Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improved the alt-text in Architecture and Metrics in Manual.md, solves #4604 #4650

Merged
merged 1 commit into from
Dec 24, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
73 changes: 63 additions & 10 deletions doc/MANUAL.md
Original file line number Diff line number Diff line change
Expand Up @@ -584,25 +584,25 @@ EPSS bridges this gap by incorporating up-to-date threat information from CVE an

- Console

![console table](images/metric/console_table.png)
![Console output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/console_table.png)

![console metric table](images/metric/metric_table.png)
![Console output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/console_table.png)

- HTML

![HTML metric table](images/metric/HTML.png)
![HTML output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/HTML.png)

- PDF

![PDF metric table](images/metric/PDF.png)
![PDF output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/PDF.png)

- CSV

![CSV metric table](images/metric/CSV.png)
![CSV output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/CSV.png)

- JSON

![JSON metric table](images/metric/JSON.png)
![JSON output showing a table with columns for CVE Number, Severity, EPSS Score, and Exploitability, listing vulnerabilities found by the CVE Binary Tool. The table includes rows with specific CVE details, their associated severity levels, EPSS scores indicating the likelihood of exploitation, and exploitability status.](images/metric/JSON.png)

- JSON2

Expand Down Expand Up @@ -1163,15 +1163,68 @@ haxx,curl,7.34.0,CVE-2014-0139,MEDIUM,Unexplored,

4. `--format html` - creates a report in html format according to the specified HTML theme.

![image](images/html_preview.png)
<figure>
<img src="images/html_preview.png"
alt="cve-bin-tool: Report Generated: 2022-07-27
CVE Summary:
Severity, Count
CRITICAL, 12
HIGH, 18
MEDIUM, 15
LOW, 4
CVE Remarks:
Remark, Count
NEW, 26
CONFIRMED, 3
MITIGATED, 4
UNEXPLORED, 16
IGNORED, 0
Scanned Files:
Vulnerable Files: 6
No Known Vulnerabilities: 0
Product CVEs:
Product, Version, CVE Count
haxx-curl, 7.59.0, 25
haxx-libcurl, 7.59.0, 10
mit-kerberos, 5-1.15.1, 8
libjpeg-turbo, 2.0.1, 2
ssh-ssh2, 2.0, 1"
style="width:100%;white-space:pre;">
<figcaption>formated HTML report</figcaption>
</figure>

The unexplored and new CVEs will be highlighted, it will look something like this:

![image](images/html_highlight.png)
<figure>
<img src="images/html_highlight.png"
alt="cve-bin-tool: Report
Vendor, Product, Version, CVE count,
libjpeg-turbo, libjpeg-turbo, 2.0.1, 4,
haxx, curl, 7.59.0, 26,
haxx, libcurl, 7.59.0, 10,
mit, kerberos_5, 5-1.15.1, 2,
mit, kerberos, 1.15.1, 3,
sun, sunos, 5.4, 127,
ssh, ssh2, 2.0, 4"
style="width:100%;white-space:pre;">
<figcaption>formated HTML report</figcaption>
</figure>

You can also filter scanned products by remark:

![image](images/html_filter.png)
<figure>
<img src="images/html_highlight.png"
alt="cve-bin-tool: filtered report
all,new,confirmed,mitigated,unexplored,ignored
filtered by remark: unexplored
Vendor, Product, Version, CVE count,
libjpeg-turbo, libjpeg-turbo, 2.0.1, 4,
haxx, libcurl, 7.59.0, 10,
mit, kerberos, 1.15.1, 3,
"
style="width:100%;white-space:pre;">
<figcaption>formated HTML report</figcaption>
</figure>

5. `--format pdf` - creates a report in PDF format.

Expand Down
Loading