cve-tools v0.2.0

CVE Tools

A set of tools useful when dealing with lists of vulnerability CVE IDs, such as those obtained from scans or dependency checks.

Installation

npm install cve-tools

Create CSV Files From Content Containing CVE IDs

There are several ways to use content, text files or strings, containing CVE IDs such as CVE-2015-0001, to generate a useful CSV file with a summary and CVSS score for the listed vulnerabilities.

cd path/to/cve-tools

# From a file.
bin/create-cve-csv -f path/to/file > cves.csv

# From a file via pipe.
cat path/to/file | bin/create-cve-csv > cves.csv

# Directly.
bin/create-cve-csv "CVE-2015-0001 blah blah CVE-2015-0002, etc." > cves.csv

# Directly via pipe.
echo "CVE-2015-0001 blah blah CVE-2015-0002, etc." \
  | bin/create-cve-csv > cves.csv

The output has the following format:

Downloading and Parsing XML is Slow!

Expect this to take a few moments to chew through the necessary data, especially if having to check CVEs from multiple different years.