vulncheck f9e8464431 fix(android): close ASB/SMR findings once the device has the patch ...

The Android bulletin pass only ever raised findings. A device that
installed the October patch kept every October CVE open forever, since
no scanner looks again at a month the device is no longer behind on.

check_android_cves now retracts android-asb / samsung-smr from findings
whose month (read from the package name, "Android (SMR 2026-10)") is at
or below the device's patch level, and closes them when no other scanner
still reports the CVE, with an audit entry naming the patch level. A CVE
that a month still behind lists again stays open, and so does a row
whose month cannot be read.

The gate is the month, not "not seen this run": the fetched months are
capped at 12 and a failed fetch returns nothing, and both would close
CVEs the device still lacks.

2026-11-04 10:36:33 +01:00

..

test_adobe_matching.py

feat(app-scan): detect Adobe Media Encoder CVEs

2026-10-07 10:29:04 +02:00

test_adobe_media_encoder.py

fix(app-scan): match Adobe's yearly-line Illustrator and Photoshop records

2026-10-07 10:52:50 +02:00

test_adobe_product_split.py

fix(scan): apply the version-shape check to Teams as well

2026-08-10 08:07:42 +02:00

test_adobe_version_scheme.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_adobe_year_lines.py

fix(app-scan): match Adobe's yearly-line Illustrator and Photoshop records

2026-10-07 10:52:50 +02:00

test_advisory_feed_limit.py

feat(advisories): make the per-feed item cap configurable

2026-08-13 12:14:40 +02:00

test_ai_config_encrypted.py

fix(settings): encrypt the AI provider token at rest

2026-11-04 09:03:36 +01:00

test_android_findings_wrong_platform.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_android_patched_close.py

fix(android): close ASB/SMR findings once the device has the patch

2026-11-04 10:36:33 +01:00

test_app_scan_asset_runs_m365.py

fix(app-scan): run the M365 check on a single-asset scan

2026-10-19 14:13:54 +02:00

test_app_scan_intune_opt_out.py

feat(intune): a setting keeps Intune/Defender inventory out of the app-CVE scan

2026-10-29 11:28:36 +01:00

test_apple_model_names.py

fix(mobile-eol): Apple models endoflife.date names differently

2026-11-03 10:35:11 +01:00

test_apple_os_eol.py

feat(eol): lifecycle for iOS, iPadOS and macOS

2026-11-04 08:33:32 +01:00

test_apple_os_train.py

fix(app-scan): Apple CVEs fixed only in the next major match 26.x devices

2026-10-22 09:32:49 +02:00

test_appscan_gui_index_refresh.py

feat(app-scan): the Data-jobs scan rebuilds the CVE indexes first

2026-10-05 14:08:50 +02:00

test_aruba_firmware.py

fix(aruba): map "(AOS-10 & AOS-8)" to aruba-os, mark the Instant AP record reviewed

2026-10-17 11:59:15 +02:00

test_asb_negative_cache.py

fix(android): read a newly published ASB month the next night

2026-11-04 10:36:32 +01:00

test_asset_created_audit.py

feat(audit): log assets created by a sync

2026-09-19 11:31:20 +02:00

test_asset_decommission.py

perf(api): die Requests liefen alle auf dem Event-Loop, also nacheinander

2026-09-10 10:53:23 +02:00

test_asset_duplicate_hostname.py

fix(assets): ein Geraet mit neuer IP legte ein zweites Asset an

2026-09-10 16:15:07 +02:00

test_asset_foreign_device.py

fix(assets): a thin client and a UniFi AP took turns on one asset every night

2026-09-15 09:41:17 +02:00

test_asset_grace_window.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_asset_list_queries.py

feat(assets): sortable Open Vulns column in the asset table

2026-10-31 11:26:31 +01:00

test_asset_namesake_matching.py

fix(assets): die Namensstufe riet bei Namensvettern, und "_" traf "-"

2026-09-14 18:22:42 +02:00

test_asset_reactivation_source.py

fix(assets): "seen again by a source sync" named the one thing nobody could look up

2026-08-31 21:37:15 +02:00

test_asset_shared_ip.py

fix(assets): eine geteilte IP-Adresse legte zwei Geraete auf eine asset_id

2026-09-10 11:34:05 +02:00

test_asset_status_audit.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_assets_csv_export.py

feat(assets): export full inventory as CSV with all fields

2026-08-17 15:56:51 +02:00

test_audit_user_actions.py

feat(auth): passwordless sign-in with passkeys for local accounts

2026-11-03 15:40:31 +01:00

test_audit_who_what_where.py

feat(audit): every user action names who, what changed and from where

2026-10-26 10:24:23 +01:00

test_authenticator_android.py

feat(app-scan): Microsoft Authenticator for iOS via NVD and cvelistV5

2026-11-02 10:04:17 +01:00

test_authenticator_ios.py

fix(app-scan): keep Authenticator's platform-neutral NVD bounds on their own line

2026-11-02 13:38:47 +01:00

test_autodesk_year.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_azure_data_studio.py

feat(app-scan): Azure Data Studio via NVD and cvelistV5

2026-10-23 14:23:00 +02:00

test_blender.py

fix(app-scan): pair Blender's "Blender Foundation" spelling on cvelistV5

2026-10-31 16:23:57 +01:00

test_browser_extensions.py

feat(scan): FortiPAM extension — 7.4 line, CNA cpe for NVD

2026-09-28 09:53:06 +02:00

test_checkmk_version.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_chrome_releases_source.py

feat(app-scan): Chrome CVEs from the Chrome Releases blog

2026-09-24 12:32:56 +02:00

test_chromium_severity.py

fix(severity): read the Chromium severity Google states in prose

2026-07-30 09:06:15 +02:00

test_cisco_firmware.py

fix(cisco): NVD envelope range put CVE-2025-20363 on IOS XE 17.15.6

2026-10-12 11:28:23 +02:00

test_citrix_catalog_refresh.py

fix(app-scan): re-read the Citrix Workspace build catalog every night

2026-10-23 14:38:09 +02:00

test_citrix_workspace.py

fix(app-scan): Citrix Workspace CTX697181 decided on LTSR 2507 hosts

2026-10-23 10:46:04 +02:00

test_client_ip_behind_proxy.py

fix(auth): audit log and login rate limit see the client IP, not the frontend's

2026-10-24 14:01:55 +02:00

test_companion_products.py

fix(scan): a companion product is not the product it names

2026-08-10 14:18:56 +02:00

test_compliance_rollup_queries.py

perf(urs): score the fleet in one pass instead of once per asset

2026-08-28 14:24:02 +02:00

test_container_scan.py

feat(dockhand): pull container image findings from Dockhand

2026-09-17 11:47:29 +02:00

test_custom_ca_trust.py

build(backend): Python 3.14 instead of 3.11

2026-10-27 16:01:11 +01:00

test_cvelistv5_cache_freshness.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_cvelistv5_index_walk.py

fix(cvelistv5): build the index from CVE records only, close nothing without it

2026-11-02 09:52:55 +01:00

test_cvelistv5_outage_no_autoclose.py

fix(cvelistv5): build the index from CVE records only, close nothing without it

2026-11-02 09:52:55 +01:00

test_cvelistv5_single_download.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_dashboard_endpoints_off_the_event_loop.py

perf(api): die Requests liefen alle auf dem Event-Loop, also nacheinander

2026-09-10 10:53:23 +02:00

test_dashboard_stats_queries.py

feat(vulnerabilities): group findings by package

2026-10-26 09:58:27 +01:00

test_dbeaver.py

feat(app-scan): match DBeaver and CloudBeaver

2026-10-20 13:17:01 +02:00

test_dead_wazuh_agent_falls_back_to_intune.py

fix(app-scan): take Intune's software list when the Wazuh agent is dead

2026-10-16 11:50:42 +02:00

test_dead_wazuh_agent_retracts_wazuh_source.py

feat(app-scan): older PostgreSQL CVEs from NVD, CNA records decide

2026-10-20 13:48:51 +02:00

test_defender_package_label.py

fix(defender): read TVM CVEs tenant-wide instead of one call per machine

2026-10-16 16:33:09 +02:00

test_defender_rate_budget.py

fix(defender): read TVM CVEs tenant-wide instead of one call per machine

2026-10-16 16:33:09 +02:00

test_defender_software_inventory.py

feat(defender): read installed software from MDE instead of waiting on Intune

2026-08-18 10:26:29 +02:00

test_dell_supportassist.py

feat(app-scan): Dell SupportAssist via NVD and cvelistV5

2026-11-02 10:48:44 +01:00

test_dockhand_sync.py

fix(dockhand): an image gone from every host closes its findings

2026-10-27 17:36:59 +01:00

test_dotnet_sdk_bound_cvelistv5.py

feat(app-scan): detect .NET SDK and ASP.NET Core CVEs

2026-10-03 10:37:49 +02:00

test_entra_connect.py

feat(scan): detect Entra Connect Sync CVEs (CVE-2026-65673)

2026-09-18 11:05:04 +02:00

test_eol_citrix_stub.py

fix(eol): a Citrix published-app stub gets no EOL finding

2026-10-05 14:39:48 +02:00

test_eol_component_packages.py

fix(eol): only the product itself may claim its release year

2026-08-13 11:42:38 +02:00

test_eol_dotnet.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_mobile_flap.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_ms_lifecycle_connector.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_ms_lifecycle_match.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_office_perpetual.py

feat(m365): Office 2021 / 2024 CVEs from their own build lines

2026-10-20 15:07:22 +02:00

test_eol_rapid_release.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_reconcile.py

fix(eol): detect Exchange 2016, and close findings when software is uninstalled

2026-08-10 13:59:31 +02:00

test_eol_supersede.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_sweep_stability.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_eol_teams_classic.py

fix(teams): skip the 1.0.0.0 placeholder, keep Teams Panel/Phone off Teams

2026-10-08 13:15:00 +02:00

test_euvd_partial_catalog.py

fix(euvd): never cache a catalog cut short by a failed page

2026-10-15 13:17:18 +02:00

test_exchange_se.py

fix(exchange): only Subscription Edition was on the CVE scanner's map

2026-08-29 11:28:05 +02:00

test_extreme_firmware.py

feat(netdisco): Extreme Networks EXOS switches, floored ranges

2026-09-08 16:47:10 +02:00

test_failed_index_build_backoff.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_filezilla.py

feat(app-scan): FileZilla Pro takes the FileZilla Client CVEs

2026-10-30 14:18:38 +01:00

test_firebird.py

feat(app-scan): Firebird CNA records decide over NVD

2026-10-20 17:29:21 +02:00

test_firefox_mfsa_source.py

fix(mfsa): Android advisories no longer set the desktop Firefox fix

2026-10-27 15:13:46 +01:00

test_galaxy_tab_a9plus_2025.py

fix(mobile-eol): Galaxy Tab A9+ (2025) is not the 2023 Tab A9+

2026-11-03 10:27:50 +01:00

test_ghostscript.py

feat(app-scan): detect Ghostscript CVEs on the Windows installer

2026-10-16 11:01:38 +02:00

test_git.py

feat(app-scan): match Git for Windows via NVD and cvelistV5

2026-10-31 16:55:20 +01:00

test_gnupg.py

feat(app-scan): detect GnuPG CVEs via NVD

2026-10-13 14:10:27 +02:00

test_graph_detected_apps_5xx.py

fix(intune): a 500 on detectedApps dropped the device from the run

2026-10-05 15:40:59 +02:00

test_greenshot.py

feat(app-scan): Greenshot via NVD and cvelistV5

2026-10-26 13:53:08 +01:00

test_https_certificate.py

feat(https): serve the UI over TLS with a CA per installation

2026-10-24 13:29:10 +02:00

test_igel_device_identity.py

feat(audit): log asset renames done by a sync

2026-09-18 09:34:33 +02:00

test_igel_isn.py

feat(igel): the vendor's own notices, for the flaws that never get a CVE

2026-09-03 12:19:16 +02:00

test_igel_os.py

fix(igel): this UMS answers serverstatus blank, so the version can be told

2026-09-02 18:47:08 +02:00

test_igel_ums_client.py

fix(igel): the UMS kept its own version until it was asked logged in

2026-09-02 14:56:23 +02:00

test_inclusive_bound.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_integration_reset.py

fix(sync-health): a reset integration counts as not configured

2026-10-26 11:42:05 +01:00

test_intel_proset.py

feat(app-scan): match Intel PROSet/Wireless Software

2026-10-20 15:22:08 +02:00

test_intel_rst.py

feat(app-scan): Intel Rapid Storage Technology via NVD and cvelistV5

2026-11-02 11:05:25 +01:00

test_intellij_idea.py

feat(app-scan): IntelliJ IDEA without a release in the name

2026-11-02 12:09:58 +01:00

test_intune_duplicate_device_name.py

fix(assets): der Intune-Sync warf namensgleiche Geraete weg

2026-09-11 19:02:47 +02:00

test_intune_inventory_retry_later.py

fix(app-scan): ask a failed Intune device again at the end of the run

2026-10-19 15:44:00 +02:00

test_intune_reenrollment.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_intune_shared_aad_id.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_intune_windows_family.py

fix(intune): scan Intune-only Windows clients for OS CVEs

2026-10-07 13:32:15 +02:00

test_inventory_filter.py

fix(app-scan): TeamViewer 1.0 on a Mac is a placeholder, not a build

2026-11-03 14:39:01 +01:00

test_jev_triage.py

fix(jev): commit each answer so the triage no longer deadlocks

2026-10-16 10:40:09 +02:00

test_job_concurrency.py

fix(scheduler): run overlapping jobs late instead of dropping them, one run per kind

2026-10-17 10:12:19 +02:00

test_keepassxc.py

fix(app-scan): KeePassXC CVE-2026-69150 on 2.7.x

2026-11-02 14:55:37 +01:00

test_kev_alerts.py

fix(kev): the alert mail was still a two-catalog feature

2026-08-29 18:03:15 +02:00

test_kev_catalog_memo.py

perf(api): die Requests liefen alle auf dem Event-Loop, also nacheinander

2026-09-10 10:53:23 +02:00

test_kev_refresh.py

feat(advisories): split Threat Intel into KEV and advisory-feed tabs

2026-09-18 11:24:47 +02:00

test_lenovo_system_update.py

feat(app-scan): detect Lenovo System Update CVEs via cvelistV5

2026-10-07 11:12:43 +02:00

test_libreoffice.py

feat(app-scan): detect LibreOffice CVEs via cvelistV5

2026-10-06 09:06:02 +02:00

test_loadmaster_firmware.py

fix(netdisco): recognise LoadMaster rows that report os "LMOS"

2026-09-19 10:08:43 +02:00

test_login_audit_channel.py

feat(audit): record whether a login came from the web UI or the API

2026-09-18 09:55:05 +02:00

test_m365_evidence_link.py

feat(m365): a finding never showed the page it was raised from

2026-09-07 10:36:07 +02:00

test_m365_no_redownload.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_m365_office_perpetual.py

feat(m365): Office 2021 / 2024 CVEs from their own build lines

2026-10-20 15:07:22 +02:00

test_m365_visio_project.py

fix(m365): Visio and Project CVEs go to hosts that have Visio / Project

2026-10-20 13:19:05 +02:00

test_mail_master_switch.py

feat(mail): master switch for every outgoing mail

2026-11-02 10:23:17 +01:00

test_migrations_no_orm_imports.py

fix(alembic): unbreak fresh installs at migration 028

2026-08-26 15:48:37 +02:00

test_mobile_browsers.py

fix(scan): carry the CVE description, and keep iOS browsers out

2026-08-05 09:54:32 +02:00

test_msrc_api_errors.py

fix(msrc): a 429 from the MSRC API no longer drops the nightly catch-up

2026-10-29 10:26:06 +01:00

test_msrc_cvrf_shared_cache.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_msrc_description_and_freshness.py

fix(msrc): a 429 from the MSRC API no longer drops the nightly catch-up

2026-10-29 10:26:06 +01:00

test_msrc_edge_chromium_cve.py

fix(msrc): rebuild the MSRC index right before the nightly app scan

2026-10-31 15:52:39 +01:00

test_msrc_edge_flap.py

fix(msrc): a 429 from the MSRC API no longer drops the nightly catch-up

2026-10-29 10:26:06 +01:00

test_msrc_sql_server.py

fix(msrc): a 429 from the MSRC API no longer drops the nightly catch-up

2026-10-29 10:26:06 +01:00

test_nanazip.py

feat(app-scan): detect NanaZip and NanaZip Preview CVEs

2026-10-07 12:19:44 +02:00

test_negative_cve_cache.py

fix(feeds): stop repeating downloads the app already made

2026-10-15 13:12:21 +02:00

test_netdisco_inventory.py

feat(netdisco): Cisco IOS XE / IOS XR routers, matched exactly

2026-09-08 16:19:27 +02:00

test_netdisco_nameless_device.py

fix(netdisco): a device with no name became the asset "192", and pulled the next one onto it

2026-09-09 11:23:50 +02:00

test_netdisco_reip.py

fix(assets): ein Geraet mit neuer IP legte ein zweites Asset an

2026-09-10 16:15:07 +02:00

test_netscaler_firmware.py

fix(netdisco): read CTX697096's NetScaler records

2026-09-28 10:10:22 +02:00

test_nextcloud_desktop.py

fix(app-scan): the Nextcloud iOS app is not the desktop client

2026-10-30 15:13:29 +01:00

test_nightly_index_order.py

fix(msrc): rebuild the MSRC index right before the nightly app scan

2026-10-31 15:52:39 +01:00

test_nightly_post_inventory_chain.py

fix(scheduler): run EOL, M365, app scan and MSRC as one chain after the Intune sync

2026-10-17 11:30:28 +02:00

test_nightly_waits_for_intune_sync.py

fix(scheduler): hold the post-inventory nightly jobs until the Intune sync ends

2026-10-16 16:49:56 +02:00

test_nodejs_cvelistv5.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_nvd_outage_asked_once.py

fix(app-scan): an NVD outage is asked about once per version, not per host

2026-10-23 23:42:11 +02:00

test_nvd_outage_no_autoclose.py

fix(app-scan): an NVD outage is asked about once per version, not per host

2026-10-23 23:42:11 +02:00

test_oracle_java.py

feat(app-scan): detect Oracle JRE and JDK CVEs on every record shape

2026-10-07 12:39:48 +02:00

test_partial_inventory_no_autoclose.py

fix(app-scan): CVEs closed as "no longer detected" from an inventory that was not the host's

2026-09-06 15:50:43 +02:00

test_passkeys.py

feat(auth): hint banner nudges existing users to add a passkey

2026-11-03 15:55:37 +01:00

test_password_hashing.py

fix(deps): upgrade the auth stack, and free bcrypt from passlib

2026-08-15 09:47:30 +02:00

test_patch_plan.py

feat(patch-plan): page through the whole plan, export it as CSV

2026-09-20 10:20:09 +02:00

test_pdf_xchange.py

feat(app-scan): CVE-2026-2040 for PDF-XChange Editor from the vendor bulletin

2026-10-20 19:07:35 +02:00

test_port_and_build_evidence.py

fix(exposure): count a service once, not once per socket

2026-07-31 13:49:42 +02:00

test_postgresql.py

feat(app-scan): older PostgreSQL CVEs from NVD, CNA records decide

2026-10-20 13:48:51 +02:00

test_priority_ranking.py

fix(priority): priority ranks findings everywhere, CPR only breaks ties

2026-10-28 12:16:00 +01:00

test_qnap_firmware.py

feat(netdisco): QNAP QTS / QuTS hero firmware CVEs

2026-09-23 10:40:18 +02:00

test_readonly_gate_inventory.py

feat(auth): passwordless sign-in with passkeys for local accounts

2026-11-03 15:40:31 +01:00

test_reimaged_device_new_name.py

fix(intune): one serial is one device, the newest enrolment wins

2026-10-19 11:28:28 +02:00

test_reopen_grace.py

fix(reopen): a week-old Intune list reopened CVEs Defender TVM had just closed

2026-09-06 16:54:18 +02:00

test_reopen_stale_inventory.py

fix(reopen): a week-old Intune list reopened CVEs Defender TVM had just closed

2026-09-06 16:54:18 +02:00

test_report_scope.py

fix(reports): correct the numbers and rank what claims to be ranked

2026-07-30 11:42:43 +02:00

test_reports_csv.py

fix(reports): the technical CSV export is one query and shows progress

2026-10-28 23:34:52 +01:00

test_runs_on_platform.py

fix(app-scan): an OS-scoped CVE stays off hosts running another OS

2026-10-30 14:02:19 +01:00

test_rvtools_veeam.py

feat(app-scan): Veeam Backup & Replication and every Veeam ONE component

2026-10-28 23:24:43 +01:00

test_samsung_rugged_models.py

fix(mobile-eol): Galaxy Tab Active Pro had no model row

2026-11-03 13:11:11 +01:00

test_sap_cvelistv5.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_sap_patch_level.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_scans_readonly_gate.py

fix(rbac): Scan Jobs was hidden from readonly only in the sidebar

2026-09-03 18:31:33 +02:00

test_scheduled_wazuh_asset_sync.py

fix(scheduler): sync Wazuh assets before the scheduled agent loop

2026-08-13 13:26:21 +02:00

test_session_lifetime.py

feat(auth): idle timeout and maximum session age, session-only cookies

2026-11-04 08:55:48 +01:00

test_severity_floor.py

fix(scoring): score CVEs the vendor never gave a CVSS

2026-07-31 15:59:07 +02:00

test_soapui.py

fix(cvelistv5): drop the product name ZDI writes into the version

2026-10-30 15:50:30 +01:00

test_sophos_firewall.py

fix(netdisco): recognise LoadMaster rows that report os "LMOS"

2026-09-19 10:08:43 +02:00

test_sync_lock_connection.py

fix(vcenter): auto-close patched ESXi/vCenter CVEs, and stop leaking the sync lock

2026-08-21 08:28:05 +02:00

test_sync_runs.py

fix(sync-alerts): no failure mail for an integration without config

2026-10-21 10:36:10 +02:00

test_target_sw_field.py

fix(scan): read target_sw from the right CPE field

2026-08-04 14:46:22 +02:00

test_teams_classic.py

fix(teams): skip the 1.0.0.0 placeholder, keep Teams Panel/Phone off Teams

2026-10-08 13:15:00 +02:00

test_teamviewer.py

fix(app-scan): TeamViewer client CVEs only on the client, not Meeting or Assist AR

2026-11-03 14:46:56 +01:00

test_tightvnc.py

feat(app-scan): match UltraVNC

2026-10-21 13:43:21 +02:00

test_token_purpose.py

fix(security): validate token purpose, verify Wazuh TLS, gate two asset routes

2026-08-26 16:12:34 +02:00

test_tomcat.py

test(tomcat): pin the WebSocket CVEs that only cvelistV5 carries

2026-09-24 12:46:03 +02:00

test_totp_algorithm.py

feat(auth): TOTP hash algorithm SHA-1, SHA-256 or SHA-512, default SHA-256

2026-11-04 08:55:39 +01:00

test_ubiquiti_brocade_firmware.py

feat(netdisco): UniFi access points and Brocade FC switches, from NVD and cvelistV5 only

2026-09-09 17:10:39 +02:00

test_ultravnc.py

feat(app-scan): match UltraVNC

2026-10-21 13:43:21 +02:00

test_urs_bulk_scoring.py

perf(urs): score the fleet in one pass instead of once per asset

2026-08-28 14:24:02 +02:00

test_vcenter_host_serial.py

feat(vcenter): ESXi-Hosts tragen jetzt ihre Hardware-Seriennummer

2026-09-14 11:33:59 +02:00

test_veeam.py

feat(app-scan): Veeam Agent for Microsoft Windows on both paths

2026-10-29 10:43:53 +01:00

test_vendor_severity.py

feat: show the vendor's own severity when it differs from CVSS

2026-09-15 20:38:44 +02:00

test_vim_vscode_python.py

fix(scan): match Python the interpreter, not python-* modules

2026-08-15 09:12:01 +02:00

test_vm_tools_bulletins.py

feat(app-scan): XenServer VM Tools CVEs from Citrix bulletins

2026-10-24 14:35:04 +02:00

test_vmware_tools.py

feat(scan): detect VMware Tools, and read wildcard version floors

2026-08-04 08:35:22 +02:00

test_vmware_vsphere.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_vsphere_autoclose.py

fix(vcenter): auto-close patched ESXi/vCenter CVEs, and stop leaking the sync lock

2026-08-21 08:28:05 +02:00

test_vuln_by_package.py

feat(vulnerabilities): sortable package groups with max CPR

2026-10-26 11:50:18 +01:00

test_vuln_list_docker_host.py

fix(vulnerabilities): a Docker host's findings include its images

2026-10-27 15:26:18 +01:00

test_vulncheck_kev.py

feat(kev): VulnCheck KEV as a third exploited-catalog source

2026-08-29 09:42:03 +02:00

test_wazuh_components.py

fix(app-scan): KeePassXC CVE-2026-69150 on 2.7.x

2026-11-02 14:55:37 +01:00

test_wazuh_duplicate_agent_name.py

fix(assets): zwei Wazuh-Agents mit demselben Namen lagen auf einer asset_id

2026-09-11 19:02:20 +02:00

test_wazuh_gone_falls_back_to_intune.py

fix(wazuh): deleted agent on an Intune device kept Wazuh as inventory

2026-10-12 15:42:39 +02:00

test_wazuh_hostname_case.py

fix(wazuh): Intune "PC-LAB01" and agent "pc-lab01" became two assets

2026-10-12 11:38:01 +02:00

test_wazuh_msix_superseded.py

feat(wazuh): read vulnerabilities, inventory and SCA from Wazuh 5.0

2026-11-01 11:42:08 +01:00

test_wazuh_reused_agent_id.py

fix(wazuh): don't move a new host onto an old asset via a reused agent id

2026-11-01 11:54:35 +01:00

test_wazuh_stale_agent_intune_alive.py

fix(assets): keep a host Intune still sees active when its Wazuh agent died

2026-10-16 11:30:12 +02:00

test_wazuh_stale_agent_stays_inactive.py

chore(release): drop personal attribution from comments and docstrings

2026-08-26 15:34:05 +02:00

test_wazuh_v5.py

fix(assets): answer manager nodes in the software, coverage-gap and rescan buttons

2026-11-02 11:16:43 +01:00

test_webex.py

feat(app-scan): match Cisco Webex App and Webex Meetings via NVD and cvelistV5

2026-10-31 11:52:08 +01:00

test_windows_edition_eol.py

fix(eol): Windows client EOL by build and edition; edition from Intune

2026-10-23 14:08:29 +02:00

test_xencenter_bulletins.py

feat(app-scan): XenCenter CVEs from Citrix bulletins

2026-10-23 13:31:09 +02:00

test_xenserver.py

fix(xenserver): reach a verified coordinator by its reverse-DNS name

2026-10-24 12:53:29 +02:00

test_zoom_bulletins.py

fix(zoom): read an MSI build as its release from Zoom's installer URLs

2026-10-16 10:34:40 +02:00

test_zoom.py

fix(zoom): read an MSI build as its release from Zoom's installer URLs

2026-10-16 10:34:40 +02:00