Collect vuldb

[Hritik14]

https://vuldb.com/
License: cc by-nc-sa

[pombredanne]

The CC-BY-NC-SA is an issue as this is not open data. But we could add this vulntotal instead

[armijnhemel]

A good start would be to index the ones that VulDB added to CVEs themselves (which I would assume are public). It would not be the full dataset of course.

[Samk1710]

Hey,
While trying to research and write a vulntotal datasource for Vuldb I came across a major issue. Vuldb's API does not include package registries. See the params: https://vuldb.com/?search.advanced

In essence we can't specifically search for a product belonging to a specific package like we can't search for express specifically in npm or requests specifically in PyPI.

I have attached the outputs of pkg:npm/express and pkg:pypi/requests:

• https://gist.github.com/Samk1710/e33b599a52190ed650b35febb3d54c31
• https://gist.github.com/Samk1710/ad0b004ef16f2312c8d1678056d2fd71

The vendor param also is specific to each product.