Urgent help please - Linux ,CPE and cve

[effreetcoin]

Hey Boss,

Firstly you are my superhero , amazing work

I have a question.

I've built a small script that retrieves all installed Linux packages (RedHat, Oracle Linux, Ubuntu, etc.), along with the package names and versions.

The goal of this script is to identify the CVEs associated with these packages, if available.

From what I understand, I would need to convert the package names and versions to CPE (Common Platform Enumeration), and then use that to fetch the relevant CVEs. Does that sound correct?

Based on your report, which tools or code snippets could assist me in achieving this? Or, do you have any database or CSV file that maps Linux packages and their versions to their corresponding CVEs?