I have been working with the NIST – NVD API v2 and I have noticed that the temporal metrics "remediationLevelType" and "exploitCodeMaturityType" are missing in ALL CVEs that I have searched for using the NVD API.
Althou…
Is there a good best practice for container vulnerability management when you are not a dev shop?
I am currently trying to figure out how to set up a proper supply chain risk management system for a company that only consumes docker images…
Is it possible to filter CVEs by affected platform/OS?
Some sources do provide this, like exploit-db, but the main vulnerability source NVD, National Vulnerability Database, doesn’t seem to have such category or filter for neither CVEs or …
EDIT: I’ve looked into the issue more and I can find some documentation for getting an OAuth token with OpenID Connect but not with OpenID 2.0. Can it be done?
We have a server application that is returning our OAuth tokens using the Pytho…
I am using freeradius to test EAP-TLS. Authorization only succeeds if I specify an identity. It doesn’t even have to match any fields in the client certificate. Why is that required if I have a cert and private key? I know the EAP protocol…
I would like to get the "pulses" of the last 24h from the Alienvault OTX API, as a free user.
I tried using /api/v1/pulses/subscribed with the modified_since: parameter. As the name suggests this does not return new pulses, only …
