cvebrowser - A CVE web browser / News: Recent posts

The project will get a reboot after all these years, please look here for the legacy code as well for new updates:

https://github.com/kodegeek/CVEBrowser

--Jose

Well, it was a nice ride. I had fun working on this but I need to move into something else and the fact that Mitre is changing the format of their CSV files (is several ways) is the perfect excuse to do it.

I added some small fixes on CVS, related mostly with compilation errors.

Anyway, feel free to drop a note if you're interested to work on this project.

Yup, after all this time I decided I will retake coding on the project; There are some changes comming:
1. General code cleanup. Yup, there are some little nasty things in there.
2. Changes on the importer and the database schema. The CVE mitre project is changing their format, now the CAN word is being dropped and an extra field is being added. The database schema will relfect this changes and the rest of the code too. Sorry, no backwards compatiblity as I haven't got any feedback on who is using the system out there.
3. General improvements. Yup, will provide more installers (besides RPM), will cleanup the test cases, and will use tag libs among other things to improve the project.... read more

The first stable version is out. If you know how to program in Java, then you're invited to help.

Drop me a note and we can arrange something :)

Yes, after all this time I finally have a version for you to try; Hopefully over time small bugs will be discovered and fixed so the software is more stable. Right now the version works as intended and I hope it is usefull to the whole community of system administrators out there.

Enjoy and don't forget to report the bugs.

Jose V Nunez Z.

So far the project works pretty well, and I'm more happy with the way it looks on my computer.

Now I will focus on getting the documentation done.

I decided to improve the looks of the project, so I used a CSS stylesheet. Now it looks much better, so I had left on the files section a new mock screenshots and also captured the screens.

I already changed the JSP but I need to test if it works, if so I will do a new file release.

Well, at last a fully functional beta was released. Still appearance and navigation require work, and the user manual is half done but at least now you can play with the search engine.

Please let me know if you find any Bugs so I can fix them.

Yup, the project is not waporware!. Look at the (very simple) screenshots to get an idea of what the search engine looks like.

I'm focused on cleaning the most outstanding bugs before the next file release. If interested and cannot wait, check the CVS repository.

Yup, saddly I lost the original one so I uploded a new one. Sorry for the inconvenience this may cause to you.

I did some cleanup on the project building and scripts; The only usable part of this release is the tools, the web part code is finished but ussage of the new database connection pool is untested. Also the documentation is incomplete.

I plan also to do smaller releases from now on. All the changes of this release are also on CVS as well.

In the next days I'll be working on cleaning up the code; So far I fixed some memory leaks (still more to go), removed not needed imports, fixed the build to make it work bettwe with the Sun Web services JDK.

The last two months has been a killer for me; I'm re-designing my company network arquitecture, moving our development network to a new provider, designing a new firewall cluster, migrating all the databases (prod and dev) to a new version, hiring more people to help me out.... read more

Now all the RPMS were merged together into a more simple and easy to manage RPM spec file. Also several bugs on the search engine were fixed and the changes were commited to CVS.

There is still a bug on the test cases for the web engine and also the custom connection pool will be removed to use instead an external JNDI connecting pool.

I fixed several bugs related with the basic search engine, the RPM packaging and the unit tests. Now I'm working to fix all the bugs with the servlet that calls the search engine to then finally move to the last steps before the first release.

Moralle of the story: have a RAID1 machine or good backups!.

It has been a nightmare for the last 2 months; I have been without a laptop for almost 2 months, just when I was almost finishing the last details of the project. Some of the code was never commited on CVS so I have to rewrite those pieces from scratch (yeah, the last backups were 2 weeks old).

Also I was busy getting my third Java certification as Java Web Component Developer. I passed, thanks to this project.... read more

Yup. This is the third time I sent my laptop to CompUSA for repairings (defective hardrive). Has been almost two months without it and the other one (a Toshiba) has only Windows, so the final touches will be delayed until I got my machine back.

I'll keep you guys posted.

JV.

The project now is on beta status. The basic functionality works and the only missing part is the navigation among results on the lower part of the search engine.

No RPMS yet, if you want to get the lastes changes you will have to use CVS. This week hopefully this last piece of the software will be added and the beta RPMS will be released.

JV.

The search engine is still not complete (I'm full hands on my daily job rigth now) and because a lot of people doesn't use CVS to access the code I decided to make it available as a file release.

The command line tools code can be considered beta, but the documentation and the web search engine still require a lot of work.

JV.

The Mr. project file has been updated with the new tasks to be done for the project in order to get the beta published!.

Here is a direct link if you're interested:

http://cvebrowser.sourceforge.net/design/project.html

JV.

If you were following the release date of the beta version of the search engine, you noticed than no new releases have been made on CVS nor to direct download; The last month was a very busy one for me and also I decided to take a well deserved vacation to visit my parents :).

I will update the new milestones on the Mr. Project file soon and hopefully the Beta code will be available for all to test and play (there is a lot of new code, but I havent put any of it on CVS).... read more

Now CVEBrowser is listed on the dmoz.org directory:

http://dmoz.org/Computers/Security/Advisories_and_Patches/Third-Party/

I'm working rigth now with Cactus to test servlet code. Hopefully will commit it on CVS soon, stay tunned.

JV.

This is a big update. A candidate release of the search engine is now on CVS, plus some modifications to the XML i mporter wich now is more resistant to bad XML data.

Hopefully in the next couple of days the web search engine (finally) will take form.

For those interested in the code, check the CVS repository.

The development of the web components has started; Some basic components are ready (like the connection pool and the data validators) and others are under way.

Also the project will start using HttpUnit and cactus to test the server side components more appropiately (i feel than using mock objects will not be very helpfull this time).

I hope to have something on CVS soon, stay tunned.

Now the RPM and Jar files are signed (using keytool and GPG). Also changes were made to the documentation showing how to check the certificates of the application.