> ## Documentation Index
> Fetch the complete documentation index at: https://mintlify.com/simplevulnerabilitymanager/svm/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerability Database

> Comprehensive database of recognized vulnerabilities organized by scanner type

# Vulnerability Database

Simple Vulnerability Manager includes an extensive database containing the most recognized vulnerabilities that computer systems can suffer. The database is organized into four primary categories based on assessment methodology: Web Scanners, Service Scanners, Static Scanners, and Mobile.

## Database Overview

The vulnerability database provides a comprehensive knowledge base for security assessments:

* **Extensive Coverage**: Most recognized vulnerabilities across multiple platforms
* **Categorized Organization**: Grouped by scanner type for easy navigation
* **Detailed Information**: Each vulnerability includes description, impact, and remediation
* **Regular Updates**: Knowledge base receives updates with new vulnerabilities
* **Multi-language Support**: Available in English, Spanish, and Russian

<Note>
  The vulnerability database was significantly expanded in version 1.1.791 with many new translated vulnerabilities added to the knowledge base.
</Note>

## Vulnerability Categories

### Web Scanners

Web scanner vulnerabilities target web applications and include common issues found by tools like Acunetix, Burp Suite, Netsparker, and Arachni.

<Accordion title="Common Web Vulnerabilities">
  Web scanner vulnerabilities typically include:

  * **Injection Flaws**: SQL injection, command injection, LDAP injection
  * **Cross-Site Scripting (XSS)**: Reflected, stored, and DOM-based XSS
  * **Authentication Issues**: Weak credentials, broken authentication mechanisms
  * **Session Management**: Session fixation, weak session IDs
  * **Access Control**: Broken authorization, privilege escalation
  * **Security Misconfigurations**: Default credentials, unnecessary features enabled
  * **Sensitive Data Exposure**: Unencrypted data, weak cryptography
  * **CSRF**: Cross-Site Request Forgery vulnerabilities
  * **Component Vulnerabilities**: Outdated libraries, known vulnerable components

  Each vulnerability entry includes:

  * Brief description explaining what creates the problem
  * Impact assessment on the system
  * Step-by-step remediation instructions
</Accordion>

<Accordion title="Integrated Web Scanning Tools">
  SVM integrates with industry-leading web vulnerability scanners:

  <Tabs>
    <Tab title="Acunetix">
      **Acunetix Support**

      * **Version 10.5**: Local scanning support
      * **Version 11**: Enterprise API scanning (added in version 1.1.792)
      * **Quick Launch**: Execute scans with a single click
      * **Target Management**: Automatic target creation from project web addresses

      <Note>
        Acunetix 11 requires Enterprise license and uses API-based scanning. Legacy Acunetix 10.5 remote support was removed in version 1.1.792.
      </Note>
    </Tab>

    <Tab title="Burp Suite">
      **Burp Suite Integration**

      * Launch Burp Suite directly from project web addresses
      * Configurable executable path
      * Professional and Community Edition support
      * Manual testing workflow integration
    </Tab>

    <Tab title="Netsparker">
      **Netsparker Integration**

      * Automatic scanning of project web targets
      * Single-click execution from SVM interface
      * Results can be imported back into projects
    </Tab>

    <Tab title="Arachni">
      **Arachni Web Application Scanner**

      * Open-source web application security scanner
      * Integrated execution from SVM
      * Scan project web addresses automatically
    </Tab>
  </Tabs>
</Accordion>

### Service Scanners

Service scanner vulnerabilities cover network services, operating systems, and infrastructure issues detected by tools like Qualys, Nessus, OpenVAS, and Nmap.

<Accordion title="Service Vulnerability Types">
  Service scanner vulnerabilities include:

  * **Network Services**: Vulnerable protocols and services (SMB, FTP, SSH, etc.)
  * **Operating System Flaws**: OS-level vulnerabilities and missing patches
  * **Configuration Issues**: Weak configurations, unnecessary services
  * **Missing Updates**: Unpatched systems and outdated software
  * **SSL/TLS Issues**: Weak ciphers, certificate problems, protocol vulnerabilities
  * **Default Credentials**: Factory default passwords still in use
  * **Information Disclosure**: Banner grabbing, version exposure
  * **Denial of Service**: DoS vulnerabilities in network services
</Accordion>

<Accordion title="Integrated Service Scanning Tools">
  <Tabs>
    <Tab title="Qualys">
      **Qualys Integration**

      * **Community Edition**: Free tier support
      * **Enterprise Edition**: Full enterprise features
      * **Configuration Import**: Automatically import scan configurations from Qualys
      * **Private IP Limitation**: External Qualys cannot scan private IP addresses

      <Warning>
        Qualys External scanning does not support private IP addresses (e.g., 192.168.x.x, 10.x.x.x). Use internal scanners or Qualys Private Cloud for internal network assessments.
      </Warning>
    </Tab>

    <Tab title="Nessus">
      **Nessus Support**

      * Compatible with Nessus Professional and Nessus Manager
      * Export reports in XML and HTML formats (version 1.1.792+)
      * Plugin updates directly from SVM (version 1.1.787+)
      * Integration with Nessus 7+ (User-Agent updated in version 1.1.794)

      <Note>
        SVM can update Nessus plugins and retrieve scan configurations directly from the Nessus server interface.
      </Note>
    </Tab>

    <Tab title="OpenVAS">
      **OpenVAS Integration**

      * Open-source vulnerability assessment
      * Local and remote scanning support
      * Plugin management and updates (version 1.1.787+)
      * Script editing capabilities for custom scans
      * Ubuntu for Windows 10 support (version 1.1.792+)
      * Report format configuration import

      <Note>
        OpenVAS remote scripts were updated in version 1.1.792 to support Ubuntu for Windows 10 (WSL).
      </Note>
    </Tab>

    <Tab title="Nmap">
      **Nmap Network Scanner**

      * Port scanning and service detection
      * Scan web/domain addresses from projects (version 2.0.3+)
      * Local and remote execution
      * Remote installation support (version 1.1.788+)
      * Integration with project IP addresses and domains
    </Tab>
  </Tabs>
</Accordion>

### Static Scanners

Static analysis vulnerabilities focus on source code issues and application security flaws found through static code analysis.

<Accordion title="Static Analysis with Fortify">
  **Fortify Integration**

  SVM includes support for Fortify static analysis results:

  * Import Fortify scan results
  * Vulnerability renaming capabilities (fixed in version 2.1.1)
  * Source code security issues
  * Code quality and security best practices

  Static analysis vulnerabilities typically include:

  * Buffer overflows and memory issues
  * Injection vulnerabilities in code
  * Cryptographic weaknesses
  * Poor error handling
  * Insecure configurations in code
</Accordion>

### Mobile Vulnerabilities

Mobile scanner vulnerabilities specifically target Android and iOS applications, focusing on mobile-specific security issues.

<Accordion title="Mobile Security Issues">
  Mobile vulnerabilities include:

  * **Insecure Data Storage**: Sensitive data stored without encryption
  * **Weak Cryptography**: Poor encryption implementations
  * **Insecure Communication**: Unencrypted network traffic
  * **Improper Platform Usage**: Misuse of mobile OS features
  * **Code Quality**: Reverse engineering vulnerabilities
  * **Authentication/Authorization**: Mobile-specific auth issues
  * **Client Code Quality**: Hardcoded secrets, debug code
</Accordion>

<Accordion title="Android Security Tools">
  SVM integrates with comprehensive Android security testing tools:

  <Tabs>
    <Tab title="Analysis Tools">
      **Mobile Application Analysis**

      * **ApkTools** (v2.4.0): APK decompilation and recompilation
      * **Enjarify**: Convert APK to JAR for analysis
      * **JD-Gui** (v1.5.2): Java decompiler for source code review

      <Note>
        Tool versions were updated in version 2.1.0 to the latest stable releases.
      </Note>
    </Tab>

    <Tab title="Security Scanners">
      **Automated Mobile Security Testing**

      * **MobSF**: Mobile Security Framework for comprehensive testing
      * **QARK**: Quick Android Review Kit (LinkedIn's security tool)
      * **AndroBugs Framework**: Android vulnerability scanner

      <Note>
        QARK parameters were updated in version 1.1.793 (removed `--install 0 --exploit 0` flags).
      </Note>
    </Tab>

    <Tab title="Utilities">
      **Supporting Tools**

      * **Android Debug Bridge (adb)** v1.0.39: Device communication
      * **Uber APK Signer** v1.0.0: APK signing for testing

      These tools support the mobile testing workflow including APK manipulation, signing, and device interaction.
    </Tab>
  </Tabs>
</Accordion>

## Using the Vulnerability Database

### Adding Vulnerabilities to Projects

<Steps>
  <Step title="Select Vulnerability Category">
    Choose the appropriate scanner category based on your assessment:

    * Web Scanners for web application testing
    * Service Scanners for network and infrastructure
    * Static Scanners for code analysis results
    * Mobile for Android/iOS application testing
  </Step>

  <Step title="Browse Available Vulnerabilities">
    Review the list of available vulnerabilities in each category.

    Each entry displays:

    * Vulnerability name and identifier
    * Risk level (Critical, High, Medium, Low, Informational)
    * Brief description
  </Step>

  <Step title="Add to Project">
    Select vulnerabilities detected during your assessment and add them to the active project.
  </Step>

  <Step title="Customize Details">
    For each added vulnerability:

    * Add project-specific context and comments
    * Attach screenshots as evidence
    * Include request/response data
    * Document specific impact for the client
  </Step>

  <Step title="Rename if Needed">
    Customize vulnerability names to match your reporting standards using the toolbar rename function (available for all categories).
  </Step>
</Steps>

### Vulnerability Information Structure

Each vulnerability in the database contains three key sections:

<Tabs>
  <Tab title="Description">
    **What Creates the Problem**

    A brief technical description explaining:

    * The nature of the vulnerability
    * How it occurs in systems
    * Technical conditions that create the flaw
    * Common causes and configurations
  </Tab>

  <Tab title="Impact">
    **System Impact Assessment**

    Explains the potential consequences:

    * Confidentiality impact
    * Integrity impact
    * Availability impact
    * Business risk and potential damage
    * Exploitation scenarios
  </Tab>

  <Tab title="Remediation">
    **Steps to Solve It**

    Detailed remediation guidance:

    * Step-by-step fix instructions
    * Configuration changes needed
    * Patch information
    * Best practices for prevention
    * Verification steps
  </Tab>
</Tabs>

## Risk Classification

Vulnerabilities are classified by risk level with customizable color coding:

* **Critical**: Immediate attention required, active exploitation possible
* **High**: Significant risk, should be addressed urgently
* **Medium**: Moderate risk, address in normal remediation cycle
* **Low**: Minor issues, address when convenient
* **Informational**: No direct security impact, awareness only

<Note>
  Risk colors can be customized in the configuration settings. Since version 2.0.0, you can assign custom colors to each risk level and apply different Word table styles per risk category.
</Note>

## Reconnaissance and Information Gathering Tools

SVM includes tools for information gathering that help identify potential vulnerabilities:

<Accordion title="Recon-ng">
  **Recon-ng Integration**

  Web reconnaissance framework for information gathering:

  * Domain enumeration and subdomain discovery
  * Certificate transparency checks (added in version 2.0.1)
  * Google site web searches
  * HackerTarget integration
  * ThreatCrowd intelligence
  * SHODAN API integration
  * IPInfoDB lookups

  <Note>
    Domains can be entered without specifying the protocol when using Recon-ng. API keys for services like SHODAN and IPInfoDB can be configured in the settings.
  </Note>
</Accordion>

<Accordion title="EyeWitness">
  **EyeWitness Screenshot Tool**

  * Automated web application screenshots
  * HTTP/HTTPS service identification
  * Remote installation support
  * Report retrieval and integration

  EyeWitness helps document the visual state of web applications during assessments.
</Accordion>

## Database Management

### Knowledge Base Updates

<Accordion title="Updating Vulnerabilities">
  The vulnerability database receives periodic updates:

  * New vulnerabilities added as they are discovered
  * Existing entries refined with better remediation guidance
  * Multi-language translations (English, Spanish, Russian)
  * Version 1.1.791 included a major knowledge base update

  <Note>
    Starting from version 2.1.0, SVM includes an update feature in Tools menu to update all scripts and internal tools, keeping your security tool integration current.
  </Note>
</Accordion>

<Accordion title="Custom Vulnerabilities">
  You can customize the vulnerability database:

  * Rename vulnerabilities to match your organization's taxonomy
  * Add custom comments and descriptions
  * Create project-specific vulnerability variants
  * Maintain consistency across multiple assessments
</Accordion>

## Exporting and Reporting

### Export Capabilities

<Accordion title="Excel Export">
  Export vulnerability data to Excel for analysis:

  * Complete project vulnerability lists
  * Filtered by risk level (including Critical vulnerabilities - fixed in version 2.1.0)
  * Search results from the vulnerability browser
  * Comprehensive data export for external processing

  <Warning>
    Excel export requires Microsoft Excel to be installed on your system. Proper error handling was added in version 2.0.2.
  </Warning>
</Accordion>

## Language Support

The vulnerability database supports multiple languages:

* **English**: Full vulnerability descriptions and remediation
* **Spanish**: Complete translation (original language)
* **Russian**: Added in version 2.1.0

<Note>
  Full Unicode support (version 2.1.0) ensures proper display of all characters across all supported languages.
</Note>

## Related Documentation

* [Project Management](/features/project-management) - Learn how to organize vulnerabilities in projects
* [Report Generation](/features/report-generation) - Create professional reports from vulnerability data