🔗 CVEs Search API Scraper Actor

Programmatically query the CVE vulnerability databases for historical vulnerabilities, packages vulnerabilities, and detailed CVE record files.

This Actor connects to a high-performance Cloudflare Worker edge gateway to perform CVE keyword searches and fetch CVE specifications directly from Mitre and CISA databases. It saves results to both the Apify dataset (for bulk downloads) and the default Key-Value Store under the OUTPUT key (for single-record integrations).

---

🌟 Key Features

• Vulnerability Keyword Search: Search CVE descriptions and names matching phrases like drupal, wordpress, log4j, openssl.
• Vulnerability Record Details: Retrieve full CVE JSON schema v5 records containing CVSS scores, affected packages, versions, vendors, and references.
• CISA ADP Vulnrichment: Integrates SSVC, KEV status, and coordinator remediation credentials.
• Structured Auditing: Saves complete raw JSON outputs under the Key-Value Store OUTPUT key for easy scripting.

---

📥 Input Parameters

Field	Type	Description	Prefill Example
Endpoint Action	string	Choose the operation: search or details.	search
Search Query	string	The keyword or product name to query (e.g. drupal).	drupal
CVE ID	string	The target CVE ID to look up (e.g. CVE-2026-9082).	CVE-2026-9082
From	integer	Pagination offset (for search).	0
Size	integer	Number of records to return (for search).	250
Sort Property	string	Parameter to sort search results (default cveId).	cveId
Sort Order	string	Order of sorting: desc or asc.	desc

Input JSON Example

{
  "endpoint": "search",
  "q": "drupal",
  "from": 0,
  "size": 10
}

---

📤 Output Data Structure

Output JSON Example (Search)

{
  "success": true,
  "data": {
    "total": 1250,
    "hits": [
      {
        "_index": "cve-index2-prd",
        "_id": "CVE-2026-9082",
        "_source": {
          "dataType": "CVE_RECORD",
          "dataVersion": "5.2",
          "cveMetadata": {
            "cveId": "CVE-2026-9082",
            "state": "PUBLISHED"
          },
          "containers": {
            "cna": {
              "title": "Drupal core - Highly critical - SQL injection",
              "affected": [
                {
                  "vendor": "Drupal",
                  "product": "Drupal core"
                }
              ]
            }
          }
        }
      }
    ]
  }
}

---

💳 Monetization & Cost

This Actor utilizes the Pay-Per-Event (PPE) pricing model on the Apify Store:

• Event Name: cve-scan
• Price per event: $0.005 per successful execution.