Hanno Böck
disable jsonlint test on python 3.5 due to different behavior of json.dumps()
5c7da81 @ 2019-12-12 19:10:28
| freewvsdb | merge detections for punbb and vanillaforums, update | 2019-12-12 18:45:05 |
|---|---|---|
| misc | add helper script for wordpress versions so I don't have to maintain it locally | 2019-05-21 22:52:04 |
| tests | disable jsonlint test on python 3.5 due to different behavior of json.dumps() | 2019-12-12 19:10:28 |
| .gitignore | avoid committing pycache and python objects | 2019-12-12 18:28:04 |
| .travis.yml | install pycodestyle/pyflakes in CI | 2019-12-12 18:52:35 |
| COPYING | License change to cc0 | 2012-07-12 12:34:02 |
| ISSUES | initial commit | 2007-11-01 16:35:50 |
| Makefile | use /var/lib instead of /usr/share | 2019-12-11 18:40:23 |
| README.md | add cleaned up version of FAQ from wiki | 2019-12-07 13:30:52 |
| freewvs | switch to json-based freewvsdb | 2019-12-11 18:39:17 |
freewvs
A local web vulnerability scanner.
freewvs is a tool to search webroots for know vulnerable versions of web applications.
faq
What does freewvs do?
It scans your webroot for known vulnerable versions of popular web applications.
What does the output tell me?
Output looks like this:
Joomla-3 3.9.11 (3.9.13) CVE-2019-18674 /home/joe/websites/joessite/
This says that in /home/joe/websites/joessite/, there's a Joomla installation of version 3.9.11. This version is vulnerable to CVE-2019-18674 and you should update to version 3.9.13.
CVE-2019-XXXX seems to be very minor, at least it doesn't affect me. Am I safe?
No, as freewvs only checks for the latest vulnerabilities. There may be other vulnerabilities in your version not listed by freewvs. The only way to be sure is to check the upstream changelog.
There is no version inside the brackets, what does that mean?
It means your web application has not released a security update. Often this means the software is no longer developed.
misc
freewvs was developed by schokokeks.org hosting.
It's licensed as CC0.