cve-search v2.6 (2019-11-08) released

Changes

• [web] template vulnerable_product and assigner is a default field.
  [Alexandre Dulaunoy]
• [sources] revert back CAPEC XML source (parser is broken with recent
  version) [Alexandre Dulaunoy]
• [db_mgmt_json] use of format. [Alexandre Dulaunoy]

Fix

• [db_mgmt_json] if cpe_name is missing from original CPE then use
  default cpe23 URI. [Alexandre Dulaunoy]
• [minimal] link result is now using the proper cve result key.
  [Alexandre Dulaunoy]

Other

• Merge pull request #391 from kairis/master. [Alexandre Dulaunoy]

  CPE and CVE fixes

• Drop CPE and CVE databases if force populating. [Sami Kairajarvi]

  This is done in db_updater, but if someone calls either
  CPE or CVE updaters directly with "-pa", it will duplicate
  the data

• Change order of updating CVE and CPE. [Sami Kairajarvi]

  CPE needs to be updated first, as CVE uses CPE data

• Add fields to CVE only if they don't exist already. [Sami Kairajarvi]

• Fix CPE matching for vulnerable children. [Sami Kairajarvi]

• Add warning to product search. [Sami Kairajarvi]

• Remove non_vulnerable_configuration. [Sami Kairajarvi]

• Add all vulnerable products to vulnerable_products, not only
  applications. [Sami Kairajarvi]

• Merge pull request #386 from kairis/master. [Alexandre Dulaunoy]

  Append all items of CVE description field into summary

• Append all items of CVE description field into summary. [Sami
  Kairajarvi]