cve-bin-tool
cve-bin-tool copied to clipboard
ENHANCEMENT - Support for scanning software installed on Windows platform?
Given that there is now an option to scan a package list, it would be a useful enhancement to support the scanning of the list of software installed on a Windows platform although the scanning can be performed on a Linux platform.
https://kencenerelli.wordpress.com/2017/11/25/list-installed-programs-on-windows-10/ provides guidance on how to generate a file of the installed products and versions. If this file is added as a supported input file format, then with a bit of data manipulation to create the vendor, product, version tuple, it should be sufficient to have all of the information to perform a vulnerability scan.