jakewarren / cvrf-review

Parses vendor advisories in CVRF format to produce human readable summaries.

cvrf-review

A command line utility for parsing vendor bulletins in CVRF format.

Currently there is only a Fortinet module that processes Fortinet's RSS feed for new advisories and allows for the user to filter by CVSS score and/or product types to display vulnerabilites of interest.

Install

go install github.com/jakewarren/cvrf-review@latest

Usage

❯ cvrf-review fortinet -h
Get Fortinet vulnerabilities

Usage:
  cvrf-review fortinet [flags]

Flags:
  -p, --product-types stringArray   Filter vulnerabilities by product type. Must match the value provided by Fortinet in the CVRF data. Examples: 'FortiOS', 'FortiClientEMS'

Global Flags:
      --disable-border         Disable the table border
  -h, --help                   Print usage
      --json                   Print output in JSON format
      --max-cvss-score float   Filter vulnerabilities by a maximum CVSS score (default 10)
      --min-cvss-score float   Filter vulnerabilities by a minimum CVSS score
  -s, --severity string        Filter vulnerabilities by severity (critical, high, medium, low)

Examples:

Get critical Fortinet vulnerabilities:

Acknowledgments

Inspired by MaineK00n/vuls-data-update.