Cyber Vulnerability Intelligence — CVE, KEV, EPSS & OSV

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

Track software security vulnerabilities from the US government NVD: search CVEs by keyword, vendor, product and severity, each row with CVSS score, CISA known-exploited flag and EPSS exploit probability. Monitor mode for new CVEs. No API key.

Joins the official NVD CVE API 2.0, the CISA Known Exploited Vulnerabilities catalog and FIRST EPSS into one deduplicated, risk-prioritized vulnerability record with incremental change tracking and durable cross-run state.

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

FIRST EPSS Scores Scraper - CVE Exploit Probability

benthepythondev/first-epss-scores-scraper

Look up CVE exploit-probability scores and export EPSS, percentile and scoring date from the FIRST public service.

CISA KEV Scraper - Exploited Vulnerability Data

benthepythondev/cisa-kev-scraper

Scrape CISA Known Exploited Vulnerabilities catalog: CVEs, vendors, products, due dates and remediation notes.

Search CISA Known Exploited Vulnerabilities by CVE, vendor, product, ransomware-use, remediation deadline, and added date. Returns source-linked CISA catalog evidence for vulnerability prioritization. KEV does not mean every deployment is vulnerable or compromised.

Search NIST NVD CVE records by product, date, CVSS severity, CWE, CVE ID, or CISA KEV status. Export normalized vulnerability data for security workflows.