#nvd #cyber #tyr #fenir #date-range #api-key

app hey-nvd

Tyr tools for CVE managing about installed products and their weaknesses

5 releases

0.3.1 Nov 26, 2024
0.3.0 Nov 26, 2024
0.2.3 Nov 15, 2024
0.1.0 Oct 27, 2024
0.0.0 Oct 25, 2024

#241 in Command line utilities

Download history 149/week @ 2024-10-21 88/week @ 2024-10-28 323/week @ 2024-11-04 126/week @ 2024-11-11 27/week @ 2024-11-18 265/week @ 2024-11-25 18/week @ 2024-12-09

319 downloads per month

MIT license

120KB
1.5K SLoC

Tyr - hey-nvd

Installation

cargo install hey-nvd

Purpose

This command utility allows to run some queries on https://nvd.nist.gov.

These queries allows:

  • gets CWE list for a given CVE,
  • gets CVE notation for a given CVE,
  • gets CVE for given software data, software data are:
    • type: application or operating system,
    • vendor,
    • application,
    • version,
    • update,
    • edition,
  • gets some CVE description for a given CVE,
  • gets the CVE list for a given CWE,
  • search a list of CVE for a date range.

Usage

To explore all options run hey-nvd help.

NVD api key

It's possible to set a NVD API KEY by setting your key with the NVD_API_KEY environment variable.

Other tool

This tool can be used with get-cve tool to retrieve list of fixed CVE for an installed product. To get more information about get-cve search get-cve on the https://crates.io website for the same author.

Authors and acknowledgment

Help will be appreciated. All tools will be developed with rust technology.

License

This project is under MIT license.

Project status

This project is under development and all contributions are welcome.

These tools are provided without any guaranties.

Dependencies

~37MB
~671K SLoC