4 matches found
fleet-cve-scanner
fleet-cve-scanner 一个轻量开源、单脚本的CVE扫描器,专为RMM管理的设备集群而设计。纯PowerShell 7,无需代理、无需设备、无需许可费用。 对于您管理的每台终端上的每款软件,它只回答一个问题:已安装的版本是否已知存在漏洞,以及紧急程度如何? —— 通过将RMM的软件清单与免费、权威的安全数据源进行关联: NIST NVD —— 已知CVE及受影响的版本范围 CISA KEV —— 实际在野外被利用(绕过评分阈值) EPSS —— 未来30天内被利用的概率 CISA SSVC —— 操作/关注/跟踪优先级决策 MSRC —— 证明微软补丁已覆盖该发现...
On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)
On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...
CBL Mariner 2.0 Security Update: curl (CVE-2024-6197_-_A)
The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6197-A advisory. - NIST NVD Details CVE-2024-6197 Note that Nessus has not tested for this issue but has instead relied only on...