(t *testing.T) {
 				ScannedCves: models.VulnInfos{
 					"CVE-2016-6662": {
 						CveID:            "CVE-2016-6662",
-						AffectedPackages: models.PackageStatuses{{Name: "mysql-libs"}},
+						AffectedPackages: models.PackageFixStatuses{{Name: "mysql-libs"}},
 						DistroAdvisories: []models.DistroAdvisory{},
 						CpeURIs:          []string{},
 					},
@@ -348,7 +348,7 @@ func TestIsCveFixed(t *testing.T) {
 			in: In{
 				v: models.VulnInfo{
 					CveID: "CVE-2016-6662",
-					AffectedPackages: models.PackageStatuses{
+					AffectedPackages: models.PackageFixStatuses{
 						{
 							Name:        "mysql-libs",
 							NotFixedYet: false,
@@ -366,7 +366,7 @@ func TestIsCveFixed(t *testing.T) {
 					ScannedCves: models.VulnInfos{
 						"CVE-2016-6662": {
 							CveID: "CVE-2016-6662",
-							AffectedPackages: models.PackageStatuses{
+							AffectedPackages: models.PackageFixStatuses{
 								{
 									Name:        "mysql-libs",
 									NotFixedYet: true,
@@ -389,7 +389,7 @@ func TestIsCveFixed(t *testing.T) {
 			in: In{
 				v: models.VulnInfo{
 					CveID: "CVE-2016-6662",
-					AffectedPackages: models.PackageStatuses{
+					AffectedPackages: models.PackageFixStatuses{
 						{
 							Name:        "mysql-libs",
 							NotFixedYet: true,
@@ -407,7 +407,7 @@ func TestIsCveFixed(t *testing.T) {
 					ScannedCves: models.VulnInfos{
 						"CVE-2016-6662": {
 							CveID: "CVE-2016-6662",
-							AffectedPackages: models.PackageStatuses{
+							AffectedPackages: models.PackageFixStatuses{
 								{
 									Name:        "mysql-libs",
 									NotFixedYet: true,
--- a/scan/alpine.go
+++ b/scan/alpine.go
@@ -19,12 +19,12 @@ package scan

 import (
 	"bufio"
-	"fmt"
 	"strings"

 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -66,7 +66,7 @@ func detectAlpine(c config.ServerInfo) (itsMe bool, os osTypeInterface) {

 func (o *alpine) checkScanMode() error {
 	if o.getServerInfo().Mode.IsOffline() {
-		return fmt.Errorf("Remove offline scan mode, Alpine needs internet connection")
+		return xerrors.New("Remove offline scan mode, Alpine needs internet connection")
 	}
 	return nil
 }
@@ -84,7 +84,7 @@ func (o *alpine) checkIfSudoNoPasswd() error {
 func (o *alpine) apkUpdate() error {
 	r := o.exec("apk update", noSudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to SSH: %s", r)
+		return xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return nil
 }
@@ -143,7 +143,7 @@ func (o *alpine) scanInstalledPackages() (models.Packages, error) {
 	cmd := util.PrependProxyEnv("apk info -v")
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return o.parseApkInfo(r.Stdout)
 }
@@ -160,7 +160,7 @@ func (o *alpine) parseApkInfo(stdout string) (models.Packages, error) {
 		line := scanner.Text()
 		ss := strings.Split(line, "-")
 		if len(ss) < 3 {
-			return nil, fmt.Errorf("Failed to parse apk info -v: %s", line)
+			return nil, xerrors.Errorf("Failed to parse apk info -v: %s", line)
 		}
 		name := strings.Join(ss[:len(ss)-2], "-")
 		packs[name] = models.Package{
@@ -175,7 +175,7 @@ func (o *alpine) scanUpdatablePackages() (models.Packages, error) {
 	cmd := util.PrependProxyEnv("apk version")
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return o.parseApkVersion(r.Stdout)
 }
--- a/scan/amazon.go
+++ b/scan/amazon.go
@@ -1,11 +1,10 @@
 package scan

 import (
-	"fmt"
-
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -33,7 +32,7 @@ func newAmazon(c config.ServerInfo) *amazon {

 func (o *amazon) checkScanMode() error {
 	if o.getServerInfo().Mode.IsOffline() {
-		return fmt.Errorf("Remove offline scan mode, Amazon needs internet connection")
+		return xerrors.New("Remove offline scan mode, Amazon needs internet connection")
 	}
 	return nil
 }
@@ -46,7 +45,7 @@ func (o *amazon) checkDeps() error {
 	} else if o.getServerInfo().Mode.IsDeep() {
 		return o.execCheckDeps(o.depsDeep())
 	}
-	return fmt.Errorf("Unknown scan mode")
+	return xerrors.New("Unknown scan mode")
 }

 func (o *amazon) depsFast() []string {
--- a/scan/base.go
+++ b/scan/base.go
@@ -19,6 +19,7 @@ package scan

 import (
 	"bufio"
+	"encoding/json"
 	"fmt"
 	"net"
 	"regexp"
@@ -28,6 +29,7 @@ import (
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/sirupsen/logrus"
+	"golang.org/x/xerrors"
 )

 type base struct {
@@ -35,6 +37,7 @@ type base struct {
 	Distro     config.Distro
 	Platform   models.Platform
 	osPackages
+	WordPress *models.WordPressPackages

 	log  *logrus.Entry
 	errs []error
@@ -79,7 +82,7 @@ func (l *base) getPlatform() models.Platform {
 func (l *base) runningKernel() (release, version string, err error) {
 	r := l.exec("uname -r", noSudo)
 	if !r.isSuccess() {
-		return "", "", fmt.Errorf("Failed to SSH: %s", r)
+		return "", "", xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	release = strings.TrimSpace(r.Stdout)

@@ -87,7 +90,7 @@ func (l *base) runningKernel() (release, version string, err error) {
 	case config.Debian:
 		r := l.exec("uname -a", noSudo)
 		if !r.isSuccess() {
-			return "", "", fmt.Errorf("Failed to SSH: %s", r)
+			return "", "", xerrors.Errorf("Failed to SSH: %s", r)
 		}
 		ss := strings.Fields(r.Stdout)
 		if 6 < len(ss) {
@@ -118,7 +121,7 @@ func (l *base) allContainers() (containers []config.Container, err error) {
 		}
 		return l.parseLxcPs(stdout)
 	default:
-		return containers, fmt.Errorf(
+		return containers, xerrors.Errorf(
 			"Not supported yet: %s", l.ServerInfo.ContainerType)
 	}
 }
@@ -144,7 +147,7 @@ func (l *base) runningContainers() (containers []config.Container, err error) {
 		}
 		return l.parseLxcPs(stdout)
 	default:
-		return containers, fmt.Errorf(
+		return containers, xerrors.Errorf(
 			"Not supported yet: %s", l.ServerInfo.ContainerType)
 	}
 }
@@ -170,7 +173,7 @@ func (l *base) exitedContainers() (containers []config.Container, err error) {
 		}
 		return l.parseLxcPs(stdout)
 	default:
-		return containers, fmt.Errorf(
+		return containers, xerrors.Errorf(
 			"Not supported yet: %s", l.ServerInfo.ContainerType)
 	}
 }
@@ -179,7 +182,7 @@ func (l *base) dockerPs(option string) (string, error) {
 	cmd := fmt.Sprintf("docker ps %s", option)
 	r := l.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return "", fmt.Errorf("Failed to SSH: %s", r)
+		return "", xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return r.Stdout, nil
 }
@@ -188,7 +191,7 @@ func (l *base) lxdPs(option string) (string, error) {
 	cmd := fmt.Sprintf("lxc list %s", option)
 	r := l.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return "", fmt.Errorf("failed to SSH: %s", r)
+		return "", xerrors.Errorf("failed to SSH: %s", r)
 	}
 	return r.Stdout, nil
 }
@@ -197,7 +200,7 @@ func (l *base) lxcPs(option string) (string, error) {
 	cmd := fmt.Sprintf("lxc-ls %s 2>/dev/null", option)
 	r := l.exec(cmd, sudo)
 	if !r.isSuccess() {
-		return "", fmt.Errorf("failed to SSH: %s", r)
+		return "", xerrors.Errorf("failed to SSH: %s", r)
 	}
 	return r.Stdout, nil
 }
@@ -210,7 +213,7 @@ func (l *base) parseDockerPs(stdout string) (containers []config.Container, err
 			break
 		}
 		if len(fields) != 3 {
-			return containers, fmt.Errorf("Unknown format: %s", line)
+			return containers, xerrors.Errorf("Unknown format: %s", line)
 		}
 		containers = append(containers, config.Container{
 			ContainerID: fields[0],
@@ -232,7 +235,7 @@ func (l *base) parseLxdPs(stdout string) (containers []config.Container, err err
 			break
 		}
 		if len(fields) != 1 {
-			return containers, fmt.Errorf("Unknown format: %s", line)
+			return containers, xerrors.Errorf("Unknown format: %s", line)
 		}
 		containers = append(containers, config.Container{
 			ContainerID: fields[0],
@@ -265,7 +268,7 @@ func (l *base) ip() ([]string, []string, error) {
 	// 2: eth0    inet6 fe80::5054:ff:fe2a:864c/64 scope link \       valid_lft forever preferred_lft forever
 	r := l.exec("/sbin/ip -o addr", noSudo)
 	if !r.isSuccess() {
-		return nil, nil, fmt.Errorf("Failed to detect IP address: %v", r)
+		return nil, nil, xerrors.Errorf("Failed to detect IP address: %v", r)
 	}
 	ipv4Addrs, ipv6Addrs := l.parseIP(r.Stdout)
 	return ipv4Addrs, ipv6Addrs, nil
@@ -358,7 +361,7 @@ func (l *base) detectRunningOnAws() (ok bool, instanceID string, err error) {
 			return false, "", nil
 		}
 	}
-	return false, "", fmt.Errorf(
+	return false, "", xerrors.Errorf(
 		"Failed to curl or wget to AWS instance metadata on %s. container: %s",
 		l.ServerInfo.ServerName, l.ServerInfo.Container.Name)
 }
@@ -388,21 +391,23 @@ func (l *base) convertToModel() models.ScanResult {
 	}

 	return models.ScanResult{
-		JSONVersion:   models.JSONVersion,
-		ServerName:    l.ServerInfo.ServerName,
-		ScannedAt:     time.Now(),
-		Family:        l.Distro.Family,
-		Release:       l.Distro.Release,
-		Container:     container,
-		Platform:      l.Platform,
-		IPv4Addrs:     l.ServerInfo.IPv4Addrs,
-		IPv6Addrs:     l.ServerInfo.IPv6Addrs,
-		ScannedCves:   l.VulnInfos,
-		RunningKernel: l.Kernel,
-		Packages:      l.Packages,
-		SrcPackages:   l.SrcPackages,
-		Optional:      l.ServerInfo.Optional,
-		Errors:        errs,
+		JSONVersion:       models.JSONVersion,
+		ServerName:        l.ServerInfo.ServerName,
+		ScannedAt:         time.Now(),
+		ScanMode:          l.ServerInfo.Mode.String(),
+		Family:            l.Distro.Family,
+		Release:           l.Distro.Release,
+		Container:         container,
+		Platform:          l.Platform,
+		IPv4Addrs:         l.ServerInfo.IPv4Addrs,
+		IPv6Addrs:         l.ServerInfo.IPv6Addrs,
+		ScannedCves:       l.VulnInfos,
+		RunningKernel:     l.Kernel,
+		Packages:          l.Packages,
+		SrcPackages:       l.SrcPackages,
+		WordPressPackages: l.WordPress,
+		Optional:          l.ServerInfo.Optional,
+		Errors:            errs,
 	}
 }

@@ -426,7 +431,7 @@ func (l *base) detectInitSystem() (string, error) {
 	f = func(cmd string) (string, error) {
 		r := l.exec(cmd, sudo)
 		if !r.isSuccess() {
-			return "", fmt.Errorf("Failed to stat %s: %s", cmd, r)
+			return "", xerrors.Errorf("Failed to stat %s: %s", cmd, r)
 		}
 		scanner := bufio.NewScanner(strings.NewReader(r.Stdout))
 		scanner.Scan()
@@ -448,7 +453,7 @@ func (l *base) detectInitSystem() (string, error) {
 			}
 			return sysVinit, nil
 		}
-		return "", fmt.Errorf("Failed to detect a init system: %s", line)
+		return "", xerrors.Errorf("Failed to detect a init system: %s", line)
 	}
 	return f("stat /proc/1/exe")
 }
@@ -457,7 +462,7 @@ func (l *base) detectServiceName(pid string) (string, error) {
 	cmd := fmt.Sprintf("systemctl status --quiet --no-pager %s", pid)
 	r := l.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return "", fmt.Errorf("Failed to stat %s: %s", cmd, r)
+		return "", xerrors.Errorf("Failed to stat %s: %s", cmd, r)
 	}
 	return l.parseSystemctlStatus(r.Stdout), nil
 }
@@ -472,3 +477,125 @@ func (l *base) parseSystemctlStatus(stdout string) string {
 	}
 	return ss[1]
 }
+
+func (l *base) scanWordPress() (err error) {
+	wpOpts := []string{l.ServerInfo.WordPress.OSUser,
+		l.ServerInfo.WordPress.DocRoot,
+		l.ServerInfo.WordPress.CmdPath,
+		l.ServerInfo.WordPress.WPVulnDBToken,
+	}
+	var isScanWp, hasEmptyOpt bool
+	for _, opt := range wpOpts {
+		if opt != "" {
+			isScanWp = true
+			break
+		} else {
+			hasEmptyOpt = true
+		}
+	}
+	if !isScanWp {
+		return nil
+	}
+
+	if hasEmptyOpt {
+		return xerrors.Errorf("%s has empty WordPress opts: %s",
+			l.getServerInfo().GetServerName(), wpOpts)
+	}
+
+	cmd := fmt.Sprintf("sudo -u %s -i -- %s cli version",
+		l.ServerInfo.WordPress.OSUser,
+		l.ServerInfo.WordPress.CmdPath)
+	if r := exec(l.ServerInfo, cmd, noSudo); !r.isSuccess() {
+		l.ServerInfo.WordPress.WPVulnDBToken = "secret"
+		return xerrors.Errorf("Failed to exec `%s`. Check the OS user, command path of wp-cli, DocRoot and permission: %#v", cmd, l.ServerInfo.WordPress)
+	}
+
+	wp, err := l.detectWordPress()
+	if err != nil {
+		return xerrors.Errorf("Failed to scan wordpress: %w", err)
+	}
+	l.WordPress = wp
+	return nil
+}
+
+func (l *base) detectWordPress() (*models.WordPressPackages, error) {
+	ver, err := l.detectWpCore()
+	if err != nil {
+		return nil, err
+	}
+
+	themes, err := l.detectWpThemes()
+	if err != nil {
+		return nil, err
+	}
+
+	plugins, err := l.detectWpPlugins()
+	if err != nil {
+		return nil, err
+	}
+
+	pkgs := models.WordPressPackages{
+		models.WpPackage{
+			Name:    models.WPCore,
+			Version: ver,
+			Type:    models.WPCore,
+		},
+	}
+	pkgs = append(pkgs, themes...)
+	pkgs = append(pkgs, plugins...)
+	return &pkgs, nil
+}
+
+func (l *base) detectWpCore() (string, error) {
+	cmd := fmt.Sprintf("sudo -u %s -i -- %s core version --path=%s",
+		l.ServerInfo.WordPress.OSUser,
+		l.ServerInfo.WordPress.CmdPath,
+		l.ServerInfo.WordPress.DocRoot)
+
+	r := exec(l.ServerInfo, cmd, noSudo)
+	if !r.isSuccess() {
+		return "", xerrors.Errorf("Failed to get wp core version: %s", r)
+	}
+	return strings.TrimSpace(r.Stdout), nil
+}
+
+func (l *base) detectWpThemes() ([]models.WpPackage, error) {
+	cmd := fmt.Sprintf("sudo -u %s -i -- %s theme list --path=%s --format=json",
+		l.ServerInfo.WordPress.OSUser,
+		l.ServerInfo.WordPress.CmdPath,
+		l.ServerInfo.WordPress.DocRoot)
+
+	var themes []models.WpPackage
+	r := exec(l.ServerInfo, cmd, noSudo)
+	if !r.isSuccess() {
+		return nil, xerrors.Errorf("Failed to get a list of WordPress plugins: %s", r)
+	}
+	err := json.Unmarshal([]byte(r.Stdout), &themes)
+	if err != nil {
+		return nil, xerrors.Errorf("Failed to unmarshal wp theme list: %w", cmd, err)
+	}
+	for i := range themes {
+		themes[i].Type = models.WPTheme
+	}
+	return themes, nil
+}
+
+func (l *base) detectWpPlugins() ([]models.WpPackage, error) {
+	cmd := fmt.Sprintf("sudo -u %s -i -- %s plugin list --path=%s --format=json",
+		l.ServerInfo.WordPress.OSUser,
+		l.ServerInfo.WordPress.CmdPath,
+		l.ServerInfo.WordPress.DocRoot)
+
+	var plugins []models.WpPackage
+	r := exec(l.ServerInfo, cmd, noSudo)
+	if !r.isSuccess() {
+		return nil, xerrors.Errorf("Failed to wp plugin list: %s", r)
+	}
+	if err := json.Unmarshal([]byte(r.Stdout), &plugins); err != nil {
+		return nil, err
+	}
+	for i := range plugins {
+		plugins[i].Type = models.WPPlugin
+	}
+	return plugins, nil
+}
--- a/scan/debian.go
+++ b/scan/debian.go
@@ -30,6 +30,7 @@ import (
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
 	version "github.com/knqyf263/go-deb-version"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -62,7 +63,7 @@ func detectDebian(c config.ServerInfo) (itsMe bool, deb osTypeInterface, err err
 			return false, deb, nil
 		}
 		if r.ExitStatus == 255 {
-			return false, deb, fmt.Errorf("Unable to connect via SSH. Scan with -vvv option to print SSH debugging messages and check SSH settings. If you have never SSH to the host to be scanned, SSH to the host before scanning in order to add the HostKey. %s@%s port: %s\n%s", c.User, c.Host, c.Port, r)
+			return false, deb, xerrors.Errorf("Unable to connect via SSH. Scan with -vvv option to print SSH debugging messages and check SSH settings. If you have never SSH to the host to be scanned, SSH to the host before scanning in order to add the HostKey. %s@%s port: %s\n%s", c.User, c.Host, c.Port, r)
 		}
 		util.Log.Debugf("Not Debian like Linux. %s", r)
 		return false, deb, nil
@@ -160,7 +161,7 @@ func (o *debian) checkIfSudoNoPasswd() error {
 		r := o.exec(cmd, sudo)
 		if !r.isSuccess() {
 			o.log.Errorf("sudo error on %s", r)
-			return fmt.Errorf("Failed to sudo: %s", r)
+			return xerrors.Errorf("Failed to sudo: %s", r)
 		}
 	}

@@ -171,7 +172,7 @@ func (o *debian) checkIfSudoNoPasswd() error {
 		r := o.exec(cmd, sudo)
 		if !r.isSuccess() {
 			o.log.Errorf("sudo error on %s", r)
-			return fmt.Errorf("Failed to sudo: %s", r)
+			return xerrors.Errorf("Failed to sudo: %s", r)
 		}
 	}

@@ -230,7 +231,7 @@ func (o *debian) checkDeps() error {
 			}
 			dep.logFunc(msg)
 			if dep.required {
-				return fmt.Errorf(msg)
+				return xerrors.New(msg)
 			}
 			continue
 		}
@@ -242,7 +243,7 @@ func (o *debian) checkDeps() error {
 			}
 			dep.logFunc(msg)
 			if dep.required {
-				return fmt.Errorf(msg)
+				return xerrors.New(msg)
 			}
 		}

@@ -323,7 +324,7 @@ func (o *debian) rebootRequired() (bool, error) {
 	case 1:
 		return false, nil
 	default:
-		return false, fmt.Errorf("Failed to check reboot reauired: %s", r)
+		return false, xerrors.Errorf("Failed to check reboot reauired: %s", r)
 	}
 }

@@ -333,7 +334,7 @@ func (o *debian) scanInstalledPackages() (models.Packages, models.Packages, mode
 	updatable := models.Packages{}
 	r := o.exec(dpkgQuery, noSudo)
 	if !r.isSuccess() {
-		return nil, nil, nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, nil, nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}

 	installed, srcPacks, err := o.parseInstalledPackages(r.Stdout)
@@ -364,7 +365,7 @@ func (o *debian) scanInstalledPackages() (models.Packages, models.Packages, mode
 	// Fill the candidate versions of upgradable packages
 	err = o.fillCandidateVersion(updatable)
 	if err != nil {
-		return nil, nil, nil, fmt.Errorf("Failed to fill candidate versions. err: %s", err)
+		return nil, nil, nil, xerrors.Errorf("Failed to fill candidate versions. err: %s", err)
 	}
 	installed.MergeNewVersion(updatable)

@@ -383,7 +384,7 @@ func (o *debian) parseInstalledPackages(stdout string) (models.Packages, models.
 		if trimmed := strings.TrimSpace(line); len(trimmed) != 0 {
 			name, status, version, srcName, srcVersion, err := o.parseScannedPackagesLine(trimmed)
 			if err != nil || len(status) < 2 {
-				return nil, nil, fmt.Errorf(
+				return nil, nil, xerrors.Errorf(
 					"Debian: Failed to parse package line: %s", line)
 			}

@@ -448,14 +449,14 @@ func (o *debian) parseScannedPackagesLine(line string) (name, status, version, s
 		return
 	}

-	return "", "", "", "", "", fmt.Errorf("Unknown format: %s", line)
+	return "", "", "", "", "", xerrors.Errorf("Unknown format: %s", line)
 }

 func (o *debian) aptGetUpdate() error {
 	o.log.Infof("apt-get update...")
 	cmd := util.PrependProxyEnv("apt-get update")
 	if r := o.exec(cmd, sudo); !r.isSuccess() {
-		return fmt.Errorf("Failed to apt-get update: %s", r)
+		return xerrors.Errorf("Failed to apt-get update: %s", r)
 	}
 	return nil
 }
@@ -477,7 +478,7 @@ func (o *debian) scanUnsecurePackages(updatable models.Packages) (models.VulnInf
 	// Collect CVE information of upgradable packages
 	vulnInfos, err := o.scanChangelogs(updatable, meta)
 	if err != nil {
-		return nil, fmt.Errorf("Failed to scan unsecure packages. err: %s", err)
+		return nil, xerrors.Errorf("Failed to scan unsecure packages. err: %s", err)
 	}

 	return vulnInfos, nil
@@ -487,7 +488,7 @@ func (o *debian) ensureChangelogCache(current cache.Meta) (*cache.Meta, error) {
 	// Search from cache
 	cached, found, err := cache.DB.GetMeta(current.Name)
 	if err != nil {
-		return nil, fmt.Errorf(
+		return nil, xerrors.Errorf(
 			"Failed to get meta. Please remove cache.db and then try again. err: %s", err)
 	}

@@ -495,7 +496,7 @@ func (o *debian) ensureChangelogCache(current cache.Meta) (*cache.Meta, error) {
 		o.log.Debugf("Not found in meta: %s", current.Name)
 		err = cache.DB.EnsureBuckets(current)
 		if err != nil {
-			return nil, fmt.Errorf("Failed to ensure buckets. err: %s", err)
+			return nil, xerrors.Errorf("Failed to ensure buckets. err: %s", err)
 		}
 		return &current, nil
 	}
@@ -505,7 +506,7 @@ func (o *debian) ensureChangelogCache(current cache.Meta) (*cache.Meta, error) {
 		o.log.Debugf("Need to refesh meta: %s", current.Name)
 		err = cache.DB.EnsureBuckets(current)
 		if err != nil {
-			return nil, fmt.Errorf("Failed to ensure buckets. err: %s", err)
+			return nil, xerrors.Errorf("Failed to ensure buckets. err: %s", err)
 		}
 		return &current, nil

@@ -526,19 +527,20 @@ func (o *debian) fillCandidateVersion(updatables models.Packages) (err error) {
 	cmd := fmt.Sprintf("LANGUAGE=en_US.UTF-8 apt-cache policy %s", strings.Join(names, " "))
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to SSH: %s", r)
+		return xerrors.Errorf("Failed to SSH: %s", r)
 	}
-	packChangelog := o.splitAptCachePolicy(r.Stdout)
-	for k, v := range packChangelog {
+	packAptPolicy := o.splitAptCachePolicy(r.Stdout)
+	for k, v := range packAptPolicy {
 		ver, err := o.parseAptCachePolicy(v, k)
 		if err != nil {
-			return fmt.Errorf("Failed to parse %s", err)
+			return xerrors.Errorf("Failed to parse %w", err)
 		}
 		pack, ok := updatables[k]
 		if !ok {
-			return fmt.Errorf("Not found: %s", k)
+			return xerrors.Errorf("Not found: %s", k)
 		}
 		pack.NewVersion = ver.Candidate
+		pack.Repository = ver.Repo
 		updatables[k] = pack
 	}
 	return
@@ -550,7 +552,7 @@ func (o *debian) getUpdatablePackNames() (packNames []string, err error) {
 	if r.isSuccess(0, 1) {
 		return o.parseAptGetUpgrade(r.Stdout)
 	}
-	return packNames, fmt.Errorf(
+	return packNames, xerrors.Errorf(
 		"Failed to %s. status: %d, stdout: %s, stderr: %s",
 		cmd, r.ExitStatus, r.Stdout, r.Stderr)
 }
@@ -572,11 +574,11 @@ func (o *debian) parseAptGetUpgrade(stdout string) (updatableNames []string, err
 		if len(result) == 2 {
 			nUpdatable, err := strconv.Atoi(result[1])
 			if err != nil {
-				return nil, fmt.Errorf(
+				return nil, xerrors.Errorf(
 					"Failed to scan upgradable packages number. line: %s", line)
 			}
 			if nUpdatable != len(updatableNames) {
-				return nil, fmt.Errorf(
+				return nil, xerrors.Errorf(
 					"Failed to scan upgradable packages, expected: %s, detected: %d",
 					result[1], len(updatableNames))
 			}
@@ -592,7 +594,7 @@ func (o *debian) parseAptGetUpgrade(stdout string) (updatableNames []string, err
 	}
 	if !stopLineFound {
 		// There are upgrades, but not found the stop line.
-		return nil, fmt.Errorf("Failed to scan upgradable packages")
+		return nil, xerrors.New("Failed to scan upgradable packages")
 	}
 	return
 }
@@ -676,11 +678,11 @@ func (o *debian) scanChangelogs(updatablePacks models.Packages, meta *cache.Meta
 		case err := <-errChan:
 			errs = append(errs, err)
 		case <-timeout:
-			errs = append(errs, fmt.Errorf("Timeout scanPackageCveIDs"))
+			errs = append(errs, xerrors.New("Timeout scanPackageCveIDs"))
 		}
 	}
 	if 0 < len(errs) {
-		return nil, fmt.Errorf("%v", errs)
+		return nil, xerrors.Errorf("errs: %w", errs)
 	}

 	var cveIDs []DetectedCveID
@@ -690,9 +692,9 @@ func (o *debian) scanChangelogs(updatablePacks models.Packages, meta *cache.Meta
 	o.log.Debugf("%d Cves are found. cves: %v", len(cveIDs), cveIDs)
 	vinfos := models.VulnInfos{}
 	for cveID, names := range cvePackages {
-		affected := models.PackageStatuses{}
+		affected := models.PackageFixStatuses{}
 		for _, n := range names {
-			affected = append(affected, models.PackageStatus{Name: n})
+			affected = append(affected, models.PackageFixStatus{Name: n})
 		}

 		vinfos[cveID.CveID] = models.VulnInfo{
@@ -763,7 +765,7 @@ func (o *debian) fetchParseChangelog(pack models.Package) ([]DetectedCveID, *mod
 		err := cache.DB.PutChangelog(
 			o.getServerInfo().GetServerName(), pack.Name, pack.Changelog.Contents)
 		if err != nil {
-			return nil, nil, fmt.Errorf("Failed to put changelog into cache")
+			return nil, nil, xerrors.New("Failed to put changelog into cache")
 		}
 	}

@@ -837,7 +839,7 @@ var cveRe = regexp.MustCompile(`(CVE-\d{4}-\d{4,})`)
 func (o *debian) parseChangelog(changelog, name, ver string, confidence models.Confidence) ([]DetectedCveID, *models.Package, error) {
 	installedVer, err := version.NewVersion(ver)
 	if err != nil {
-		return nil, nil, fmt.Errorf("Failed to parse installed version: %s, %s", ver, err)
+		return nil, nil, xerrors.Errorf("Failed to parse installed version: %s, err: %w", ver, err)
 	}
 	buf, cveIDs := []string{}, []string{}
 	scanner := bufio.NewScanner(strings.NewReader(changelog))
@@ -875,7 +877,7 @@ func (o *debian) parseChangelog(changelog, name, ver string, confidence models.C
 			Contents: "",
 			Method:   models.FailedToFindVersionInChangelog,
 		}
-		return nil, &pack, fmt.Errorf(
+		return nil, &pack, xerrors.Errorf(
 			"Failed to scan CVE IDs. The version is not in changelog. name: %s, version: %s",
 			name, ver)
 	}
@@ -909,27 +911,29 @@ func (o *debian) splitAptCachePolicy(stdout string) map[string]string {
 		lasti = i
 	}

-	packChangelog := map[string]string{}
+	packAptPolicy := map[string]string{}
 	for _, r := range splitted {
 		packName := r[:strings.Index(r, ":")]
-		packChangelog[packName] = r
+		packAptPolicy[packName] = r
 	}
-	return packChangelog
+	return packAptPolicy
 }

 type packCandidateVer struct {
 	Name      string
 	Installed string
 	Candidate string
+	Repo      string
 }

 // parseAptCachePolicy the stdout of parse pat-get cache policy
 func (o *debian) parseAptCachePolicy(stdout, name string) (packCandidateVer, error) {
 	ver := packCandidateVer{Name: name}
 	lines := strings.Split(stdout, "\n")
+	isRepoline := false
 	for _, line := range lines {
 		fields := strings.Fields(line)
-		if len(fields) != 2 {
+		if len(fields) < 2 {
 			continue
 		}
 		switch fields[0] {
@@ -937,12 +941,25 @@ func (o *debian) parseAptCachePolicy(stdout, name string) (packCandidateVer, err
 			ver.Installed = fields[1]
 		case "Candidate:":
 			ver.Candidate = fields[1]
-			return ver, nil
+			goto nextline
 		default:
 			// nop
 		}
+		if ver.Candidate != "" && strings.Contains(line, ver.Candidate) {
+			isRepoline = true
+			goto nextline
+		}
+
+		if isRepoline {
+			ss := strings.Split(strings.TrimSpace(line), " ")
+			if len(ss) == 5 {
+				ver.Repo = ss[2]
+				return ver, nil
+			}
+		}
+	nextline:
 	}
-	return ver, fmt.Errorf("Unknown Format: %s", stdout)
+	return ver, xerrors.Errorf("Unknown Format: %s", stdout)
 }

 func (o *debian) checkrestart() error {
@@ -955,7 +972,7 @@ func (o *debian) checkrestart() error {
 	cmd := "LANGUAGE=en_US.UTF-8 checkrestart"
 	r := o.exec(cmd, sudo)
 	if !r.isSuccess() {
-		return fmt.Errorf(
+		return xerrors.Errorf(
 			"Failed to %s. status: %d, stdout: %s, stderr: %s",
 			cmd, r.ExitStatus, r.Stdout, r.Stderr)
 	}
--- a/scan/debian_test.go
+++ b/scan/debian_test.go
@@ -530,6 +530,7 @@ func TestParseAptCachePolicy(t *testing.T) {
 				Name:      "openssl",
 				Installed: "1.0.2f-2ubuntu1",
 				Candidate: "1.0.2g-1ubuntu2",
+				Repo:      "xenial/main",
 			},
 		},
 		{
@@ -550,6 +551,7 @@ func TestParseAptCachePolicy(t *testing.T) {
 				Name:      "openssl",
 				Installed: "1.0.1f-1ubuntu2.16",
 				Candidate: "1.0.1f-1ubuntu2.17",
+				Repo:      "trusty-updates/main",
 			},
 		},
 		{
@@ -570,6 +572,7 @@ func TestParseAptCachePolicy(t *testing.T) {
 				Name:      "openssl",
 				Installed: "1.0.1-4ubuntu5.33",
 				Candidate: "1.0.1-4ubuntu5.34",
+				Repo:      "precise-updates/main",
 			},
 		},
 	}
--- a/scan/executil.go
+++ b/scan/executil.go
@@ -33,6 +33,7 @@ import (

 	"golang.org/x/crypto/ssh"
 	"golang.org/x/crypto/ssh/agent"
+	"golang.org/x/xerrors"

 	"github.com/cenkalti/backoff"
 	conf "github.com/future-architect/vuls/config"
@@ -124,7 +125,11 @@ func parallelExec(fn func(osTypeInterface) error, timeoutSec ...int) {
 			if len(s.getErrs()) == 0 {
 				successes = append(successes, s)
 			} else {
-				util.Log.Errorf("Error: %s, err: %s",
+				fmtstr := "Error on %s, err: %s"
+				if conf.Conf.Debug {
+					fmtstr = "Error: %s, err: %+v"
+				}
+				util.Log.Errorf(fmtstr,
 					s.getServerInfo().GetServerName(), s.getErrs())
 				errServers = append(errServers, s)
 			}
@@ -148,7 +153,7 @@ func parallelExec(fn func(osTypeInterface) error, timeoutSec ...int) {
 				msg := fmt.Sprintf("Timed out: %s",
 					s.getServerInfo().GetServerName())
 				util.Log.Errorf(msg)
-				s.setErrs([]error{fmt.Errorf(msg)})
+				s.setErrs([]error{xerrors.New(msg)})
 				errServers = append(errServers, s)
 			}
 		}
@@ -222,8 +227,8 @@ func sshExecNative(c conf.ServerInfo, cmd string, sudo bool) (result execResult)

 	var session *ssh.Session
 	if session, err = client.NewSession(); err != nil {
-		result.Error = fmt.Errorf(
-			"Failed to create a new session. servername: %s, err: %s",
+		result.Error = xerrors.Errorf(
+			"Failed to create a new session. servername: %s, err: %w",
 			c.ServerName, err)
 		result.ExitStatus = 999
 		return
@@ -237,8 +242,8 @@ func sshExecNative(c conf.ServerInfo, cmd string, sudo bool) (result execResult)
 		ssh.TTY_OP_OSPEED: 14400, // output speed = 14.4kbaud
 	}
 	if err = session.RequestPty("xterm", 400, 1000, modes); err != nil {
-		result.Error = fmt.Errorf(
-			"Failed to request for pseudo terminal. servername: %s, err: %s",
+		result.Error = xerrors.Errorf(
+			"Failed to request for pseudo terminal. servername: %s, err: %w",
 			c.ServerName, err)
 		result.ExitStatus = 999
 		return
@@ -462,7 +467,7 @@ func addKeyAuth(auths []ssh.AuthMethod, keypath string, keypassword string) ([]s
 	// get first pem block
 	block, _ := pem.Decode(pemBytes)
 	if block == nil {
-		return auths, fmt.Errorf("no key found in %s", keypath)
+		return auths, xerrors.Errorf("no key found in %s", keypath)
 	}

 	// handle plain and encrypted keyfiles
@@ -499,6 +504,6 @@ func parsePemBlock(block *pem.Block) (interface{}, error) {
 	case "DSA PRIVATE KEY":
 		return ssh.ParseDSAPrivateKey(block.Bytes)
 	default:
-		return nil, fmt.Errorf("Unsupported key type %q", block.Type)
+		return nil, xerrors.Errorf("Unsupported key type %q", block.Type)
 	}
 }
--- a/scan/freebsd.go
+++ b/scan/freebsd.go
@@ -18,13 +18,13 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package scan

 import (
-	"fmt"
 	"net"
 	"strings"

 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -69,7 +69,7 @@ func detectFreebsd(c config.ServerInfo) (itsMe bool, bsd osTypeInterface) {

 func (o *bsd) checkScanMode() error {
 	if o.getServerInfo().Mode.IsOffline() {
-		return fmt.Errorf("Remove offline scan mode, FreeBSD needs internet connection")
+		return xerrors.New("Remove offline scan mode, FreeBSD needs internet connection")
 	}
 	return nil
 }
@@ -101,7 +101,7 @@ func (o *bsd) postScan() error {
 func (o *bsd) detectIPAddr() (err error) {
 	r := o.exec("/sbin/ifconfig", noSudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to detect IP address: %v", r)
+		return xerrors.Errorf("Failed to detect IP address: %v", r)
 	}
 	o.ServerInfo.IPv4Addrs, o.ServerInfo.IPv6Addrs = o.parseIfconfig(r.Stdout)
 	return nil
@@ -173,7 +173,7 @@ func (o *bsd) parseInstalledPackages(string) (models.Packages, models.SrcPackage
 func (o *bsd) rebootRequired() (bool, error) {
 	r := o.exec("freebsd-version -k", noSudo)
 	if !r.isSuccess() {
-		return false, fmt.Errorf("Failed to SSH: %s", r)
+		return false, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return o.Kernel.Release != strings.TrimSpace(r.Stdout), nil
 }
@@ -182,7 +182,7 @@ func (o *bsd) scanInstalledPackages() (models.Packages, error) {
 	cmd := util.PrependProxyEnv("pkg version -v")
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	return o.parsePkgVersion(r.Stdout), nil
 }
@@ -192,13 +192,13 @@ func (o *bsd) scanUnsecurePackages() (models.VulnInfos, error) {
 	cmd := "rm -f " + vulndbPath
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess(0) {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}

 	cmd = util.PrependProxyEnv("pkg audit -F -r -f " + vulndbPath)
 	r = o.exec(cmd, noSudo)
 	if !r.isSuccess(0, 1) {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	if r.ExitStatus == 0 {
 		// no vulnerabilities
@@ -214,7 +214,7 @@ func (o *bsd) scanUnsecurePackages() (models.VulnInfos, error) {
 		}
 		pack, found := o.Packages[name]
 		if !found {
-			return nil, fmt.Errorf("Vulnerable package: %s is not found", name)
+			return nil, xerrors.Errorf("Vulnerable package: %s is not found", name)
 		}
 		packAdtRslt = append(packAdtRslt, pkgAuditResult{
 			pack: pack,
@@ -247,9 +247,9 @@ func (o *bsd) scanUnsecurePackages() (models.VulnInfos, error) {
 			})
 		}

-		affected := models.PackageStatuses{}
+		affected := models.PackageFixStatuses{}
 		for name := range packs {
-			affected = append(affected, models.PackageStatus{
+			affected = append(affected, models.PackageFixStatus{
 				Name: name,
 			})
 		}
--- a/scan/redhatbase.go
+++ b/scan/redhatbase.go
@@ -27,6 +27,7 @@ import (
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"

 	ver "github.com/knqyf263/go-rpm-version"
 )
@@ -160,7 +161,7 @@ func (o *redhatBase) execCheckIfSudoNoPasswd(cmds []cmd) error {
 		r := o.exec(util.PrependProxyEnv(cmd), sudo)
 		if !r.isSuccess(c.expectedStatusCodes...) {
 			o.log.Errorf("Check sudo or proxy settings: %s", r)
-			return fmt.Errorf("Failed to sudo: %s", r)
+			return xerrors.Errorf("Failed to sudo: %s", r)
 		}
 	}
 	o.log.Infof("Sudo... Pass")
@@ -173,7 +174,7 @@ func (o *redhatBase) execCheckDeps(packNames []string) error {
 		if r := o.exec(cmd, noSudo); !r.isSuccess() {
 			msg := fmt.Sprintf("%s is not installed", name)
 			o.log.Errorf(msg)
-			return fmt.Errorf(msg)
+			return xerrors.New(msg)
 		}
 	}
 	o.log.Infof("Dependencies ... Pass")
@@ -191,12 +192,12 @@ func (o *redhatBase) preCure() error {
 func (o *redhatBase) postScan() error {
 	if o.isExecYumPS() {
 		if err := o.yumPS(); err != nil {
-			return fmt.Errorf("Failed to execute yum-ps: %s", err)
+			return xerrors.Errorf("Failed to execute yum-ps: %w", err)
 		}
 	}
 	if o.isExecNeedsRestarting() {
 		if err := o.needsRestarting(); err != nil {
-			return fmt.Errorf("Failed to execute need-restarting: %s", err)
+			return xerrors.Errorf("Failed to execute need-restarting: %w", err)
 		}
 	}
 	return nil
@@ -258,7 +259,7 @@ func (o *redhatBase) rebootRequired() (bool, error) {
 	r := o.exec("rpm -q --last kernel", noSudo)
 	scanner := bufio.NewScanner(strings.NewReader(r.Stdout))
 	if !r.isSuccess(0, 1) {
-		return false, fmt.Errorf("Failed to detect the last installed kernel : %v", r)
+		return false, xerrors.Errorf("Failed to detect the last installed kernel : %v", r)
 	}
 	if !r.isSuccess() || !scanner.Scan() {
 		return false, nil
@@ -280,7 +281,7 @@ func (o *redhatBase) scanInstalledPackages() (models.Packages, error) {

 	r := o.exec(rpmQa(o.Distro), noSudo)
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Scan packages failed: %s", r)
+		return nil, xerrors.Errorf("Scan packages failed: %s", r)
 	}
 	installed, _, err := o.parseInstalledPackages(r.Stdout)
 	if err != nil {
@@ -332,7 +333,7 @@ func (o *redhatBase) parseInstalledPackagesLine(line string) (models.Package, er
 	fields := strings.Fields(line)
 	if len(fields) != 5 {
 		return models.Package{},
-			fmt.Errorf("Failed to parse package line: %s", line)
+			xerrors.Errorf("Failed to parse package line: %s", line)
 	}
 	ver := ""
 	epoch := fields[1]
@@ -358,7 +359,7 @@ func (o *redhatBase) scanUpdatablePackages() (models.Packages, error) {

 	r := o.exec(util.PrependProxyEnv(cmd), o.sudo.repoquery())
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}

 	// Collect Updateble packages, installed, candidate version and repository.
@@ -393,7 +394,7 @@ func (o *redhatBase) parseUpdatablePacksLines(stdout string) (models.Packages, e
 func (o *redhatBase) parseUpdatablePacksLine(line string) (models.Package, error) {
 	fields := strings.Fields(line)
 	if len(fields) < 5 {
-		return models.Package{}, fmt.Errorf("Unknown format: %s, fields: %s", line, fields)
+		return models.Package{}, xerrors.Errorf("Unknown format: %s, fields: %s", line, fields)
 	}

 	ver := ""
@@ -562,7 +563,7 @@ func (o *redhatBase) getAvailableChangelogs(packNames []string) (map[string]stri

 	r := o.exec(util.PrependProxyEnv(cmd), o.sudo.yumChangelog())
 	if !r.isSuccess(0, 1) {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}

 	return o.divideChangelogsIntoEachPackages(r.Stdout), nil
@@ -723,7 +724,7 @@ func (o *redhatBase) getDiffChangelog(pack models.Package, availableChangelog st

 	if len(diff) == 0 || !found {
 		return availableChangelog,
-			fmt.Errorf("Failed to find the version in changelog: %s-%s-%s",
+			xerrors.Errorf("Failed to find the version in changelog: %s-%s-%s",
 				pack.Name, pack.Version, pack.Release)
 	}
 	return strings.TrimSpace(strings.Join(diff, "\n")), nil
@@ -760,12 +761,12 @@ func (o *redhatBase) scanChangelogs(updatable models.Packages) (models.VulnInfos
 	for name, cveIDs := range packCveIDs {
 		for _, cid := range cveIDs {
 			if v, ok := vinfos[cid]; ok {
-				v.AffectedPackages = append(v.AffectedPackages, models.PackageStatus{Name: name})
+				v.AffectedPackages = append(v.AffectedPackages, models.PackageFixStatus{Name: name})
 				vinfos[cid] = v
 			} else {
 				vinfos[cid] = models.VulnInfo{
 					CveID:            cid,
-					AffectedPackages: models.PackageStatuses{{Name: name}},
+					AffectedPackages: models.PackageFixStatuses{{Name: name}},
 					Confidences:      models.Confidences{models.ChangelogExactMatch},
 				}
 			}
@@ -784,14 +785,14 @@ type distroAdvisoryCveIDs struct {
 func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos, error) {
 	if o.Distro.Family == config.CentOS {
 		// CentOS has no security channel.
-		return nil, fmt.Errorf(
+		return nil, xerrors.New(
 			"yum updateinfo is not suppported on CentOS")
 	}

 	// get advisoryID(RHSA, ALAS, ELSA) - package name,version
 	major, err := (o.Distro.MajorVersion())
 	if err != nil {
-		return nil, fmt.Errorf("Not implemented yet: %s, err: %s", o.Distro, err)
+		return nil, xerrors.Errorf("Not implemented yet: %s, err: %w", o.Distro, err)
 	}

 	var cmd string
@@ -799,7 +800,7 @@ func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos,
 		cmd = "yum repolist --color=never"
 		r := o.exec(util.PrependProxyEnv(cmd), o.sudo.yumRepolist())
 		if !r.isSuccess() {
-			return nil, fmt.Errorf("Failed to SSH: %s", r)
+			return nil, xerrors.Errorf("Failed to SSH: %s", r)
 		}
 	}

@@ -813,7 +814,7 @@ func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos,
 	}
 	r := o.exec(util.PrependProxyEnv(cmd), o.sudo.yumUpdateInfo())
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	advIDPackNamesList, err := o.parseYumUpdateinfoListAvailable(r.Stdout)

@@ -823,7 +824,7 @@ func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos,
 		for _, packName := range advIDPackNames.PackNames {
 			pack, found := updatable[packName]
 			if !found {
-				return nil, fmt.Errorf(
+				return nil, xerrors.Errorf(
 					"Package not found. pack: %#v", packName)
 			}
 			packages[pack.Name] = pack
@@ -843,7 +844,7 @@ func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos,
 	}
 	r = o.exec(util.PrependProxyEnv(cmd), o.sudo.yumUpdateInfo())
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to SSH: %s", r)
+		return nil, xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	advisoryCveIDsList, err := o.parseYumUpdateinfo(r.Stdout)
 	if err != nil {
@@ -863,13 +864,13 @@ func (o *redhatBase) scanUsingYum(updatable models.Packages) (models.VulnInfos,
 				packs := dict[advIDCveIDs.DistroAdvisory.AdvisoryID]
 				for _, pack := range packs {
 					vinfo.AffectedPackages = append(vinfo.AffectedPackages,
-						models.PackageStatus{Name: pack.Name})
+						models.PackageFixStatus{Name: pack.Name})
 				}
 			} else {
 				packs := dict[advIDCveIDs.DistroAdvisory.AdvisoryID]
-				affected := models.PackageStatuses{}
+				affected := models.PackageFixStatuses{}
 				for _, p := range packs {
-					affected = append(affected, models.PackageStatus{Name: p.Name})
+					affected = append(affected, models.PackageFixStatus{Name: p.Name})
 				}
 				vinfo = models.VulnInfo{
 					CveID:            cveID,
@@ -931,7 +932,7 @@ func (o *redhatBase) parseYumUpdateinfo(stdout string) (result []distroAdvisoryC
 			switch o.Distro.Family {
 			case config.CentOS:
 				// CentOS has no security channel.
-				return result, fmt.Errorf(
+				return result, xerrors.New(
 					"yum updateinfo is not suppported on CentOS")
 			case config.RedHat, config.Amazon, config.Oracle:
 				// nop
@@ -1118,7 +1119,7 @@ func (o *redhatBase) parseYumUpdateinfoListAvailable(stdout string) (advisoryIDP

 		fields := strings.Fields(line)
 		if len(fields) != 3 {
-			return []advisoryIDPacks{}, fmt.Errorf(
+			return []advisoryIDPacks{}, xerrors.Errorf(
 				"Unknown format. line: %s", line)
 		}

@@ -1151,21 +1152,21 @@ func (o *redhatBase) yumPS() error {
 	cmd := "LANGUAGE=en_US.UTF-8 yum info yum"
 	r := o.exec(util.PrependProxyEnv(cmd), noSudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to SSH: %s", r)
+		return xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	if !o.checkYumPsInstalled(r.Stdout) {
 		switch o.Distro.Family {
 		case config.RedHat, config.Oracle:
 			return nil
 		default:
-			return fmt.Errorf("yum-plugin-ps is not installed")
+			return xerrors.New("yum-plugin-ps is not installed")
 		}
 	}

 	cmd = "LANGUAGE=en_US.UTF-8 yum -q ps all --color=never"
 	r = o.exec(util.PrependProxyEnv(cmd), sudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to SSH: %s", r)
+		return xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	packs := o.parseYumPS(r.Stdout)
 	for name, pack := range packs {
@@ -1260,7 +1261,7 @@ func (o *redhatBase) needsRestarting() error {
 	cmd := "LANGUAGE=en_US.UTF-8 needs-restarting"
 	r := o.exec(cmd, sudo)
 	if !r.isSuccess() {
-		return fmt.Errorf("Failed to SSH: %s", r)
+		return xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	procs := o.parseNeedsRestarting(r.Stdout)
 	for _, proc := range procs {
@@ -1335,7 +1336,7 @@ func (o *redhatBase) procPathToFQPN(execCommand string) (string, error) {
 	cmd := `LANGUAGE=en_US.UTF-8 rpm -qf --queryformat "%{NAME}-%{EPOCH}:%{VERSION}-%{RELEASE}.%{ARCH}\n" ` + path
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return "", fmt.Errorf("Failed to SSH: %s", r)
+		return "", xerrors.Errorf("Failed to SSH: %s", r)
 	}
 	fqpn := strings.TrimSpace(r.Stdout)
 	return strings.Replace(fqpn, "-(none):", "-", -1), nil
--- a/scan/rhel.go
+++ b/scan/rhel.go
@@ -1,11 +1,10 @@
 package scan

 import (
-	"fmt"
-
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -43,7 +42,7 @@ func (o *rhel) checkDeps() error {
 	} else if o.getServerInfo().Mode.IsDeep() {
 		return o.execCheckDeps(o.depsDeep())
 	}
-	return fmt.Errorf("Unknown scan mode")
+	return xerrors.New("Unknown scan mode")
 }

 func (o *rhel) depsFast() []string {
--- a/scan/serverapi.go
+++ b/scan/serverapi.go
@@ -18,7 +18,6 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 package scan

 import (
-	"errors"
 	"fmt"
 	"net/http"
 	"os"
@@ -30,13 +29,14 @@ import (
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/report"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 var (
-	errOSFamilyHeader      = errors.New("X-Vuls-OS-Family header is required")
-	errOSReleaseHeader     = errors.New("X-Vuls-OS-Release header is required")
-	errKernelVersionHeader = errors.New("X-Vuls-Kernel-Version header is required")
-	errServerNameHeader    = errors.New("X-Vuls-Server-Name header is required")
+	errOSFamilyHeader      = xerrors.New("X-Vuls-OS-Family header is required")
+	errOSReleaseHeader     = xerrors.New("X-Vuls-OS-Release header is required")
+	errKernelVersionHeader = xerrors.New("X-Vuls-Kernel-Version header is required")
+	errServerNameHeader    = xerrors.New("X-Vuls-Server-Name header is required")
 )

 var servers, errServers []osTypeInterface
@@ -56,6 +56,7 @@ type osTypeInterface interface {

 	preCure() error
 	postScan() error
+	scanWordPress() error
 	scanPackages() error
 	convertToModel() models.ScanResult

@@ -84,6 +85,30 @@ type osPackages struct {
 	Kernel models.Kernel
 }

+// Retry as it may stall on the first SSH connection
+// https://github.com/future-architect/vuls/pull/753
+func detectDebianWithRetry(c config.ServerInfo) (itsMe bool, deb osTypeInterface, err error) {
+	type Response struct {
+		itsMe bool
+		deb   osTypeInterface
+		err   error
+	}
+	resChan := make(chan Response, 1)
+	go func(c config.ServerInfo) {
+		itsMe, osType, fatalErr := detectDebian(c)
+		resChan <- Response{itsMe, osType, fatalErr}
+	}(c)
+
+	timeout := time.After(time.Duration(3) * time.Second)
+	select {
+	case res := <-resChan:
+		return res.itsMe, res.deb, res.err
+	case <-timeout:
+		time.Sleep(100 * time.Millisecond)
+		return detectDebian(c)
+	}
+}
+
 func detectOS(c config.ServerInfo) (osType osTypeInterface) {
 	var itsMe bool
 	var fatalErr error
@@ -93,10 +118,10 @@ func detectOS(c config.ServerInfo) (osType osTypeInterface) {
 		return
 	}

-	itsMe, osType, fatalErr = detectDebian(c)
+	itsMe, osType, fatalErr = detectDebianWithRetry(c)
 	if fatalErr != nil {
 		osType.setErrs([]error{
-			fmt.Errorf("Failed to detect OS: %s", fatalErr)})
+			xerrors.Errorf("Failed to detect OS: %w", fatalErr)})
 		return
 	}

@@ -126,7 +151,7 @@ func detectOS(c config.ServerInfo) (osType osTypeInterface) {
 	}

 	//TODO darwin https://github.com/mizzy/specinfra/blob/master/lib/specinfra/helper/detect_os/darwin.rb
-	osType.setErrs([]error{fmt.Errorf("Unknown OS Type")})
+	osType.setErrs([]error{xerrors.New("Unknown OS Type")})
 	return
 }

@@ -155,7 +180,7 @@ func PrintSSHableServerNames() bool {
 func InitServers(timeoutSec int) error {
 	servers, errServers = detectServerOSes(timeoutSec)
 	if len(servers) == 0 {
-		return fmt.Errorf("No scannable servers")
+		return xerrors.New("No scannable servers")
 	}

 	actives, inactives := detectContainerOSes(timeoutSec)
@@ -216,7 +241,7 @@ func detectServerOSes(timeoutSec int) (servers, errServers []osTypeInterface) {
 					u := &unknown{}
 					u.setServerInfo(sInfo)
 					u.setErrs([]error{
-						fmt.Errorf("Timed out"),
+						xerrors.New("Timed out"),
 					})
 					errServers = append(errServers, u)
 					util.Log.Errorf("(%d/%d) Timed out: %s",
@@ -276,11 +301,10 @@ func detectContainerOSes(timeoutSec int) (actives, inactives []osTypeInterface)
 					u := &unknown{}
 					u.setServerInfo(sInfo)
 					u.setErrs([]error{
-						fmt.Errorf("Timed out"),
+						xerrors.New("Timed out"),
 					})
 					inactives = append(inactives)
 					util.Log.Errorf("Timed out: %s", servername)
-
 				}
 			}
 		}
@@ -296,8 +320,8 @@ func detectContainerOSesOnServer(containerHost osTypeInterface) (oses []osTypeIn

 	running, err := containerHost.runningContainers()
 	if err != nil {
-		containerHost.setErrs([]error{fmt.Errorf(
-			"Failed to get running containers on %s. err: %s",
+		containerHost.setErrs([]error{xerrors.Errorf(
+			"Failed to get running containers on %s. err: %w",
 			containerHost.getServerInfo().ServerName, err)})
 		return append(oses, containerHost)
 	}
@@ -328,8 +352,8 @@ func detectContainerOSesOnServer(containerHost osTypeInterface) (oses []osTypeIn

 	exitedContainers, err := containerHost.exitedContainers()
 	if err != nil {
-		containerHost.setErrs([]error{fmt.Errorf(
-			"Failed to get exited containers on %s. err: %s",
+		containerHost.setErrs([]error{xerrors.Errorf(
+			"Failed to get exited containers on %s. err: %w",
 			containerHost.getServerInfo().ServerName, err)})
 		return append(oses, containerHost)
 	}
@@ -363,7 +387,7 @@ func detectContainerOSesOnServer(containerHost osTypeInterface) (oses []osTypeIn
 		}
 	}
 	if 0 < len(exited) || 0 < len(unknown) {
-		containerHost.setErrs([]error{fmt.Errorf(
+		containerHost.setErrs([]error{xerrors.Errorf(
 			"Some containers on %s are exited or unknown. exited: %s, unknown: %s",
 			containerHost.getServerInfo().ServerName, exited, unknown)})
 		return append(oses, containerHost)
@@ -375,7 +399,7 @@ func detectContainerOSesOnServer(containerHost osTypeInterface) (oses []osTypeIn
 func CheckScanModes() error {
 	for _, s := range servers {
 		if err := s.checkScanMode(); err != nil {
-			return fmt.Errorf("servers.%s.scanMode err: %s",
+			return xerrors.Errorf("servers.%s.scanMode err: %w",
 				s.getServerInfo().GetServerName(), err)
 		}
 	}
@@ -433,7 +457,7 @@ func detectPlatforms(timeoutSec int) {
 // Scan scan
 func Scan(timeoutSec int) error {
 	if len(servers) == 0 {
-		return fmt.Errorf("No server defined. Check the configuration")
+		return xerrors.New("No server defined. Check the configuration")
 	}

 	if err := setupChangelogCache(); err != nil {
@@ -511,7 +535,7 @@ func ViaHTTP(header http.Header, body string) (models.ScanResult, error) {
 			redhatBase: redhatBase{base: base},
 		}
 	default:
-		return models.ScanResult{}, fmt.Errorf("Server mode for %s is not implemented yet", family)
+		return models.ScanResult{}, xerrors.Errorf("Server mode for %s is not implemented yet", family)
 	}

 	installedPackages, srcPackages, err := osType.parseInstalledPackages(body)
@@ -567,16 +591,26 @@ func scanVulns(jsonDir string, scannedAt time.Time, timeoutSec int) error {
 		if err = o.scanPackages(); err != nil {
 			return err
 		}
+		if err = o.scanWordPress(); err != nil {
+			return xerrors.Errorf("Failed to scan WordPress: %w", err)
+		}
 		return o.postScan()
 	}, timeoutSec)

 	hostname, _ := os.Hostname()
+	ipv4s, ipv6s, err := util.IP()
+	if err != nil {
+		util.Log.Errorf("Failed to fetch scannedIPs: %s", err)
+	}
+
 	for _, s := range append(servers, errServers...) {
 		r := s.convertToModel()
 		r.ScannedAt = scannedAt
 		r.ScannedVersion = config.Version
 		r.ScannedRevision = config.Revision
 		r.ScannedBy = hostname
+		r.ScannedIPv4Addrs = ipv4s
+		r.ScannedIPv6Addrs = ipv6s
 		r.Config.Scan = config.Conf
 		results = append(results, r)
 	}
@@ -587,7 +621,7 @@ func scanVulns(jsonDir string, scannedAt time.Time, timeoutSec int) error {
 	}
 	for _, w := range ws {
 		if err := w.Write(results...); err != nil {
-			return fmt.Errorf("Failed to write summary report: %s", err)
+			return xerrors.Errorf("Failed to write summary report: %s", err)
 		}
 	}

@@ -606,20 +640,20 @@ func EnsureResultDir(scannedAt time.Time) (currentDir string, err error) {
 	}
 	jsonDir := filepath.Join(resultsDir, jsonDirName)
 	if err := os.MkdirAll(jsonDir, 0700); err != nil {
-		return "", fmt.Errorf("Failed to create dir: %s", err)
+		return "", xerrors.Errorf("Failed to create dir: %w", err)
 	}

 	symlinkPath := filepath.Join(resultsDir, "current")
 	if _, err := os.Lstat(symlinkPath); err == nil {
 		if err := os.Remove(symlinkPath); err != nil {
-			return "", fmt.Errorf(
-				"Failed to remove symlink. path: %s, err: %s", symlinkPath, err)
+			return "", xerrors.Errorf(
+				"Failed to remove symlink. path: %s, err: %w", symlinkPath, err)
 		}
 	}

 	if err := os.Symlink(jsonDir, symlinkPath); err != nil {
-		return "", fmt.Errorf(
-			"Failed to create symlink: path: %s, err: %s", symlinkPath, err)
+		return "", xerrors.Errorf(
+			"Failed to create symlink: path: %s, err: %w", symlinkPath, err)
 	}
 	return jsonDir, nil
 }
--- a/scan/suse.go
+++ b/scan/suse.go
@@ -9,6 +9,7 @@ import (
 	"github.com/future-architect/vuls/config"
 	"github.com/future-architect/vuls/models"
 	"github.com/future-architect/vuls/util"
+	"golang.org/x/xerrors"
 )

 // inherit OsTypeInterface
@@ -160,7 +161,7 @@ func (o *suse) scanUpdatablePackages() (models.Packages, error) {
 	}
 	r := o.exec(cmd, noSudo)
 	if !r.isSuccess() {
-		return nil, fmt.Errorf("Failed to scan updatable packages: %v", r)
+		return nil, xerrors.Errorf("Failed to scan updatable packages: %v", r)
 	}
 	return o.parseZypperLULines(r.Stdout)
 }
@@ -184,16 +185,16 @@ func (o *suse) parseZypperLULines(stdout string) (models.Packages, error) {
 }

 func (o *suse) parseZypperLUOneLine(line string) (*models.Package, error) {
-	fs := strings.Fields(line)
-	if len(fs) != 11 {
-		return nil, fmt.Errorf("zypper -q lu Unknown format: %s", line)
+	ss := strings.Split(line, "|")
+	if len(ss) != 6 {
+		return nil, xerrors.Errorf("zypper -q lu Unknown format: %s", line)
 	}
-	available := strings.Split(fs[8], "-")
+	available := strings.Split(strings.TrimSpace(ss[4]), "-")
 	return &models.Package{
-		Name:       fs[4],
+		Name:       strings.TrimSpace(ss[2]),
 		NewVersion: available[0],
 		NewRelease: available[1],
-		Arch:       fs[10],
+		Arch:       strings.TrimSpace(ss[5]),
 	}, nil
 }

--- a/scan/suse_test.go
+++ b/scan/suse_test.go
@@ -30,7 +30,8 @@ func TestScanUpdatablePackages(t *testing.T) {
 	stdout := `S | Repository                                  | Name                          | Current Version             | Available Version           | Arch
 --+---------------------------------------------+-------------------------------+-----------------------------+-----------------------------+-------
 v | SLES12-SP2-Updates                          | SUSEConnect                   | 0.3.0-19.8.1                | 0.3.1-19.11.2               | x86_64
-v | SLES12-SP2-Updates                          | SuSEfirewall2                 | 3.6.312-2.3.1               | 3.6.312-2.10.1              | noarch`
+v | SLES12-SP2-Updates                          | SuSEfirewall2                 | 3.6.312-2.3.1               | 3.6.312-2.10.1              | noarch
+v | Clone of SLES11-SP3-Updates for x86_64 | ConsoleKit | 0.2.10-64.65.1 | 0.2.10-64.69.1 | x86_64`

 	var tests = []struct {
 		in  string
@@ -51,6 +52,12 @@ v | SLES12-SP2-Updates                          | SuSEfirewall2
 					NewRelease: "2.10.1",
 					Arch:       "noarch",
 				},
+				models.Package{
+					Name:       "ConsoleKit",
+					NewVersion: "0.2.10",
+					NewRelease: "64.69.1",
+					Arch:       "x86_64",
+				},
 			),
 		},
 	}
--- a/util/util.go
+++ b/util/util.go
@@ -19,6 +19,7 @@ package util

 import (
 	"fmt"
+	"net"
 	"net/url"
 	"strings"

@@ -93,6 +94,38 @@ func URLPathParamJoin(baseURL string, paths []string, params map[string]string)
 	return u.String(), nil
 }

+// IP returns scanner network ip addresses
+func IP() (ipv4Addrs []string, ipv6Addrs []string, err error) {
+	ifaces, err := net.Interfaces()
+	if err != nil {
+		return nil, nil, err
+	}
+	for _, i := range ifaces {
+		addrs, _ := i.Addrs()
+		for _, addr := range addrs {
+			var ip net.IP
+			switch v := addr.(type) {
+			case *net.IPNet:
+				ip = v.IP
+			case *net.IPAddr:
+				ip = v.IP
+			}
+
+			// only global unicast address
+			if !ip.IsGlobalUnicast() {
+				continue
+			}
+
+			if ok := ip.To4(); ok != nil {
+				ipv4Addrs = append(ipv4Addrs, ip.String())
+			} else {
+				ipv6Addrs = append(ipv6Addrs, ip.String())
+			}
+		}
+	}
+	return ipv4Addrs, ipv6Addrs, nil
+}
+
 // ProxyEnv returns shell environment variables to set proxy
 func ProxyEnv() string {
 	httpProxyEnv := ""
--- a/wordpress/wordpress.go
+++ b/wordpress/wordpress.go
@@ -0,0 +1,271 @@
+/* Vuls - Vulnerability Scanner
+Copyright (C) 2016  Future Corporation , Japan.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+package wordpress
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+	"strings"
+
+	"github.com/future-architect/vuls/models"
+	"github.com/future-architect/vuls/util"
+	version "github.com/hashicorp/go-version"
+	"golang.org/x/xerrors"
+)
+
+//WpCveInfos is for wpvulndb's json
+type WpCveInfos struct {
+	ReleaseDate  string `json:"release_date"`
+	ChangelogURL string `json:"changelog_url"`
+	// Status        string `json:"status"`
+	LatestVersion string `json:"latest_version"`
+	LastUpdated   string `json:"last_updated"`
+	// Popular         bool        `json:"popular"`
+	Vulnerabilities []WpCveInfo `json:"vulnerabilities"`
+	Error           string      `json:"error"`
+}
+
+//WpCveInfo is for wpvulndb's json
+type WpCveInfo struct {
+	ID        int    `json:"id"`
+	Title     string `json:"title"`
+	CreatedAt string `json:"created_at"`
+	UpdatedAt string `json:"updated_at"`
+	// PublishedDate string     `json:"published_date"`
+	VulnType   string     `json:"vuln_type"`
+	References References `json:"references"`
+	FixedIn    string     `json:"fixed_in"`
+}
+
+//References is for wpvulndb's json
+type References struct {
+	URL     []string `json:"url"`
+	Cve     []string `json:"cve"`
+	Secunia []string `json:"secunia"`
+}
+
+// FillWordPress access to wpvulndb and fetch scurity alerts and then set to the given ScanResult.
+// https://wpvulndb.com/
+func FillWordPress(r *models.ScanResult, token string) (int, error) {
+	// Core
+	ver := strings.Replace(r.WordPressPackages.CoreVersion(), ".", "", -1)
+	if ver == "" {
+		return 0, xerrors.New("Failed to get WordPress core version")
+	}
+	url := fmt.Sprintf("https://wpvulndb.com/api/v3/wordpresses/%s", ver)
+	body, err := httpRequest(url, token)
+	if err != nil {
+		return 0, err
+	}
+	if body == "" {
+		util.Log.Warnf("A result of REST access is empty: %s", url)
+	}
+	wpVinfos, err := convertToVinfos(models.WPCore, body)
+	if err != nil {
+		return 0, err
+	}
+
+	//TODO add a flag ignore inactive plugin or themes such as -wp-ignore-inactive flag to cmd line option or config.toml
+
+	// Themes
+	for _, p := range r.WordPressPackages.Themes() {
+		url := fmt.Sprintf("https://wpvulndb.com/api/v3/themes/%s", p.Name)
+		body, err := httpRequest(url, token)
+		if err != nil {
+			return 0, err
+		}
+		if body == "" {
+			continue
+		}
+
+		templateVinfos, err := convertToVinfos(p.Name, body)
+		if err != nil {
+			return 0, err
+		}
+
+		for _, v := range templateVinfos {
+			for _, fixstat := range v.WpPackageFixStats {
+				pkg, ok := r.WordPressPackages.Find(fixstat.Name)
+				if !ok {
+					continue
+				}
+				ok, err := match(pkg.Version, fixstat.FixedIn)
+				if err != nil {
+					return 0, xerrors.Errorf("Not a semantic versioning: %w", err)
+				}
+				if ok {
+					wpVinfos = append(wpVinfos, v)
+					util.Log.Infof("[match] %s installed: %s, fixedIn: %s", pkg.Name, pkg.Version, fixstat.FixedIn)
+				} else {
+					//TODO Debugf
+					util.Log.Infof("[miss] %s installed: %s, fixedIn: %s", pkg.Name, pkg.Version, fixstat.FixedIn)
+				}
+			}
+		}
+	}
+
+	// Plugins
+	for _, p := range r.WordPressPackages.Plugins() {
+		url := fmt.Sprintf("https://wpvulndb.com/api/v3/plugins/%s", p.Name)
+		body, err := httpRequest(url, token)
+		if err != nil {
+			return 0, err
+		}
+		if body == "" {
+			continue
+		}
+
+		pluginVinfos, err := convertToVinfos(p.Name, body)
+		if err != nil {
+			return 0, err
+		}
+
+		for _, v := range pluginVinfos {
+			for _, fixstat := range v.WpPackageFixStats {
+				pkg, ok := r.WordPressPackages.Find(fixstat.Name)
+				if !ok {
+					continue
+				}
+				ok, err := match(pkg.Version, fixstat.FixedIn)
+				if err != nil {
+					return 0, xerrors.Errorf("Not a semantic versioning: %w", err)
+				}
+				if ok {
+					wpVinfos = append(wpVinfos, v)
+					//TODO Debugf
+					util.Log.Infof("[match] %s installed: %s, fixedIn: %s", pkg.Name, pkg.Version, fixstat.FixedIn)
+				} else {
+					//TODO Debugf
+					util.Log.Infof("[miss] %s installed: %s, fixedIn: %s", pkg.Name, pkg.Version, fixstat.FixedIn)
+				}
+			}
+		}
+	}
+
+	for _, wpVinfo := range wpVinfos {
+		if vinfo, ok := r.ScannedCves[wpVinfo.CveID]; ok {
+			vinfo.CveContents[models.WPVulnDB] = wpVinfo.CveContents[models.WPVulnDB]
+			vinfo.VulnType = wpVinfo.VulnType
+			vinfo.Confidences = append(vinfo.Confidences, wpVinfo.Confidences...)
+			vinfo.WpPackageFixStats = append(vinfo.WpPackageFixStats, wpVinfo.WpPackageFixStats...)
+			r.ScannedCves[wpVinfo.CveID] = vinfo
+		} else {
+			r.ScannedCves[wpVinfo.CveID] = wpVinfo
+		}
+	}
+	return len(wpVinfos), nil
+}
+
+func match(installedVer, fixedIn string) (bool, error) {
+	v1, err := version.NewVersion(installedVer)
+	if err != nil {
+		return false, err
+	}
+	v2, err := version.NewVersion(fixedIn)
+	if err != nil {
+		return false, err
+	}
+	return v1.LessThan(v2), nil
+}
+
+func convertToVinfos(pkgName, body string) (vinfos []models.VulnInfo, err error) {
+	if body == "" {
+		return
+	}
+	// "pkgName" : CVE Detailed data
+	pkgnameCves := map[string]WpCveInfos{}
+	if err = json.Unmarshal([]byte(body), &pkgnameCves); err != nil {
+		return nil, xerrors.Errorf("Failed to unmarshal %s. err: %w", body, err)
+	}
+
+	for _, v := range pkgnameCves {
+		vs := extractToVulnInfos(pkgName, v.Vulnerabilities)
+		vinfos = append(vinfos, vs...)
+	}
+	return vinfos, nil
+}
+
+func extractToVulnInfos(pkgName string, cves []WpCveInfo) (vinfos []models.VulnInfo) {
+	for _, vulnerability := range cves {
+		var cveIDs []string
+
+		if len(vulnerability.References.Cve) == 0 {
+			cveIDs = append(cveIDs, fmt.Sprintf("WPVDBID-%d", vulnerability.ID))
+		}
+		for _, cveNumber := range vulnerability.References.Cve {
+			cveIDs = append(cveIDs, "CVE-"+cveNumber)
+		}
+
+		var refs []models.Reference
+		for _, url := range vulnerability.References.URL {
+			refs = append(refs, models.Reference{
+				Link: url,
+			})
+		}
+
+		for _, cveID := range cveIDs {
+			vinfos = append(vinfos, models.VulnInfo{
+				CveID: cveID,
+				CveContents: models.NewCveContents(
+					models.CveContent{
+						Type:       models.WPVulnDB,
+						CveID:      cveID,
+						Title:      vulnerability.Title,
+						References: refs,
+					},
+				),
+				VulnType: vulnerability.VulnType,
+				Confidences: []models.Confidence{
+					models.WPVulnDBMatch,
+				},
+				WpPackageFixStats: []models.WpPackageFixStatus{{
+					Name:    pkgName,
+					FixedIn: vulnerability.FixedIn,
+				}},
+			})
+		}
+	}
+	return
+}
+
+func httpRequest(url, token string) (string, error) {
+	util.Log.Debugf("%s", url)
+	req, err := http.NewRequest("GET", url, nil)
+	if err != nil {
+		return "", err
+	}
+	req.Header.Set("Authorization", fmt.Sprintf("Token token=%s", token))
+	resp, err := new(http.Client).Do(req)
+	if err != nil {
+		return "", err
+	}
+	body, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return "", err
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != 200 && resp.StatusCode != 404 {
+		return "", xerrors.Errorf("status: %s", resp.Status)
+	} else if resp.StatusCode == 404 {
+		// This package is not in WPVulnDB
+		return "", nil
+	}
+	return string(body), nil
+}
--- a/wordpress/wordpress_test.go
+++ b/wordpress/wordpress_test.go
@@ -0,0 +1 @@
+package wordpress
Author	SHA1	Message	Date
Kota Kanbe	6a1fc4fade	Merge branch 'master' of https://github.com/future-architect/vuls * 'master' of https://github.com/future-architect/vuls: fix goreleaser.yml Add news to readme	2019-04-08 21:19:12 +09:00
Kota Kanbe	9008d0ddf0	Add news to readme	2019-04-08 21:17:05 +09:00
Kota Kanbe	583f4577bc	fix goreleaser.yml	2019-04-08 19:51:58 +09:00
Kota Kanbe	e5716d5092	Add news to readme	2019-04-08 18:22:03 +09:00
Kota Kanbe	7192ae1287	Bump up version	2019-04-08 17:33:57 +09:00
kazuminn	99c65eff48	feat(scan): WordPress Vulnerability Scan (core, plugin, theme) (#769 ) https://github.com/future-architect/vuls/pull/769	2019-04-08 17:27:44 +09:00
Josh Soref	91df593566	Editorial fixes (#798 ) mostly suggested by app.grammarly.com * articles * brand name fixes * hyphenation * Oxford comma * sorting lists * spelling	2019-04-04 22:51:06 +09:00
sadayuki-matsuno	07aeaeb989	update go-exploitdb (#797 )	2019-03-28 00:49:31 +09:00
sadayuki-matsuno	cfeecdacd0	update pkgs (#796 )	2019-03-26 10:56:14 +09:00
sadayuki-matsuno	564dfa8b62	update cve dictionary (#795 )	2019-03-26 10:10:40 +09:00
seph	75dd6f2010	Specify VOLUME using json syntax (#791 ) When using a json array for VOLUME, values must be quoted. Else it's interpreted as a string, eg /[vuls Fixes https://github.com/kotakanbe/goval-dictionary/issues/58	2019-03-22 16:30:23 +09:00
Kota Kanbe	e26fd0b759	fix(report): Critical Bug Fix for CPE based scanning #793 (#794 )	2019-03-22 16:28:40 +09:00
Kota Kanbe	d630680a51	feat(slack): enable -format-one-line-text with -to-slack (#792 )	2019-03-18 13:56:49 +09:00
Kota Kanbe	1723c3f6a0	fix(report): cpe match bug: go-cve-dictionary#120 (#790 )	2019-03-15 21:31:21 +09:00
Kota Kanbe	53dd90302e	fix(scan): parse error on SUSE #515 (#786 )	2019-03-12 17:36:27 +09:00
b3tyar	5c6e06b05e	Handle no-auth SMTP Servers and one liner email fix (#772 ) * Handle no-auth SMTP Servers * Remove unneeded else block * Fix for Issue #633	2019-03-12 16:45:25 +09:00
Iskander (Alex) Sharipov	cf6fb0c8a5	models: fix no-op append calls (#785 ) Fixed simplest cases of append calls that have no effect aside from driving Go static analysis tools crazy. One issue remains (#784) since I'm not sure what would be the right behavior there.	2019-03-07 11:28:44 +09:00
sadayuki-matsuno	e0e71b2eae	add scanner info in -to-saas (#783 )	2019-03-04 16:36:32 +09:00
sadayuki-matsuno	53f4a29fb1	change implemention of integration (#780 )	2019-02-21 14:06:21 +09:00
Kota Kanbe	89d58d1abc	bump up version	2019-02-20 14:58:49 +09:00
Kota Kanbe	d6b6969cb3	update README	2019-02-20 14:56:24 +09:00
kazuminn	e7bf6fa69d	feat(README): contiruters shield (#778 ) * add contiruters shield * Update README.md * Update README.md	2019-02-20 12:20:56 +09:00
Kota Kanbe	6e51970b91	fix(discovery): show the template of `GitHub Security Alerts integration` to discovery subcommand	2019-02-20 12:08:22 +09:00
Kota Kanbe	56d7d43768	feat(report): GitHub security alerts integration (#775 ) feat(report): integrate to GitHub security alerts	2019-02-20 12:04:10 +09:00
Shota Ito	256c99ffa2	Delete tab from output in case of No CVE-IDs (#768 )	2019-01-25 00:21:41 +09:00
Takayuki Ushida	9c0bc3b13b	modify build time (#766 )	2019-01-24 15:26:12 +09:00
Kota Kanbe	9b8a323d85	fix(report): detect 0 vulns for Amazon, FreeBSD, Raspbian (#765 )	2019-01-24 11:49:33 +09:00
kota kanbe	3178c1e326	Merge branch 'master' of https://github.com/future-architect/vuls * 'master' of https://github.com/future-architect/vuls: Add Telegram support (#762)	2019-01-23 00:25:54 +09:00
kota kanbe	321d68e03a	Bump up version	2019-01-23 00:25:02 +09:00
Yao Ding	3d8753c621	Add Telegram support (#762 ) * add telegram support * format message * remove debug print * fix linting error * add telegram to discover; group message by 10 * use chatID instead of channel * apply refactor * remove reduntant space	2019-01-23 00:19:16 +09:00
Tomoya Amachi	967c56909d	add ScannedIPv4Addrs and ScannedIPv6Addrs (#764 )	2019-01-19 22:19:06 +09:00
Takayuki Ushida	7c4831d2d1	add build time (#763 )	2019-01-18 13:13:50 +09:00
Shigechika AIKAWA	4b49e11a33	add(report) -format-list option to -to-email (#761 )	2019-01-17 16:31:04 +09:00
Kota Kanbe	d84a6a8627	fix(oracle): vuls report returns different result each time in the case of Oracle Linux (#759 ) https://github.com/kotakanbe/goval-dictionary/pull/56	2019-01-12 23:11:06 +09:00
sadayuki-matsuno	63b7f4a8db	delete paperr (#758 )	2019-01-12 22:40:56 +09:00
yahharo	ca2160264a	Remove ThreadTimeStamp from message struct (#756 ) - If `thread_ts` valus sent as empty string ("") to Slack, it returns error `invalid_thread_ts` - When API try to send, it use `slack.PostMessageParameters`, not use `message`	2018-12-25 12:27:53 +09:00
Kota Kanbe	7842594f53	fix(scan): OS detection ssh timeout in first run #699 (#753 )	2018-12-20 13:59:54 +09:00
Kota Kanbe	7db056102c	fix(report): overdetection for Red Hat/CentOS with redis backend (#748 ) fix(report): miss detection for Red Hat/CentOS with redis backend	2018-12-06 15:29:28 +09:00
Tomoya Amachi	a5a800fa0a	add alert data to result json (#747 ) * add alert data to result json * delete omitempty from AlertDict	2018-12-05 15:38:23 +09:00
Tomoya Amachi	9147ec148d	Beautify alert (#746 ) * update dep * to make easy edit alert data manually * fix alert data bug	2018-12-05 12:30:04 +09:00
sadayuki-matsuno	b3260588c6	fix(gost) update pkg to incorporate the latest gost (#745 )	2018-12-04 17:33:31 +09:00
sadayuki-matsuno	7d31328271	export exploit func (#744 )	2018-11-30 16:53:51 +09:00
Kota Kanbe	6e82981ee3	feat(report): Display CERT information to reports (#741 ) * fix(tui): show JPCERT Alert URL in TUI * feat(tui): show `!` when the CVE-ID corresponds to USCERT or JPCERT alert * feat(report): display cert alert info to stdout report * fix(report): Display CVEs detected by CPEs with -ignore-unfixed flag	2018-11-30 15:41:59 +09:00
Tomoya Amachi	9d7b115bb5	add JPCERT and USCERT alert dictionary (#740 ) * add alert dictionary * fix for sider review * fix for sider review	2018-11-30 14:17:17 +09:00
Kota Kanbe	8eae5002a3	fix(report): return both scores of gost and oval (#739 )	2018-11-29 12:17:19 +09:00
Kota Kanbe	31bd6c0371	feat(scan): get repository name of updatable pkgs for debian/ubuntu (#738 )	2018-11-26 12:02:52 +09:00
Kota Kanbe	7585f9d537	fix(report): fix cvedb-url, add -cvedb-type=http (#734 ) * fix(report): fix cvedb-url, add -cvedb-type=http * feat(report): support go-exploitdb server mode * update deps * implement tui * fix server mode * fix(tui): default value of cvedb-type to "" * update deps	2018-11-16 21:22:18 +09:00
sadayuki-matsuno	76037cdf72	fix new cve contents (#735 )	2018-11-15 13:43:06 +09:00
sadayuki-matsuno	98c5421edc	fix exploit db (#733 )	2018-11-12 17:36:53 +09:00
Kota Kanbe	e63fc7e3f5	fix(report): nil pointer in deep scan mode #728 (#732 )	2018-11-10 12:36:12 +09:00
sadayuki-matsuno	6ed9cf3fb4	add scan mode (#731 )	2018-11-05 15:35:50 +09:00