16

In order to be informed about critical vulnerabilities in selected products I'd want to subscribe to some list about them. I'd want to configure the list of products by myself.

The question: Where can I get security breach alerts? gives information on general lists, however these provide vulnerability information across all products the list knows about, and all I want to see are advisories about the products/applications/services in my network.

Can I subscribe to CVEs for specific products?

closed as off-topic by schroeder Nov 27 '17 at 21:07

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

12

Go to CVE Details' Product or Vendor pages. There is "Vulnerability Feeds & Widgets" link there.

It allows you to subscribe to CVEs about selected vendor/product.

  • 3
    You need search for the vendor and replace the vendor ID within the general URL: cvedetails.com/… E.g. Apache vendor: cvedetails.com/vendor/45/Apache.html You RSS URL is cvedetails.com/… – Michael Apr 28 '13 at 10:41
  • 2
    You can then take the RSS feed created by cvedetails and put it into an ifttt.com (or something similar) recipe so that it sends you notifications of your choice (e.g. tweets, emails etc). – user30473 Oct 29 '15 at 15:58
  • CVE Details seems to be pretty neglected. I see recent CVEs in the database, but the site's registration page has been broken for months. Doesn't exactly promote confidence in the quality of the service. – Phil May 14 '18 at 13:06
  • @Michael +1 for the hack – talonx Nov 20 '18 at 6:16
  • I just went there to check for CVE-2019-5736 (docker/runc, Feb-11th 2019) but it only has vulnerabilities up until 2018. – jotadepicas Feb 13 at 19:33
2

secunia makes a commercial product that does exactly what you want.

"The Secunia VIM lets you create specific vulnerability management reports for different product categories across your entire IT infrastructure by filtering criteria. So you only get vulnerability alerts and intelligence relevant to your specific needs."

2

It is possible to make a custom list of products / vendors / keywords using Cassandra service from Purdue University. It is free and allows updates to be emailed.

0

You can subscribe to this mailing list "bugtraq@securityfocus.com". A lot of vendors and researchers keep updating about new vulnerabilities.

Not the answer you're looking for? Browse other questions tagged or ask your own question.