cvedetails-lookup icon indicating copy to clipboard operation
cvedetails-lookup copied to clipboard

Wildcard option

Open 0katz opened this issue 5 years ago • 0 comments

It would be cool if this had the option to use wildcards such as * in front of so the product doesn't have to match completely for example:

[*] Looking for "Siemens Simatic S7-1500 Cpu Firmware 1.0.1" in cvedetails.com database...
[+] Exact match found in the database
[*] IDs summary: Vendor=Siemens [109] | Product=Simatic S7-1500 Cpu Firmware [27236] | Version=1.0.1 [161817]
[*] Fetch results for version id 161817 ...
[+] Total number of CVEs fetched: 10
[*] Results ordered by published date (desc):

Sometimes exports don't give out the full product name so S7-1500 doesn't retrieve any results. 

python3 cvedetails-lookup.py --vendor 'Siemens' --product 'S7-1500' --version '1.0.1'
[*] Looking for "Siemens S7-1500 1.0.1" in cvedetails.com database...
[!] No exact match for this product/version. Checking for CVE in newer versions...
[!] The product "Siemens S7-1500" is not referenced in cvedetails.com database !```

0katz avatar Aug 08 '19 20:08 0katz