Pricing

Pay per usage

Try for free

Go to Apify Store

Fast CVE & NVD Vulnerability Scraper — CVSS & KEV

Try for free

Ultra-fast NIST NVD cybersecurity vulnerability scraper. Extract CVE exploit intelligence, CVSS v3.1/v4.0 risk scores, CISA Known Exploited Vulnerabilities (KEV), CWE weaknesses, and advisory links without browser bloat.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Hector

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

🛡️ Fast CVE & NVD Vulnerability Scraper — CVSS Scores & CISA KEV

An enterprise-grade, ultra-fast NIST NVD & CISA KEV Cybersecurity Threat Intelligence Scraper. Extract critical zero-day vulnerabilities, CVSS v3.1 / v4.0 risk metrics, in-the-wild exploitation flags (CISA Known Exploited Vulnerabilities), and official patch deadlines with zero browser overhead on 256MB RAM.

🚀 Key Advantages Over Competitors

Feature	Legacy Competitors (`ryanclinton`, `pink_comic`)	Fast CVE & NVD Scraper (Ours)
CISA KEV Correlation	Missing or separate tool	Unified CISA Known Exploited Vulnerabilities badge & deadlines
CVSS Coverage	Basic base score only	Complete CVSS v3.1 / v4.0 metrics, vector string & attack vector
Weakness Taxonomy	Unstructured text	Normalized CWE weakness enumeration IDs (CWE-20, CWE-89, etc.)
Execution Performance	Frequent timeouts / rate-limit failures	Sub-second direct REST queries on 256MB RAM
Resilience Baseline	Breaks when NIST throttles API	100% Guaranteed Non-Empty Output (Verified Threat Baseline)
Advisory Deep Links	Missing	Direct canonical NIST NVD vulnerability details URL

💼 High-Value Use Cases

DevSecOps & Software Supply Chain Security: Continuously scan dependencies (npm, PyPI, Maven, Go) for known vulnerabilities.
Enterprise CISO & SOC Threat Prioritization: Filter by CISA KEV to identify vulnerabilities actively exploited by ransomware and state-sponsored APT groups.
Cyber Insurance & Risk Underwriting: Quantify an insured company's exposure to critical CVSS 9.0+ unpatched exploits.
Bug Bounty & Security Research: Monitor new CVE disclosures in real-time across Apache, Linux kernel, Apple iOS, Microsoft Windows, and Cisco systems.

📥 Input Parameters

Parameter	Type	Default	Description
`keywordSearch`	String	`"log4j"`	Software name, vendor, or vulnerability keyword.
`cveId`	String	`""`	Exact CVE identifier (e.g. `'CVE-2021-44228'`). Overrides keyword search.
`cisaKevOnly`	Boolean	`false`	Return only vulnerabilities on CISA's Known Exploited catalog.
`minCvssScore`	Number	`0`	Minimum CVSS base score threshold (e.g. `7.0` for High/Critical).
`maxItems`	Number	`30`	Maximum number of CVE records to return.

📤 Sample Output (JSON)

{
  "cveId": "CVE-2021-44228",
  "published": "2021-12-10T10:15:09.143",
  "lastModified": "2024-08-11T19:33:44.513",
  "vulnStatus": "Analyzed",
  "description": "Apache Log4j2 2.0-beta9 through 2.15.0 JNDI features used in configuration do not protect against attacker controlled LDAP endpoints...",
  "cvssScore": 10.0,
  "severity": "CRITICAL",
  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "attackVector": "NETWORK",
  "attackComplexity": "LOW",
  "cwe": "CWE-20: Improper Input Validation",
  "isCisaKev": true,
  "cisaActionDue": "2021-12-24",
  "cisaRequiredAction": "Apply updates per vendor instructions or remove affected assets from agency networks.",
  "nvdUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228"
}

🛡️ Integration & Automation

Compatible with Splunk, Datadog, Jira, Slack, Make.com, and n8n via Apify Webhooks and REST API.

NVD CVE Vulnerability Search

ryanclinton/nvd-cve-vulnerability-search

NVD CVE Vulnerability Search queries the NIST National Vulnerability Database (NVD) REST API v2.0 to retrieve detailed information about Common Vulnerabilities and Exposures (CVEs). The NVD is the U.S.

Ryan Clinton

NVD CVE Vulnerability Search - Vendor Risk Diligence API

pink_comic/nvd-cve-vulnerability-database

Search NIST NVD CVEs by keyword, severity, vendor, or date for vendor-risk diligence and patch workflows. CVSS, affected products, and source-linked vulnerability evidence — not proof a deployment is exploitable. Related: CISA KEV catalog, SSL certificate checker.

Ava Torres

NVD Critical CVE & KEV Vulnerability API

koalastuff/nvd-cve-vulnerability-monitor

Search NIST NVD CVEs by product, date, CVSS severity, CWE, CVE ID, or CISA KEV status. Export normalized cybersecurity vulnerability data for SOC teams.

Timo Schmidt

CVE Vulnerability Scraper

cloud9_ai/cve-scraper

Search and extract CVE vulnerability data from NIST NVD. Get CVSS scores, affected products, and references. No API key required.

cloud9

NVD CVE Vulnerability Scraper (CVSS, CWE, CPE)

scrapers_lat/nvd-cve-scraper

Scrape CVE vulnerability records from the National Vulnerability Database with description, CVSS score and severity, attack vector, CWE weakness, reference links and affected products (CPE). Search by keyword, CVE ID or published date range. Export to JSON, CSV or Excel.

Scrapers Lat

CVEs Search API Scraper

dev00/cves-search-apify

Programmatically query the CVE vulnerability databases for historical vulnerabilities, packages vulnerabilities, and detailed CVE record files.

dev00

CVE Vulnerability Monitor (NVD)

agentictools/cve-vulnerability-monitor

Search and monitor CVE vulnerabilities from the NVD by keyword, product, severity, or date, with CVSS scores and references.

Ken Agland

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

NIST NVD CVE Scraper

parseforge/nist-nvd-cve-scraper

Scrapes CVE records from the NIST National Vulnerability Database by keyword, CVE ID, severity, CWE, date range, or CISA KEV status. Returns each vulnerability as a flat row with CVSS scores, affected products, weaknesses, and references.

ParseForge

CVE Lookup: NVD vulnerabilities with CVSS, CWE and KEV

examsens.ai/cve-lookup

Looks up CVEs in the NVD by id, keyword, product (CPE) or published date range, and returns CVSS v4, v3.1, v3.0 and v2 scores, CWE weaknesses, references, CISA KEV status and affected products. Your own NVD API key is optional.