@schroeder
My issue is that I don't have access to the boxes, someone just sends me text files or even pdfs of what was installed on some set of machines. The whole problem is that no-one can or will run vulnerability scanners on those machines. I would like to find the related CVEs for those pieces of software. Am I the only one dealing with this issue? I don't need someone to write a script for me, ideally there is a database out there, or something else that I can figure out how to use.
Is there any way not to make this not a product recommendation question?