OpenVuln — CVE & Vulnerability Scanner
Pricing
$2.00 / 1,000 cve results
Go to Apify Store
OpenVuln — CVE & Vulnerability Scanner
Queries the NIST NVD database for recent CVEs matching a product, keyword, or severity level. Returns structured data: CVE ID, CVSS score, severity, affected products, description, and references. No API key needed.
Pricing
$2.00 / 1,000 cve results
Rating
0.0
(0)
Developer
John Vedovino II
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
a day ago
Last modified
Categories
Share
Query the NIST National Vulnerability Database (NVD REST API v2) for recent CVEs that match a product, vendor or keyword, filtered by severity and date window. No API key needed. One dataset row per CVE.
What you get (one item per CVE)
| field | example |
|---|---|
cve_id | CVE-2026-12345 |
description | the NVD description text |
cvss_score | 9.8 (CVSS v3 base score, null when NVD has none yet) |
severity | CRITICAL / HIGH / MEDIUM / LOW |
published | ISO date the CVE was published |
affected_products | up to 5 CPE names |
references | advisory / patch URLs |
Input
- Product or keyword (
keyword) — e.g.nginx,openssl, a vendor name; blank = every CVE in the window. - Minimum severity (
severity) —CRITICAL,HIGH(default),MEDIUM,LOW, or blank for all. - Lookback (days) (
lookbackDays) — 1–90, default 7. - Max results (
maxResults) — 1–2000, default 200 (paged 100 per request).
Use cases
- Daily "what's new and severe for my stack" feed: run on a schedule with your product keywords and push the dataset to Slack, email or a ticketing system.
- Vendor risk monitoring: one run per vendor name, compare
cvss_scoreweek over week. - Security newsletters and research: pull the week's CRITICAL CVEs with references in one call.
- Agents and MCP: the dataset is plain JSON, so an LLM agent can read it directly.
Notes
- Source: NVD REST API v2 (
services.nvd.nist.gov). The Actor stays under NVD's unauthenticated rate limit (5 requests / 30 s), so a 2,000-result run takes a few minutes. - Data is NVD's own; scores can lag publication by days, which is why
cvss_scoremay benullfor brand-new CVEs. - Output schema:
.actor/dataset_schema.json.
