More vulnerabilities found
21 May 2024
As you might notice in the software vulnerabilities and weekly reports, as of last weekend ShadowTrackr finds more vulnerabilities. The CVE database is completely renewed, and with it we have a new version matching algorithm that is better than the previous one.
The vulnerabilities are still shown in the same way as before, it's just that more are detected.
One thing that is different is that the CVE database is also available as an index in ShadowTrackr, and you can query it if you want, for instance:
index=cves product=nginx cvss_score>8
Or:
index=cves product=php version=8.2.8
The primary reason to create and index for the CVEs is to be able to us it in reports. Some additional information still needs to be added for that to be really useful, but the first steps have been taken now :-)