Juan Fernandez
56ed2727b5
Updated translation rules so that Docker Desktop can be mapped to the proper CPE ( #10326 )
...
Updated translation rules so that Docker Desktop can be mapped to the proper CPE.
2023-03-09 17:46:57 -04:00
Juan Fernandez
7e366272c0
Feature 9386: Parse the Mac Office release notes for vulnerability processing ( #9993 )
...
This PR adds the capability of parsing the release notes posted in https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac into a JSON metadata file (to be released in the NVD repo) and use it for detecting vulnerabilities on Mac Office apps.
2023-02-24 14:18:25 -04:00
Benjamin Edwards
0db432f7e3
vuln processing distinct command ( #9813 )
...
closes https://github.com/fleetdm/fleet/issues/3723
Add new vuln processing command, configs, and documentation on how to utilize.
2023-02-17 10:00:57 -05:00
Juan Fernandez
e376d53294
Bug 9386: Docs chrome extension has the wrong CPE. ( #9524 )
...
Related to #9386 - this should fix one of the three reported problems.
* Add the ability to add exclusion rules to cpe_translations.
* Added exclusion rule for Docs chrome extension.
2023-01-27 15:11:20 -04:00
Lucas Manuel Rodriguez
f64ba83b2e
Make test more stable ( #9162 )
2023-01-03 16:39:28 -03:00
Lucas Manuel Rodriguez
ac22aadc13
Fleet server and tooling to use NETWORK_TEST_GITHUB_TOKEN when environment variable is set. ( #9143 )
...
* WIP
* Add more logging
* Check rate limit at end of action
* Add github client in more places
* Add new published firefox 93 vulnerabilities to tests
* Remove fmt printfs
* Restore CI check settings
* Readd newline
2023-01-03 14:56:11 -03:00
gillespi314
6fb3a87ae9
Enable errcheck linter for golangci-lint ( #8899 )
2022-12-05 16:50:49 -06:00
Juan Fernandez
53e112d264
Feature 7494: Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities ( #7889 )
...
Use the MSRC security bulletin artifacts for detecting Win OS vulnerabilities
2022-10-28 11:12:21 -04:00
Juan Fernandez
9444016571
Fixed bug with CPE matching, UTM.app was matching to the incorrect CPE ( #8149 )
...
Fixed bug with CPE matching, UTM.app was matching to the incorrect CPE.
2022-10-24 12:46:18 +00:00
Juan Fernandez
582772fbee
Fixed bug with duplicated vulnerabilities ( #8089 )
...
Previous code assumed CVEs were unique per NVD file, which was incorrect.
2022-10-05 19:48:37 -04:00
Martin Angers
ec75fb10b2
Fix CI tests for Go ( #8079 )
2022-10-04 15:48:14 -04:00
Juan Fernandez
812d3c85de
Fixes various bugs with NVD vulnerability detection ( #7963 )
...
- Improved NVD CPE matching process.
- Fixed bug with the 'software/<id>' endpoint not showing the generated_cpe value.
2022-10-04 07:04:48 -04:00
