package
0.29.0
Repository: https://github.com/future-architect/vuls.git
Documentation: pkg.go.dev

# Functions

ConvertFortinetToModel convert Fortinet to CveContent.
ConvertJvnToModel convert JVN to CveContent.
ConvertMitreToModel convert Mitre to CveContent.
ConvertNvdToModel convert NVD to CveContent.
GetCveContentTypes return CveContentTypes.
IsKernelSourcePackage check whether the source package is a kernel package.
IsRaspbianPackage judges whether it is a package related to Raspberry Pi from the package name and version.
NewCveContents create CveContents.
NewCveContentType create CveContentType.
NewPackages create Packages.
NewPortStat create a PortStat from ipPort str.
RenameKernelSourcePackageName is change common kernel source package.

# Constants

Alma is Alma.
Amazon is Amazon Linux.
ChangelogExactMatchStr :.
ChangelogRoughMatchStr :.
No description provided by the author
CVSS2 means CVSS version2.
CVSS3 means CVSS version3.
CVSS40 means CVSS version4.0.
Debian is Debian.
DebianSecurityTracker is Debian Security tracker.
DebianSecurityTrackerMatchStr :.
DiffMinus is resolved CVE.
DiffPlus is newly detected CVE.
FailedToFindVersionInChangelog :.
FailedToGetChangelog :.
Fedora is Fedora Linux.
Fortinet is Fortinet.
FortinetExactVersionMatchStr :.
FortinetRoughVersionMatchStr :.
FortinetVendorProductMatchStr :.
GitHub is GitHub Security Alerts.
GitHubMatchStr :.
Inactive is a inactive status in WPPackage struct.
JSONVersion is JSON Version.
Jvn is Jvn.
JvnVendorProductMatchStr :.
Microsoft is Microsoft.
Mitre is Mitre.
Nvd is Nvd JSON.
NvdExactVersionMatchStr :.
NvdRoughVersionMatchStr :.
NvdVendorProductMatchStr :.
Oracle is Oracle Linux.
OvalMatchStr :.
PkgAuditMatchStr :.
RedHat is RedHat.
RedHatAPI is RedHat.
RedHatAPIStr is :.
Rocky is Rocky.
SUSE is SUSE Linux.
Trivy is Trivy.
TrivyAlma is TrivyAlma.
TrivyAlpine is TrivyAlpine.
TrivyAmazon is TrivyAmazon.
TrivyArchLinux is TrivyArchLinux.
TrivyAzure is TrivyAzure.
TrivyBitnamiVulndb is TrivyBitnamiVulndb.
TrivyCBLMariner is TrivyCBLMariner.
TrivyCentOS is TrivyCentOS.
TrivyChainguard is TrivyChainguard.
TrivyDebian is TrivyDebian.
TrivyFedora is TrivyFedora.
TrivyGHSA is TrivyGHSA.
TrivyGLAD is TrivyGLAD.
TrivyGoVulnDB is TrivyGoVulnDB.
TrivyK8sVulnDB is TrivyK8sVulnDB.
TrivyMatchStr :.
TrivyNodejsSecurityWg is TrivyNodejsSecurityWg.
TrivyNVD is TrivyNVD.
TrivyOracleOVAL is TrivyOracle.
TrivyOSV is TrivyOSV.
TrivyPhoton is TrivyPhoton.
TrivyPhpSecurityAdvisories is TrivyPhpSecurityAdvisories.
TrivyRedHat is TrivyRedHat.
TrivyRedHatOVAL is TrivyRedHatOVAL.
TrivyRocky is TrivyRocky.
TrivyRubySec is TrivyRubySec.
TrivySuseCVRF is TrivySuseCVRF.
TrivyUbuntu is TrivyUbuntu.
TrivyWolfi is TrivyWolfi.
Ubuntu is Ubuntu.
UbuntuAPI is Ubuntu.
UbuntuAPIMatchStr :.
Unknown is Unknown.
No description provided by the author
WindowsRoughMatchStr :.
WindowsUpdateSearchStr :.
WPCore is a type `core` in WPPackage struct.
WPPlugin is a type `plugin` in WPPackage struct.
WpScan is WordPress.
WpScanMatchStr :.
WPTheme is a type `theme` in WPPackage struct.

# Variables

AllCveContetTypes has all of CveContentTypes.
ChangelogExactMatch is a ranking how confident the CVE-ID was detected correctly.
ChangelogRoughMatch is a ranking how confident the CVE-ID was detected correctly.
DebianSecurityTrackerMatch is a ranking how confident the CVE-ID was detected correctly.
FindLockFiles is a list of filenames that is the target of findLock.
FortinetExactVersionMatch is a ranking how confident the CVE-ID was detected correctly.
FortinetRoughVersionMatch is a ranking how confident the CVE-ID was detected correctly.
FortinetVendorProductMatch is a ranking how confident the CVE-ID was detected correctly.
GitHubMatch is a ranking how confident the CVE-ID was detected correctly.
JvnVendorProductMatch is a ranking how confident the CVE-ID was detected correctly.
NvdExactVersionMatch is a ranking how confident the CVE-ID was detected correctly.
NvdRoughVersionMatch is a ranking how confident the CVE-ID was detected correctly.
NvdVendorProductMatch is a ranking how confident the CVE-ID was detected correctly.
OvalMatch is a ranking how confident the CVE-ID was detected correctly.
PkgAuditMatch is a ranking how confident the CVE-ID was detected correctly.
RedHatAPIMatch is a ranking how confident the CVE-ID was detected correctly.
TrivyMatch is a ranking how confident the CVE-ID was detected correctly.
UbuntuAPIMatch is a ranking how confident the CVE-ID was detected correctly.
WindowsRoughMatch is a ranking how confident the CVE-ID was detected correctly.
WindowsUpdateSearch is a ranking how confident the CVE-ID was detected correctly.
WpScanMatch is a ranking how confident the CVE-ID was detected correctly.

# Structs

AffectedProcess keep a processes information affected by software update.
Alert has CERT alert information.
AlertDict has target cve JPCERT and USCERT alert data.
AttentionCWE has OWASP TOP10, CWE TOP25, CWE/SANS TOP25 rank and url.
Changelog has contents of changelog and how to get it.
CISAKEV has CISA KEV only data.
Confidence is a ranking how confident the CVE-ID was detected correctly Score: 0 - 100.
Container has Container information.
Cpe is Common Platform Enumeration.
CveContent has abstraction of various vulnerability information.
CveContentCpes has CveContentType and Value.
CveContentCvss has CVSS information.
CveContentRefs has CveContentType and References.
CveContentSSVC has CveContentType and SSVC.
CveContentStr has CveContentType and Value.
Cvss has CVSS Score.
CweDictEntry is a entry of CWE.
Dependency has dependency package information.
DependencyGraphManifest has filename, repository, dependencies.
DistroAdvisory has Amazon Linux, RHEL, FreeBSD Security Advisory information.
Exploit :.
GitHubSecurityAlert has detected CVE-ID, GSAVulnerablePackage, Status fetched via GitHub API.
GSAVulnerablePackage has vulnerable package information.
Kernel has the Release, version and whether need restart.
KEV has CISA or VulnCheck Known Exploited Vulnerability.
Library holds the attribute of a package library.
LibraryFixedIn has library fixed information.
LibraryScanner has libraries information.
Metasploit :.
Mitigation has a link and content.
NeedRestartProcess keep a processes information affected by software update.
Package has installed binary packages.
PackageFixStatus has name and other status about the package.
Platform has platform information.
PortStat has the result of parsing the port information to the address and port.
Reference has a related link of the CVE.
ScanResult has the result of scanned CVE information.
SrcPackage has installed source package information.
SSVC has SSVC decision points.
VulnCheckKEV has VulnCheck KEV only data.
VulnCheckReportedExploitation :.
VulnCheckXDB :.
VulnInfo has a vulnerability information and unsecure packages.
WindowsKB has applied and unapplied KBs.
WpPackage has a details of plugin and theme.
WpPackageFixStatus is used in Vulninfo.WordPress.

# Type aliases

Confidences is a list of Confidence.
CveContents has CveContent.
CveContentType is a source of CVE information.
CveContentTypes has slide of CveContentType.
CvssType Represent the type of CVSS.
CweDict is a dictionary for CWE.
DependencyGraphManifests has a map of DependencyGraphManifest key: BlobPath.
DetectionMethod indicates - How to detect the CveID - How to get the changelog difference between installed and candidate version.
DiffStatus keeps a comparison with the previous detection results for this CVE.
DistroAdvisories is a list of DistroAdvisory.
GitHubSecurityAlerts is a list of GitHubSecurityAlert.
KEVType :.
LibraryFixedIns is a list of Library's FixedIn.
LibraryScanners is an array of LibraryScanner.
PackageFixStatuses is a list of PackageStatus.
Packages is Map of Package { "package-name": Package }.
References is a slice of Reference.
ScanResults is a slide of ScanResult.
SrcPackages is Map of SrcPackage { "package-name": SrcPackage }.
VulnInfos has a map of VulnInfo Key: CveID.
WordPressPackages has Core version, plugins and themes.
WpPackageFixStats is a list of WpPackageFixStatus.
WpPackages has a list of WpPackage.