3e67f04fe4
* chore(cpescan): enable to pass useJvn to detector.DetectCpeURIsCves() * review comment * chore: go mod update go-cve * feat(cpescan): set JvnVendorProductMatch to confidence If detected by JVN * add NvdExactVersionMatch andd NvdRoughVersionMatch * add confidence-over option to report * sort CveContetens * fix integration-test
81 lines
1.7 KiB
TOML
Executable File
81 lines
1.7 KiB
TOML
Executable File
[cveDict]
|
|
Type = "sqlite3"
|
|
SQLite3Path = "/data/vulsctl/docker/cve.sqlite3"
|
|
|
|
[ovalDict]
|
|
Type = "sqlite3"
|
|
SQLite3Path = "/data/vulsctl/docker/oval.sqlite3"
|
|
|
|
[gost]
|
|
Type = "sqlite3"
|
|
SQLite3Path = "/data/vulsctl/docker/gost.sqlite3"
|
|
|
|
[exploit]
|
|
Type = "sqlite3"
|
|
SQLite3Path = "/data/vulsctl/docker/go-exploitdb.sqlite3"
|
|
|
|
[metasploit]
|
|
type = "sqlite3"
|
|
SQLite3Path = "/data/vulsctl/docker/go-msfdb.sqlite3"
|
|
|
|
[default]
|
|
|
|
[servers]
|
|
|
|
[servers.nvd_exact]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/a:rubyonrails:rails:3.0.1" ]
|
|
|
|
[servers.nvd_rough]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/a:openssl:openssl:1.1.1" ]
|
|
|
|
[servers.nvd_vendor_product]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/a:djangoproject:django" ]
|
|
|
|
[servers.nvd_match_no_jvn]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/a:apache:tomcat:7.0.27" ]
|
|
|
|
[servers.jvn_vendor_product]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/a:hitachi_abb_power_grids:afs660:1.0.0" ]
|
|
|
|
[servers.jvn_vendor_product_nover]
|
|
type = "pseudo"
|
|
cpeNames = [ "cpe:/o:nec:aterm_wg2600hp2_firmware"]
|
|
|
|
[servers.gemfile]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/Gemfile.lock"]
|
|
|
|
[servers.pipfile]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/Pipfile.lock"]
|
|
|
|
[servers.poetry]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/poetry.lock"]
|
|
|
|
[servers.composer]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/composer.lock"]
|
|
|
|
[servers.packagelock]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/package-lock.json"]
|
|
|
|
[servers.yarn]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/yarn.lock"]
|
|
|
|
[servers.cargo]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/Cargo.lock"]
|
|
|
|
[servers.gomod]
|
|
type = "pseudo"
|
|
lockfiles = ["./integration/data/lockfile/go.sum"]
|
|
|