Package: mitrecve
MITRECVEGet all CVE corresponding to a specific keyword or list of keywords from theMITREdatabase.For a complete documentation look atReadTheDocsInstallYou can installmitrecveeither via pip (PyPI) or from source.
To install using pip:python3-mpipinstallmitrecveOr manually:gitclonehttps://github.com/remiflavien1/mitrecvecdmitrecve
python3setup.pyinstall# Orpython3-mpipinstall.CLIMitreCVE

Basicusage:mitrecvecrawl<package>[--detail][--formatFORMAT]mitrecveshow<result>mitrecve(-h|--help|--version)options:-f--formatFORMATChooseoutputformat(json)-d--detailShowCVEdetails-h--helpShowthisscreen--versionShowversionExample of output for the pythonhtml5libmodule:mitrecvecrawlhtml5lib--------------Package:<html5lib>--------------

CVE:CVE-2016-9910
CVEDETAILhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9910
DESCRIPTIONTheserializerinhtml5libbefore0.99999999mightallowremoteattackerstoconductcross-sitescripting(XSS)attacksbyleveragingmishandlingofspecialcharactersinattributevalues,adifferentvulnerabilitythanCVE-2016-9909.


CVE:CVE-2016-9909
CVEDETAILhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9909
DESCRIPTIONTheserializerinhtml5libbefore0.99999999mightallowremoteattackerstoconductcross-sitescripting(XSS)attacksbyleveragingmishandlingofthe<(lessthan)characterinattributevalues.You can also search for multiple keywords and print (and/or save with-o,--outputflag) additional details with--detailflag:mitrecvecrawlrecon-ng,harvester--detailCVE:CVE-2018-20752
DESCRIPTION:AnissuewasdiscoveredinRecon-ngbefore4.9.5.Lackofvalidationinthemodules/reporting/csv.pyfileallowsCSVinjection.Morespecifically,whenaTwitteruserpossessesanExcelmacroforausername,itwillnotbeproperlysanitizedwhenexportedtoaCSVfile.Thiscanresultinremotecodeexecutionfortheattacker.
NVDLINK:https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20752
CNA:MITRECorporation
RELEASEDATE:2019/02/04

ReferenceforCVE:CVE-2018-20752CVEREFERENCE:https://bitbucket.org/LaNMaSteR53/recon-ng/commits/41e96fd58891439974fb0c920b349f8926c71d4c#chg-modules/reporting/csv.pyCVEREFERENCE:https://bitbucket.org/LaNMaSteR53/recon-ng/issues/285/csv-injection-vulnerability-identified-in



--------------Package:<harvester>--------------
CVE:CVE-2011-5197
DESCRIPTION:Cross-siterequestforgery(CSRF)vulnerabilityinindex/manager/fileUploadinPublicKnowledgeProjectOpenHarvesterSystems2.3.1andearlierallowsremoteattackerstohijacktheauthenticationofadministratorsforrequeststhatuploadPHPfiles.
NVDLINK:https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-5197
CNA:MITRECorporation
RELEASEDATE:2012/09/23

ReferenceforCVE:CVE-2011-5197CVEREFERENCE:http://www.exploit-db.com/exploits/18266APIJust import and use it.>>>frommitrecveimportcrawler>>>frompprintimportpprint>>>cve_simple=crawler.get_main_page("jython")>>>pprint(cve_simple){0:{'DESC':'Jythonbefore2.7.1rc1allowsattackerstoexecutearbitrary''codeviaacraftedserializedPyFunctionobject.','ID':'CVE-2016-4000','URL':'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4000','__PACKAGE':'jython'},1:{'DESC':'Jython2.2.1usesthecurrentumasktosettheprivilegesofthe''classcachefiles,whichallowslocaluserstobypassintended''accessrestrictionsviaunspecifiedvectors.','ID':'CVE-2013-2027','URL':'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2027','__PACKAGE':'jython'}}cve detail>>>pprint(crawler.get_cve_detail(cve_simple)){0:{'CNA':'MITRECorporation','CVE_REF_URL':['http://www.securityfocus.com/bid/105647','http://bugs.jython.org/issue2454','http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html','https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864859','https://hg.python.org/jython/file/v2.7.1rc1/NEWS','https://hg.python.org/jython/rev/d06e29d100c0','https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html','http://www.debian.org/security/2017/dsa-3893','https://security.gentoo.org/glsa/201710-28',,'https://security-tracker.debian.org/tracker/CVE-2016-4000','https://snyk.io/vuln/SNYK-JAVA-ORGPYTHON-31451','https://www.oracle.com/security-alerts/cpuapr2020.html','https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html','https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html','https://lists.apache.org/thread.html/0919ec1db20b1022f22b8e78f355667df74d6142b463ff17d03ad533@%3Cdevnull.infra.apache.org%3E'],'DESC':'Jythonbefore2.7.1rc1allowsattackerstoexecutearbitrary''codeviaacraftedserializedPyFunctionobject.','ID':'CVE-2016-4000','NVD_URL':'https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4000','RELEASE_DATE':'2016/04/12'},1:{'CNA':'RedHat,Inc.','CVE_REF_URL':['http://advisories.mageia.org/MGASA-2015-0096.html','http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html','http://www.mandriva.com/security/advisories?name=MDVSA-2015:158','https://bugzilla.redhat.com/show_bug.cgi?id=947949','http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html'],'DESC':'Jython2.2.1usesthecurrentumasktosettheprivilegesofthe''classcachefiles,whichallowslocaluserstobypassintended''accessrestrictionsviaunspecifiedvectors.','ID':'CVE-2013-2027','NVD_URL':'https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2027','RELEASE_DATE':'2013/02/19'}}TroubleshootingLxml not found ( python <= 3.6 )Make sure pip resolve all the dependencies. If not working install package manually :pip3installlxmlcssselect