{"id":13844479,"url":"https://github.com/cornerpirate/cve-offline","last_synced_at":"2025-07-11T22:32:18.920Z","repository":{"id":101256631,"uuid":"61881987","full_name":"cornerpirate/cve-offline","owner":"cornerpirate","description":"An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.","archived":false,"fork":false,"pushed_at":"2022-05-05T10:30:08.000Z","size":43399,"stargazers_count":54,"open_issues_count":1,"forks_count":13,"subscribers_count":6,"default_branch":"master","last_synced_at":"2024-08-05T17:42:18.172Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cornerpirate.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2016-06-24T12:10:03.000Z","updated_at":"2024-02-24T13:47:58.000Z","dependencies_parsed_at":null,"dependency_job_id":"4c3a3efa-b3e3-48f7-bebe-4eea75ed7b63","html_url":"https://github.com/cornerpirate/cve-offline","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cornerpirate%2Fcve-offline","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cornerpirate%2Fcve-offline/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cornerpirate%2Fcve-offline/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cornerpirate%2Fcve-offline/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cornerpirate","download_url":"https://codeload.github.com/cornerpirate/cve-offline/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225763432,"owners_count":17520459,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:02:43.361Z","updated_at":"2024-11-21T16:31:36.120Z","avatar_url":"https://github.com/cornerpirate.png","language":"Python","funding_links":[],"categories":["Python (1887)","Python"],"sub_categories":[],"readme":"# cve-offline\nAn easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.\n\n## Installation\n\nGiven size limits of GitHub I have had to drop the raw content from NIST which has multiple files\nthat are over 100MBs in size. Therefore you can clone the entire repo using the command below:\n\n`git clone https://github.com/cornerpirate/cve-offline.git`\n\nRealistically you should just download the file 'cve-summary.csv'. \n\nEither using your web browser or wget as shown:\n\n`wget https://raw.githubusercontent.com/cornerpirate/cve-offline/master/cve-summary.csv`\n\nThe above will get you the only file you need.\n\nIf you want to download the source data from nist run the `getfiles.sh` command. This downloads\nthe zip files, extracts them, and removes the .zip leaving only the .xml files. \n\nIf you then want to recreate the current cve-summary.csv file run the `updatecsv.sh` command.\n\n# Dependencies \n\nIf your python script gives this error:\n\n```\nImportError: No module named lxml\n```\n\nThen you will want to install \"lxml\" which on Ubutnu at least is as simple as:\n\n```\nsudo apt-get install python-lxml\n```\n\n## Format of CSV File\n\nThe data is comma seperated with the summary being encapsulated in double quotes.\nThere is no header row in the file but the following table shows roughly how the data is formatted:\n\n| CVE-ID   |     CVSS Risk Score      |  Summary |\n|----------|:-------------:|------:|\n| CVE-XXXX-XXXX | 0.0-10.0 | \"The risk score is CVSS v2.0, and ranges from 0 to 10\" |\n\n## Usage\n\nIf you are on Linux you can use \"grep\" to find information you need. For example if you want to look up\none CVE (\"CVE-2015-0599\"):\n\n```\ngrep -i \"cve-2015-0599\" cve-summary.csv\nCVE-2015-0599,4.3,\"The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a \"\"cross-frame scripting (XFS)\"\" issue, aka Bug ID CSCuf50138.\"\n```\n\nThat will do you then.\n\nOn Windows you can use \"findstr\" for the same result using the command:\n\n`type cve-summary.csv | findstr /I \"cve-2015-0599\"`\n\nNote; I haven't tried the above but it should work.\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcornerpirate%2Fcve-offline","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcornerpirate%2Fcve-offline","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcornerpirate%2Fcve-offline/lists"}