CVE-Search

CVE-Search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.

The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local lookups are usually faster and you can limit your sensitive queries via the Internet.

CVE-Search includes a back-end to store vulnerabilities and related information, an intuitive web interface for search and managing vulnerabilities, a series of tools to query the system and a web API interface.

CVE-Search is used by many organizations including the public CVE services of CIRCL.

This document gives you basic information how to start with CVE-Search.

Contents:

• Getting Started
  • Dependencies
  • Standard Installation
  • Production Installation
  • Configuration
• Database
  • MongoDB
  • Redis
• Webgui
  • Settings
  • Debug mode
  • Users and Login
  • Account Management
  • TLS - Transport Layer Security
  • Starting and stopping the web-server
  • Using the web-server
  • Logging
• Webgui Plugins
  • General remarks
  • Plugin location
  • Supported events
• Docker versions
• Software using cve-search
• Changelog
• License

Indices and tables

• Index

• Module Index

• Search Page