> Hi, Hi, thank you for your answer.
>all three CVEs are already in the feed as you can see here: >CVE-2015-0051 & CVE-2015-0069 >http://plugins.openvas.org/index.php?oid=805136 Well, not exactly. There is a NVT for these CVEs, but the CVEs are not in the DB. This is the curious thing. $ sqlite3 /usr/local/var/lib/openvas/scap-data/scap.db sqlite> select id,uuid from cves where uuid="CVE-1999-0001"; 1|CVE-1999-0001 sqlite> select id,uuid from cves where uuid="CVE-2015-0051"; sqlite> I updated all the feeds. My website says: - NVT Feed Version: 201506170825 - SCAP Feed Version: 201506101438 - CERT Feed Version: 201506101320 As you can see SCAP and CERT are older than NVT. If I search the NVT in my local server using the web interface, it doesn't appear (!?). But if I look for it in the cmd it's there: /usr/local/var/lib/openvas/plugins$ grep 805136 -Rl | grep .nasl ./2015/gb_ms15-009.nasl Any clue on this? More info: I updated the feeds with: $ openvas-scapdata-sync $ openvas-nvt-sync $ openvas-certdata-sync Then I updated again using the web interface. I tried also downloading http://www.openvas.org/openvas-nvt-feed-current.tar.bz2 But it has "just" the NVTs. I restarted the server, but same result. The NVT is in my FS but doesn't appear in the search results in my local server using the web interface. The CVEs are not in the (local) DB. Any ideas? >> Anybody knows why some CVEs like those are not in the feed? > >If a CVE is missing it mostly has an simple answer: >No one had the time yet to implement it :-) :-) >> Is there anyway of adding (contribute) the lost CVEs to the feeds?>> Is there anyway of adding "manually" the lost CVEs to an implementation? > >Most infos how to write NVTs are collected here: >http://openvas.org/nvt-dev.html Again, this is for implementing NVTs. My question is how to include CVEs. Any hint here? Thank you >Chris Kind Regards A.
_______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
