Commit f32a24a0 authored by Alexandre Dulaunoy's avatar Alexandre Dulaunoy
Browse files

References database added in the README

parent b2fc50b3
Loading
Loading
Loading
Loading
+6 −1
Original line number Diff line number Diff line
@@ -94,7 +94,7 @@ The MongoDB database is called cvedb and there are 11 collections:
* capec (Common Attack Pattern Enumeration and Classification) - source NVD NIST
* ranking (ranking rules per group) - local cve-search
* d2sec (Exploitation reference from D2 Elliot Web Exploitation Framework) - source d2sec.com
* [vFeed](https://github.com/toolswatch/vFeed) (cross-references to CVE ids (e.g. OVAL, OpenVAS, ...)) - source [vFeed](https://github.com/toolswatch/vFeed) - proprietary feed - [MITRE Reference Key/Maps](https://cve.mitre.org/data/refs/) is preferred
* [MITRE Reference Key/Maps](https://cve.mitre.org/data/refs/) - source MITRE reference Key/Maps
* ms - (Microsoft Bulletin (Security Vulnerabilities and Bulletin)) - source [Microsoft](http://www.microsoft.com/en-us/download/details.aspx?id=36982)
* exploitdb (Offensive Security - Exploit Database) - source [offensive security](https://github.com/offensive-security/exploit-database)
* info (metadata of each collection like last-modified) - local cve-search
@@ -105,6 +105,11 @@ The Redis database has 3 databases:
* 11: The notification database - source cve-search
* 12: The [CVE reference database](https://cve.mitre.org/data/refs/) is a cross-reference database to CVE ids against various vendors ID - source NVD NIST/MITRE

The reference database has 3 additional sources:

* [MITRE Reference Key/Maps](https://cve.mitre.org/data/refs/).
* Red Hat RPM to CVE database.
* Red Hat RHSA Oval database.

Updating the database
---------------------