Vulners
Overview
Vulners is a vulnerability intelligence database and API that aggregates CVEs, security bulletins, advisories and public exploits. The Vulners transforms let you search that database directly from the Maltego graph. They return:
- CVEs affecting a given software name and version
- Exploits (as URLs) for a given software product or CVE
- Vulners documents (bulletins) for a given CVE or CPE
- CVSS and EPSS scores for a CVE
- The CVEs, affected software and reference links contained in a Vulners document
Vulners Transforms
Search for exploits by software [Vulners]
Searches the Vulners database for exploits for a software product. The query is the software name, followed by the version if one is set on the input entity.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Search for exploits by software [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_exploit_from_software |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.Software |
Output Entities | maltego.URL |
Short Description | Searches Vulners database for exploits |
Search for vulnerabilities by software [Vulners]
Searches the Vulners database for vulnerabilities affecting a software product. Both the software name and the version must be set on the input entity.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Search for vulnerabilities by software [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_vulnerability_from_software |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.Software |
Output Entities | maltego.CVE |
Short Description | Searches Vulners database for vulnerabilities |
Search for CPE [Vulners]
Finds Vulners documents (vulnerability bulletins) for a CPE. If the CPE entity has no version, the version is taken from the CPE string.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Search for CPE [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_document_from_cpe |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.CPE |
Output Entities | maltego.vulners.Document |
Short Description | Find software vulnerability documents using CPE |
Extract CVE from Vulners Document [Vulners]
Extracts the CVEs listed in a Vulners document. Where the document carries a CVSS score, it is set on each CVE. This transform works on the data already in the document and makes no call to the Vulners API, so it needs no API key.
Transform Meta Info
Information | Value |
Display Name | Extract CVE from Vulners Document [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_cve_from_vulners_document |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.vulners.Document |
Output Entities | maltego.CVE |
Short Description | Extract CVEs from given Vulners document |
Extract Software from Vulners Document [Vulners]
Extracts the affected software (name and version) listed in a Vulners document. This transform works on the data already in the document and makes no call to the Vulners API, so it needs no API key.
Transform Meta Info
Information | Value |
Display Name | Extract Software from Vulners Document [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_software_from_vulners_document |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.vulners.Document |
Output Entities | maltego.Software |
Short Description | Extract software from given Vulners document |
Get References to Vulners Document [Vulners]
Finds the references (links to advisories, patches and related resources) for a Vulners document and returns them as URLs, each with its CVSS score and type as properties.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Get References to Vulners Document [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_reference_from_vulners_document |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.vulners.Document |
Output Entities | maltego.URL |
Short Description | Find references to Vulners Document in Vulners database |
Get CVSS from CVE [Vulners]
Finds the CVSS v3 information for a CVE. The input CVE is returned with its CVSS score and rating colour set, together with a CVSS entity. If the CVE already carries CVSS v3 data (for example from another Vulners transform), that data is used and the API is not called.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Get CVSS from CVE [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_cvss_from_cve |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.CVE |
Output Entities | maltego.CVSS, maltego.CVE |
Short Description | Find CVSS info for given CVE in Vulners database |
Get EPSS from CVE [Vulners]
Finds the EPSS (Exploit Prediction Scoring System) information for a CVE. The input CVE is returned with its EPSS value set, together with an EPSS entity. If the CVE already carries EPSS data, that data is used first.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Get EPSS from CVE [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_epss_from_cve |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.CVE |
Output Entities | maltego.EPSS, maltego.CVE |
Short Description | Find EPSS info for given CVE in Vulners database |
Search database for information on CVE [Vulners]
Finds the Vulners document for a CVE. The document holds the title, description, publication dates, CVSS and EPSS data, CPEs, CWEs, related CVEs and affected software, and is the starting point for the *Extract* and *Get References* transforms.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Search database for information on CVE [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_vulners_document_from_cve |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.CVE |
Output Entities | maltego.vulners.Document |
Short Description | Find document for given CVE in Vulners database |
Search for Exploits [Vulners]
Searches the Vulners database for exploits for a CVE.
Transform Settings
Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
Vulners API Key | string | true | false | false |
Transform Meta Info
Information | Value |
Display Name | Search for Exploits [Vulners] |
Transform Name | maltego.jinxpy_vulners.to_exploit_from_cve |
Author | Maltego Technologies |
Data Source | Vulners |
Input Entities | maltego.CVE |
Output Entities | maltego.URL |
Short Description | Searches Vulners database for exploits |