CVE Cross Reference
Common Vulnerability Exposure (CVE) data is updated dynamically by SAINT® as part of each release/update cycle. The Generated Date (by MITRE) and Updated Date (collected by SAINT®) are stored with CVE content created as part of this update process. The following describe how to access the generated and updated dates for CVEs:
- Go to the command prompt and navigate to the SAINT installation directory.
- Navigate to the config subdirectory.
- Open either the cve-cpe or cve-cvss file in the config subdirectory.
- View the Generated and Updated dates for the CVE content in the lines
prefixed with the '#' character, for example:
# nvdcve-2.0-2002.xml Generated Date: xxxx-xx-xx
Note that every such line contains the name of the source file from which the data following that line was extracted, along with both the generated and updated dates for the source file.
The CVE Cross Reference is separated into files by the year of the CVEs. The CVEs section includes:
- the CVE ID number, with a hyperlink to the source CVE at http://cve.mitre.org
- a column indicating whether the vulnerability is in the SANS Twenty Most Critical Internet Security Vulnerabilities
- a column indicating the SAINT vulnerability check ID which must be run in order to detect that CVE
SAINT vulnerability check IDs which have not been assigned a CVE number are listed on the final page.
CVEs from 1999
CVEs from 2000
CVEs from 2001
CVEs from 2002
CVEs from 2003
CVEs from 2004
CVEs from 2005
CVEs from 2006
CVEs from 2007
CVEs from 2008
CVEs from 2009
CVEs from 2010
SAINT Tutorials with no CVE assigned