Finding vulnerabilities using VMaaS

on YouTube ↗24m

" summary

Describes Vulnerability Metadata as a Service (VMaaS), an API microservice that aggregates repository and CVE metadata for RHEL/Fedora and exposes it via a stateless HTTP API. Covers deployment options (docker-compose or OpenShift) and mentions a Red Hat-hosted public instance, and demonstrates a thin client tool that queries the API to find vulnerable packages on systems.

AI-written summary · about

" related talks

• 27mSecurity Content Metadata Model with an Efficient Search Methodology For Real Time Monitoring...Preeti Subramanian · Black Hat Asia 2015
• 23mAdvanced Vulnerability Management in Cloud Foundry - Molly Crowther & Stephen Levine, PivotalStephen Levine, Molly Crowther · Cloud Foundry Summit Europe 2017
• 36mSecurity Scanning - Past/Present/FutureStanislav Ochotnický, Martin Prpič · DevConf.CZ 2021
• 51mVulnerabilities Without CVEs: Governing the Dark Matter of Internal and Unknown SoftwareJosh Skorich · CVE/FIRST VulnCon 2026 & Annual CNA Summit
• 27mEffective Vulnerability Management for a DevSecOps PipelineNikki Robinson · DevOpsDays Washington, D.C. 2024
• 59mMadness of Vulnerability Management in Modern Cloud, Container, How to Win the Battle...Francesco Cipollone, Nate Sanders · CVE/FIRST VulnCon 2025
• 40mManaging Risk Across the Vulnerability EcosystemJulia Hopkins, Cassi Rodano, Patricia Tarro · CVE/FIRST VulnCon 2025
• 28mTowards a Minimum Viable Enumeration of VulnerabilitiesArt Manion, Jay Jacobs · CVE/FIRST VulnCon 2025