EUVD integration into VulnDB

[Hubtrick-Git]

Features

Alias Mapping:

~ Approx: 340k euvd aliases

• We now also synchronize the alias mapping csv file from the EUVD:

1. First fetch the euvd csv file and convert to euvd_relationship objects
2. Insert those into a staging table
3. Insert into the cve_relationships table while resolving the cves to their downstream relations

EUVD KEV

• We now synchronize KEV data from the EUVD as well. The EUVD lists multiple sources which then correspond to the respective columns in the cves table (cisa_date_added, euvd_date_added).

Discussion

• Merge both CISA KEV and EUVD KEV into a single KEV file?
• VulnDB als eigenes Tool? Unabhängig von DevGuard releases
• Backward compatibility?
  • Roll out a new vulnerability database version

TO-DO:

• Implement alias mapping for euvd KEV data as well
• Implement euvd into backend information stream
• Add euvd information to relevant frontend pages