# NVD CVE Vulnerability Scraper (CVSS, CWE, CPE) (`scrapers_lat/nvd-cve-scraper`) Actor
Scrape CVE vulnerability records from the National Vulnerability Database with description, CVSS score and severity, attack vector, CWE weakness, reference links and affected products (CPE). Search by keyword, CVE ID or published date range. Export to JSON, CSV or Excel.
- **URL**: https://apify.com/scrapers\_lat/nvd-cve-scraper.md
- **Developed by:** [Scrapers Lat](https://apify.com/scrapers_lat) (community)
- **Categories:** Developer tools, Automation
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet
## Pricing
from $6.80 / 1,000 results
This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.
Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event
## What's an Apify Actor?
Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.
Actors are written with capital "A".
## How to integrate an Actor?
If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
The best way to integrate Actors is as follows.
In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js/docs.md):
```bash
npm install apify-client
```
In Python projects, use official [Python client library](https://docs.apify.com/api/client/python/docs.md):
```bash
pip install apify-client
```
In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md):
````bash
# MacOS / Linux
curl -fsSL https://apify.com/install-cli.sh | bash
# Windows
irm https://apify.com/install-cli.ps1 | iex
```bash
In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/integrations/mcp.md).
If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md).
For usage examples, see the [API](#api) section below.
For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).
# README
## NVD CVE Vulnerability Scraper (CVSS, CWE, CPE)
> Pull CVE vulnerability records with description, CVSS score and severity, attack vector, CWE weakness, reference links and the products they affect. Search by keyword, CVE ID or published date range and export clean structured data for security triage, dashboards and research.
CVSS score & severity with the full vector
CWE & affected CPE plus reference links
JSON / CSV / Excel output formats
### Who is it for
| Use case | Who benefits |
|---|---|
| Vulnerability management | Security teams triaging and prioritizing CVEs by score |
| Threat intelligence | Analysts tracking new vulnerabilities for a vendor or product |
| Compliance and audit | Teams evidencing exposure and patch status |
| Tooling and dashboards | Builders feeding CVE data into their own systems |
### How to use it
1. Enter a **keyword** (for example a vendor or product), or a single **CVE ID**, or a **published date range**.
2. Set **Max Items** and run.
3. Export as JSON, CSV or Excel, or pull the results through the Apify API.
### Frequently Asked Questions
**How do I search for one specific vulnerability?**
Put the exact identifier in the **CVE ID** field (for example `CVE-2021-44228`) to fetch just that record.
**What does the CVSS score mean?**
The score is the base score from 0 to 10, paired with a severity band (LOW, MEDIUM, HIGH or CRITICAL) and the full vector string so you can see exactly how it was derived.
**Can I limit results to a time window?**
Yes. Set both **Published from** and **Published to** (ISO-8601). Keep the window within 120 days per run.
**How fresh is the data?**
Records are read live at run time, so each one reflects the latest published detail (see observedAt).
### Related scrapers
- [Google News Scraper](https://apify.com/scrapers_lat/google-news-scraper)
- [Yahoo Finance Scraper](https://apify.com/scrapers_lat/yahoo-finance-scraper)
### More scrapers at scrapers.lat
This actor is built and maintained by [scrapers.lat](https://scrapers.lat), where we publish scrapers for public platforms: finance, news, real estate, jobs, e-commerce and government data. Browse the full catalog or ask us for a custom scraper at [scrapers.lat](https://scrapers.lat).
---
> This actor is an independent tool and has no affiliation with NIST or the National Vulnerability Database. It only accesses publicly available vulnerability data. Use the results in accordance with the source's terms.
# Actor input Schema
## `maxCVEs` (type: `integer`):
Maximum number of CVEs to collect. Optional.
## `keyword` (type: `string`):
Search CVEs by keyword. Matches the vulnerability description (for example 'apache', 'wordpress', 'remote code execution', 'openssl').
## `cveId` (type: `string`):
Optional. Fetch a single vulnerability by its exact CVE ID (for example 'CVE-2021-44228').
## `pubStartDate` (type: `string`):
Optional. Only CVEs published on or after this date-time. ISO-8601, for example 2024-01-01T00:00:00.000. Requires 'Published to' as well; the range must not exceed 120 days.
## `pubEndDate` (type: `string`):
Optional. Only CVEs published on or before this date-time. ISO-8601, for example 2024-03-01T00:00:00.000. Requires 'Published from' as well.
## Actor input object example
```json
{
"maxCVEs": 50,
"keyword": "apache"
}
````
# Actor output Schema
## `results` (type: `string`):
No description
# API
You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.
## JavaScript example
```javascript
import { ApifyClient } from 'apify-client';
// Initialize the ApifyClient with your Apify API token
// Replace the '' with your token
const client = new ApifyClient({
token: '',
});
// Prepare Actor input
const input = {
"maxCVEs": 50,
"keyword": "apache"
};
// Run the Actor and wait for it to finish
const run = await client.actor("scrapers_lat/nvd-cve-scraper").call(input);
// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
console.dir(item);
});
// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs
```
## Python example
```python
from apify_client import ApifyClient
# Initialize the ApifyClient with your Apify API token
# Replace '' with your token.
client = ApifyClient("")
# Prepare the Actor input
run_input = {
"maxCVEs": 50,
"keyword": "apache",
}
# Run the Actor and wait for it to finish
run = client.actor("scrapers_lat/nvd-cve-scraper").call(run_input=run_input)
# Fetch and print Actor results from the run's dataset (if there are any)
print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
print(item)
# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start
```
## CLI example
```bash
echo '{
"maxCVEs": 50,
"keyword": "apache"
}' |
apify call scrapers_lat/nvd-cve-scraper --silent --output-dataset
```
## MCP server setup
```json
{
"mcpServers": {
"apify": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.apify.com/?tools=scrapers_lat/nvd-cve-scraper",
"--header",
"Authorization: Bearer "
]
}
}
}
```
## OpenAPI specification
```json
{
"openapi": "3.0.1",
"info": {
"title": "NVD CVE Vulnerability Scraper (CVSS, CWE, CPE)",
"description": "Scrape CVE vulnerability records from the National Vulnerability Database with description, CVSS score and severity, attack vector, CWE weakness, reference links and affected products (CPE). Search by keyword, CVE ID or published date range. Export to JSON, CSV or Excel.",
"version": "0.1",
"x-build-id": "mL0vdoQgiNdowF5ze"
},
"servers": [
{
"url": "https://api.apify.com/v2"
}
],
"paths": {
"/acts/scrapers_lat~nvd-cve-scraper/run-sync-get-dataset-items": {
"post": {
"operationId": "run-sync-get-dataset-items-scrapers_lat-nvd-cve-scraper",
"x-openai-isConsequential": false,
"summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK"
}
}
}
},
"/acts/scrapers_lat~nvd-cve-scraper/runs": {
"post": {
"operationId": "runs-sync-scrapers_lat-nvd-cve-scraper",
"x-openai-isConsequential": false,
"summary": "Executes an Actor and returns information about the initiated run in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/runsResponseSchema"
}
}
}
}
}
}
},
"/acts/scrapers_lat~nvd-cve-scraper/run-sync": {
"post": {
"operationId": "run-sync-scrapers_lat-nvd-cve-scraper",
"x-openai-isConsequential": false,
"summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK"
}
}
}
}
},
"components": {
"schemas": {
"inputSchema": {
"type": "object",
"properties": {
"maxCVEs": {
"title": "Max CVEs",
"minimum": 1,
"maximum": 1000000,
"type": "integer",
"description": "Maximum number of CVEs to collect. Optional."
},
"keyword": {
"title": "Keyword",
"type": "string",
"description": "Search CVEs by keyword. Matches the vulnerability description (for example 'apache', 'wordpress', 'remote code execution', 'openssl')."
},
"cveId": {
"title": "CVE ID",
"type": "string",
"description": "Optional. Fetch a single vulnerability by its exact CVE ID (for example 'CVE-2021-44228')."
},
"pubStartDate": {
"title": "Published from",
"type": "string",
"description": "Optional. Only CVEs published on or after this date-time. ISO-8601, for example 2024-01-01T00:00:00.000. Requires 'Published to' as well; the range must not exceed 120 days."
},
"pubEndDate": {
"title": "Published to",
"type": "string",
"description": "Optional. Only CVEs published on or before this date-time. ISO-8601, for example 2024-03-01T00:00:00.000. Requires 'Published from' as well."
}
}
},
"runsResponseSchema": {
"type": "object",
"properties": {
"data": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"actId": {
"type": "string"
},
"userId": {
"type": "string"
},
"startedAt": {
"type": "string",
"format": "date-time",
"example": "2025-01-08T00:00:00.000Z"
},
"finishedAt": {
"type": "string",
"format": "date-time",
"example": "2025-01-08T00:00:00.000Z"
},
"status": {
"type": "string",
"example": "READY"
},
"meta": {
"type": "object",
"properties": {
"origin": {
"type": "string",
"example": "API"
},
"userAgent": {
"type": "string"
}
}
},
"stats": {
"type": "object",
"properties": {
"inputBodyLen": {
"type": "integer",
"example": 2000
},
"rebootCount": {
"type": "integer",
"example": 0
},
"restartCount": {
"type": "integer",
"example": 0
},
"resurrectCount": {
"type": "integer",
"example": 0
},
"computeUnits": {
"type": "integer",
"example": 0
}
}
},
"options": {
"type": "object",
"properties": {
"build": {
"type": "string",
"example": "latest"
},
"timeoutSecs": {
"type": "integer",
"example": 300
},
"memoryMbytes": {
"type": "integer",
"example": 1024
},
"diskMbytes": {
"type": "integer",
"example": 2048
}
}
},
"buildId": {
"type": "string"
},
"defaultKeyValueStoreId": {
"type": "string"
},
"defaultDatasetId": {
"type": "string"
},
"defaultRequestQueueId": {
"type": "string"
},
"buildNumber": {
"type": "string",
"example": "1.0.0"
},
"containerUrl": {
"type": "string"
},
"usage": {
"type": "object",
"properties": {
"ACTOR_COMPUTE_UNITS": {
"type": "integer",
"example": 0
},
"DATASET_READS": {
"type": "integer",
"example": 0
},
"DATASET_WRITES": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_READS": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_WRITES": {
"type": "integer",
"example": 1
},
"KEY_VALUE_STORE_LISTS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_READS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_WRITES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_INTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_EXTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_SERPS": {
"type": "integer",
"example": 0
}
}
},
"usageTotalUsd": {
"type": "number",
"example": 0.00005
},
"usageUsd": {
"type": "object",
"properties": {
"ACTOR_COMPUTE_UNITS": {
"type": "integer",
"example": 0
},
"DATASET_READS": {
"type": "integer",
"example": 0
},
"DATASET_WRITES": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_READS": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_WRITES": {
"type": "number",
"example": 0.00005
},
"KEY_VALUE_STORE_LISTS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_READS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_WRITES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_INTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_EXTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_SERPS": {
"type": "integer",
"example": 0
}
}
}
}
}
}
}
}
}
}
```