CVSS & National Vulnerability Database

CVSS (Common Vulnerability Scoring System) provides a standardized way to assess vulnerability severity. The NVD (National Vulnerability Database) is NIST's comprehensive repository of vulnerability data.

Python Script: Check Latest CVEs

import requests
import json
from datetime import datetime, timedelta

# Get CVEs from last 7 days
end_date = datetime.now()
start_date = end_date - timedelta(days=7)

url = "https://services.nvd.nist.gov/rest/json/cves/2.0"
params = {
    "pubStartDate": start_date.strftime("%Y-%m-%d"),
    "pubEndDate": end_date.strftime("%Y-%m-%d")
}

response = requests.get(url, params=params)
data = response.json()

# Display high/critical vulnerabilities
for vuln in data.get("vulnerabilities", []):
    cve = vuln.get("cve", {})
    metrics = cve.get("metrics", {}).get("cvssMetricV31", [])
    
    if metrics:
        score = metrics[0]["cvssData"]["baseScore"]
        if score >= 7.0:
            print(f"{cve['id']}: {score} - {cve.get('descriptions', [{}])[0].get('value', 'N/A')[:100]}...")

Bash: Monitor Specific Product

#!/bin/bash
# Monitor Apache vulnerabilities

KEYWORD="apache"
SEVERITY_THRESHOLD=7.0

# Query NVD API
RESPONSE=$(curl -s "https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=$KEYWORD")

# Parse and filter by severity
echo "$RESPONSE" | jq -r '.vulnerabilities[] | 
  select(.cve.metrics.cvssMetricV31[0].cvssData.baseScore >= '$SEVERITY_THRESHOLD') | 
  "(.cve.id): Score (.cve.metrics.cvssMetricV31[0].cvssData.baseScore) - (.cve.descriptions[0].value)"' | 
  head -10