cvemap！多家漏洞数据源搜索工具

NVD (NIST) CVE 数据库
CISA CVE 和已知利用漏洞 (KEV) 数据库
来自 HackerOne 的 CVE Discovery 的有关其系统中最常报告的 CVE 的数据
有关 EPSS 评分的数据以及到通用平台枚举 (CPE) 的映射
有关 GitHub 上可能提供的公共 PoC 的数据以及用于对 CVE 进行指纹识别的任何 Nuclei 模板的状态

CVE数据集搜索和查询
CVE到EPSS映射
CVE到KEV映射
CVE到CPE映射
CVE到GitHub POC的映射
CVE到Nucleic模板映射
CVE到HackerOne报告映射
CVE数据上的可定制过滤器
STDIN输入/JSONL输出

go install github.com/projectdiscovery/cvemap/cmd/cvemap@latest

cvemap -h

Usage:
  cvemap [flags]

Flags:
CONFIG:
   -auth  configure projectdiscovery cloud (pdcp) api key

OPTIONS:
   -id string[]                    cve to list for given id
   -v, -vendor string[]            cve to list for given vendor
   -p, -product string[]           cve to list for given product
   -eproduct string[]              cves to exclude based on products
   -s, -severity string[]          cve to list for given severity
   -cs, -cvss-score string[]       cve to list for given cvss score
   -c, -cpe string                 cve to list for given cpe
   -es, -epss-score string         cve to list for given epss score
   -ep, -epss-percentile string[]  cve to list for given epss percentile
   -age string                     cve to list published by given age in days
   -a, -assignee string[]          cve to list for given publisher assignee
   -vs, -vstatus value             cve to list for given vulnerability status in cli output. supported: unknown, new, confirmed, unconfirmed, modified, rejected

UPDATE:
   -up, -update                 update cvemap to latest version
   -duc, -disable-update-check  disable automatic cvemap update check

FILTER:
   -q, -search string  search in cve data
   -k, -kev            display cves marked as exploitable vulnerabilities by cisa (default true)
   -t, -template       display cves that has public nuclei templates (default true)
   -poc                display cves that has public published poc (default true)
   -h1, -hackerone     display cves reported on hackerone (default true)

OUTPUT:
   -f, -field value         fields to display in cli output. supported: age, kev, template, poc, cwe, epss, assignee, product, vendor, vstatus
   -fe, -exclude value      fields to exclude from cli output. supported: age, kev, template, poc, cwe, epss, assignee, product, vendor, vstatus
   -lsi, -list-id           list only the cve ids in the output
   -l, -limit int           limit the number of results to display (default 50)
   -offset int              offset the results to display
   -j, -json                return output in json format
   -epk, -enable-page-keys  enable page keys to navigate results

DEBUG:
   -version  Version
   -silent   Silent
   -verbose  Verbose