Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
Security automation content in SCAP, Bash, Ansible, and other formats
cve-search - a tool to perform local searches for known vulnerabilities
NIST Certified SCAP 1.2 toolkit
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
Mapping the information system / Cartographie du système d'information
SBOM, provenance, dependency graph, and vulnerability tools for Nix.
A simple Java command-line utility to mirror the CVE JSON data from NIST.
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
PatrowlHears - Vulnerability Intelligence Center / Exploits
Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds
Original & most popular Helm Chart / Container for GenieACS
Tool to guess CPE name based on common software name
A suite of Chef cookbooks that we use to manage our fleet of client devices
The clever vulnerability dependency finder
Repository for the IPvSeeYou talk at Black Hat 2021
Open Source Tool - Cybersecurity Graph Database in Neo4j
To associate your repository with the cpe topic, visit your repo's landing page and select "manage topics."