Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not reporting all CVEs #153

Open
infosecmatters2021 opened this issue Sep 6, 2024 · 0 comments
Open

Not reporting all CVEs #153

infosecmatters2021 opened this issue Sep 6, 2024 · 0 comments

Comments

@infosecmatters2021
Copy link

Several CVEs are not returned when queried. Why won't the API return the information? It is available via the Microsoft Security Catalog.

Go to https://msrc.microsoft.com/update-guide/vulnerability
Select 2016 as the date range
Click Vulnerabilities tab and sort by CVE
No CVE-2016-0099

https://www.cve.org/CVERecord?id=CVE-2016-0099
Links to https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032
Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms16-032

Same result using PowerShell:
Get-MsrcSecurityUpdate -Vulnerability CVE-2016-0099
Get-MsrcSecurityUpdate : HTTP Get failed with status code NotFound: Not Found

Other examples:

CVE-2014-1812 - KB2928120
NIST - https://nvd.nist.gov/vuln/detail/CVE-2014-1812
Microsoft Security Bulletin MS14-025 - Important | Microsoft Learn: https:/learn.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025
Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms14-025

CVE-2015-2426 - KB3079904
Microsoft Security Bulletin MS15-078
https://www.catalog.update.microsoft.com/Search.aspx?q=ms15-078

CVE-2015-2387 - KB3077657
Microsoft Security Bulletin MS15-077
...

CVE-2015-1635 - KB3042553
Microsoft Security Bulletin MS15-034
...

CVE-2014-6324 – KB3011780
Microsoft Security Bulletin MS14-068
...

CVE-2014-6352 - KB3010788
Microsoft Security Bulletin MS14-064
...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant