get-cpe 0.6.4

Tools to explore the CPE NVD database
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

# Tyr - get-cpe

## Installation
`cargo install get-cpe`

## Purpose
This command utility allows to run some queries on https://services.nvd.nist.gov/rest/json/cpes/2.0.

## Usage
To explore all options run `get-cpe help`.

To get the CWE description:

```[source, bash]
$ get-cpe id --type soft --vendor microsoft --product office --version 2013 --update sp1
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
```

For searching the list of CPE that are corresponding to a keywords:

```[source, bash]
$ get-cpe search microsoft
...
CPE
 id: cpe:2.3:o:microsoft:windows_10_21h2:10.0.19044.6218:*:*:*:*:x86:*:*
 type: os
 vendor: microsoft
 product: windows_10_21h2
 version: 10.0.19044.6218
 edition: *
 update: *
 language: *
 ...
```

## NVD api key
It's possible to set a NVD API KEY by setting your key with the `NVD_API_KEY` environment variable.

## Other tool
This tool can be used with `get-cve` tool to retrieve list of fixed CVE for an installed product. To get more information about `get-cve` search `get-cve` on the https://crates.io website for the same author.

## Authors and acknowledgment
Help will be appreciated. All tools will be developed with rust technology.

## License
This project is under MIT license.

## Project status
This project is under development and all contributions are welcome.

These tools are provided without any guaranties.