NVD CVE Search - Vulnerabilities, CVSS, CWE & CISA KEV
Pricing
$2.00 / 1,000 results
NVD CVE Search - Vulnerabilities, CVSS, CWE & CISA KEV
Search the NIST National Vulnerability Database by keyword, product CPE, CVSS severity, CWE, CISA KEV status, or published/modified date, or bulk-look-up CVE IDs. Returns CVSS v4/v3/v2 scores and vectors, CWEs, KEV dates, affected CPEs and references. Official NVD API 2.0.
Pricing
$2.00 / 1,000 results
Rating
0.0
(0)
Developer
Patrick Hebert
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 days ago
Last modified
Categories
Security
Limited permissionsShare
Search 300k+ CVEs in the NIST National Vulnerability Database or look up CVE IDs in bulk through the official NVD API 2.0. No scraping, login or proxy; an API key is optional.
Use cases
- Vulnerability management: pull every CRITICAL/HIGH CVE for your products (CPE) or keywords.
- Daily monitoring: schedule a run on the last day's modified CVEs, filtered to CISA KEV (known exploited).
- Vendor risk & due diligence: list CVEs for a vendor's products with CVSS and KEV status.
- Enrichment: turn a list of CVE IDs from a scanner into scores, CWEs, KEV deadlines and references.
- Security content & RAG: clean JSON with descriptions and references.
Input
Output (one row per CVE)
cveId, published, lastModified, vulnStatus, cvssV3Score, cvssV3Severity, cvssV3Vector, cvssV4Score, cvssV4Severity, cvssV2Score, inCisaKev, kevDateAdded, kevActionDue, kevRequiredAction, kevName, cwes, description, vulnerableCpes, references, nvdUrl. Unknown CVE IDs, bad input and empty searches return found: false and are not charged.
Pricing
Pay per result (per CVE returned).
Speed
NVD's public limit is 5 requests per 30 seconds, so the actor waits ~6.5 s between requests (each request returns up to 2,000 CVEs). Bulk CVE ID lookups take one request each. Add your own free NVD API key for ~10x faster ID lookups.
Notes
This product uses data from the NVD API but is not endorsed or certified by the NVD. NVD data is a US government work (public domain). Not affiliated with NIST.
