1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
# SPDX-License-Identifier: AGPL-3.0-or-later
"""National Vulnerability Database (it)"""
from urllib.parse import urlencode
from datetime import datetime
from searx.result_types import EngineResults
about = {
"website": 'https://nvd.nist.gov',
"wikidata_id": "Q6979334",
"official_api_documentation": None,
"use_official_api": False,
"require_api_key": False,
"results": "JSON",
}
base_url = "https://nvd.nist.gov/extensions/nudp/services/json/nvd/cve/search/results"
categories = ['it']
paging = True
results_per_page = 10
def request(query, params):
start_index = (params["pageno"] - 1) * results_per_page
query_params = {
"resultType": "records",
"keyword": query,
"rowCount": results_per_page,
"offset": start_index,
}
params["url"] = f"{base_url}?{urlencode(query_params)}"
params['headers']['Referer'] = "https://nvd.nist.gov/vuln/search"
return params
def response(resp) -> EngineResults:
results = EngineResults()
search_res = resp.json()
for item in search_res['response'][0]['grid']['vulnerabilities']:
cve_id = item["cve"]["id"]
description = item["cve"]["descriptions"][0]["value"]
date = datetime.fromisoformat(item["cve"]["published"])
# Extract severity (Low, Medium, High, or Critical) and CVSS score, if available
info = item["cve"].get("metrics", {}).get("cvssMetricV31", [{}])[0].get("cvssData", {})
severity = info.get("baseSeverity")
cvss_score = info.get("baseScore")
metadata = ""
if severity and cvss_score is not None:
metadata = f"Severity: {severity} | CVSS Score: {cvss_score}"
results.add(
results.types.MainResult(
url=f'https://nvd.nist.gov/vuln/detail/{cve_id}',
title=cve_id,
publishedDate=date,
metadata=metadata,
content=description,
)
)
return results
|
