koutto / cvedetails-lookup Goto Github PK

└──╼ $python3 cvedetails-lookup.py --product IIS --version 7.5
[*] Looking for "IIS 7.5" in cvedetails.com database...
Traceback (most recent call last):
  File "cvedetails-lookup.py", line 274, in <module>
    versions_results = parse_html_table_versions(resp)
  File "cvedetails-lookup.py", line 141, in parse_html_table_versions
    for row in table_results.findAll('tr')[1:]:
AttributeError: 'NoneType' object has no attribute 'findAll'

$ ./cvedetails-lookup.py --vendor Icinga --product Icinga --version '2.8.1'
[*] Looking for "Icinga Icinga 2.8.1" in cvedetails.com database...
[+] Exact match found in the database
[*] IDs summary: Vendor=Icinga [11416] | Product=Icinga [20917] | Version=2.8.1 [351579]
[*] Fetch results for version id 351579 ...
[+] Total number of CVEs fetched: 3
[*] Results ordered by published date (desc):
+---------------+------+------------+----------------------------------------------------------------------------------+----------------------------------------------+----------+
| ID            | CVSS | Date       | Description                                                                      | URL                                          | Exploit? |
+---------------+------+------------+----------------------------------------------------------------------------------+----------------------------------------------+----------+
| CVE-2018-6536 | 4.9  | 2018-02-02 | An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an       | http://www.cvedetails.com/cve/CVE-2018-6536/ | None     |
|               |      |            | icinga2.pid file after dropping privileges to a non-root account, which might    |                                              |          |
|               |      |            | allow local users to kill arbitrary processes by leveraging access to this non-  |                                              |          |
|               |      |            | root account for icinga2.pid modification before a root script executes a        |                                              |          |
|               |      |            | "kill `cat /pathname/icinga2.pid`" command, as demonstrated by         |                                              |          |
|               |      |            | icinga2.init.d.cmake.                                                            |                                              |          |
+---------------+------+------------+----------------------------------------------------------------------------------+----------------------------------------------+----------+
| CVE-2018-6535 | 4.3  | 2018-02-27 | An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time | http://www.cvedetails.com/cve/CVE-2018-6535/ | None     |
|               |      |            | password comparison function can disclose the password to an attacker.           |                                              |          |
+---------------+------+------------+----------------------------------------------------------------------------------+----------------------------------------------+----------+
| CVE-2018-6533 | 7.2  | 2018-02-27 | An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf    | http://www.cvedetails.com/cve/CVE-2018-6533/ | None     |
|               |      |            | file, Icinga 2 can be run as root. Following this the program can be used to run |                                              |          |
|               |      |            | arbitrary code as root. This was fixed by no longer using init.conf to determine |                                              |          |
|               |      |            | account information for any root-executed code (a larger issue than              |                                              |          |
|               |      |            | CVE-2017-16933).                                                                 |                                              |          |
+---------------+------+------------+----------------------------------------------------------------------------------+----------------------------------------------+----------+