CVEs in NVD and openCVE out of sync - manual re-import?

[dagobertdebug]

Hello, because my instance was not working for some time and I started again from a recent snapshot, my instance missed some CVEs.

docker exec -it webserver opencve import-data leads to [*] Import already done.

Is there a way to re-import the data manually? What would be the commands to have NVD and openCVE in sync again?

Thanks!

[ncrocfer]

Hello,

Unfortunately no, the import-data command is used for an initial import, then the Celery periodic tasks update the list of CVE. These tasks fetch the modified file of the NVD Data Feed.

But this file only keep ~1200 last modified CVEs, so if you don't monitor your OpenCVE instance for a long time you will lose data.

Currently I have no other ideas than reinstalling your OpenCVE instance. You can also create a pull-request to support this feature, I think it's not really complicated to do.

[dagobertdebug]

Ok, thanks! I think in my case one could live with the diff of 165 CVEs. But, of course, we are all perfectionists :)

Is there a way to re-install without losing the data in the postgres database (e.g. users, subscribed vendors/products, reports)? Or a way to restore the postgres data in a fresh install?

Thanks!