About

search_vulns can be used to search for known vulnerabilities in software. To achieve this, it utilizes a locally built database containing various data sources about products, vulnerabilities, exploits, software recency and more. Since search_vulns is designed in a modular fashion, new data sources and extensions can be integrated easily. A complete list of all current modules and included data sources is provided in the Modules section.

You can either provide product titles like Apache 2.4.39 or a CPE 2.3 string like cpe:2.3:a:sudo_project:sudo:1.8.2:*:*:*:*:*:*:* as input. In addition, you can directly search for vulnerabilities like CVE-2023-1234 or GHSA-xx68-jfcg-xmmf by using a comma-separated list of IDs.

search_vulns can either be used as a CLI tool or via a web server. It is recommended to use the CLI tool for automated workflows that might be resource-constrained. Otherwise, using the web server is recommended, because it offers more features and flexibility. A public instance of the web server is available at https://search-vulns.com.

Black Hat Arsenal Recorded Demo

Modules

search_vulns' search engine is designed in a modular fashion. Therefore, new data sources can be integrated easily. The currently available modules and data sources are the following:

Module ID	Description
nvd.search_vulns_nvd	Integrates CVE information and exploits from the National Vulnerability (NVD) database
vulncheck.search_vulns_nvdpp	Integrates additional enrichment of the CVE/NVD data via VulnCheck's NVD++
ghsa.search_vulns_ghsa	Integrates CVE and non-CVE vulnerabilties from the GitHub Security Advisory (GHSA) database
exploit_db.search_vulns_edb	Integrates publicly available exploits from the Exploit-DB
poc_in_github.search_vulns_poc_in_github	Integrates exploit information from PoC-in-GitHub
msf_exploits.search_vulns_msf_exploits	Integrates information about exploits in the Metasploit Framework
end_of_life_date.search_vulns_eold	Integrates software recency information from endoflife.date
epss.search_vulns_epss	Integrates FIRST's EPSS scores for CVEs
cpe_search.search_vulns_cpe_search	Matches a users natural language query to a CPE string via cpe_search and the NVD's official dictionary
linux_distro_backpatches.debian. search_vulns_debian	Integrates backpatch information from the Debian Security Bug Tracker
linux_distro_backpatches.ubuntu. search_vulns_ubuntu	Integrates backpatch information from the Ubuntu Security API via aquasecurity's repository
linux_distro_backpatches.redhat. search_vulns_redhat	Integrates backpatch information from the Red Hat Security Data API via aquasecurity's repository

As this overview shows, modules can help in finding product IDs, vulnerabilities, extra information about vulnerabilities and extra information about the queried product. Examples of the latter two are exploits, CVSS or EPSS scores, or software recency information. Furthermore, modules can classify identified vulnerabilities as patched if they store and utilize special information related to the query, for example.

Have a look at the template module to get started with writing your own modules: src/search_vulns/modules/template/search_vulns_template.py.

License Information About search_vulns

search_vulns is licensed under the MIT license, see here.
This product uses the NVD API but is not endorsed or certified by the NVD.
Data from VulnCheck NVD++ is used, which is considered fair use but requires attribution, see here.
Data from the Exploit-DB is used, which is licensed under the GPLv2 license, see here.
Data from PoC-in-GitHub is used, which does not provide a license. However, it is published on GitHub and thereby permits usage according to GitHub's Terms of Service.
Data from the GitHub Security Advisory Database is used, which is licensed under the Creative Commons Attribution 4.0 International license, see here.
Data from endoflife.date is used, which is licensed under the MIT License, see here.
The web frontend uses Tailwind CSS, which is licensed under the MIT License, see here.
The web frontend uses DaisyUI, which is licensed under the MIT License, see here.
The web frontend uses jQuery, which is licensed under the MIT License, see here.
The web frontend uses FontAwesome Free icons, which are GPL friendly and permit usage, see here.
The web frontend uses highlight.js, which is licensed under the BSD 3-Clause, see here.
The web frontend uses highlightjs-line-numbers.js, which is licensed under the MIT License, see here.
The web frontend uses highlightjs-copy, which is licensed under the Unlicense License, see here.
The web frontend uses highlightjs-highlight-lines.js, which is licensed under the MIT License, see here.
The web frontend uses MathJax, which is licensed under the Apache 2.0 License, see here.