Pricing

from $2.40 / 1,000 vulnerabilities

Try for free

Go to Apify Store

CVE Vulnerability Feed: NVD, CISA KEV & EPSS

Try for free

New and updated vulnerabilities from NVD with CVSS score and severity, CWE, affected vendors and products, references, CISA known-exploited status (date added, due date, ransomware use) and EPSS exploit likelihood. Filters by vendor, product, severity, CVSS, EPSS; alerts.

Pricing

from $2.40 / 1,000 vulnerabilities

Rating

0.0

(0)

Developer

Tapaswai Choudhary

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

CVE Vulnerability Feed — NVD, CISA KEV & EPSS

New and updated vulnerabilities from NVD in one clean feed, each with CVSS score and severity, weakness types (CWE), affected vendors and products, references, whether it is known exploited (CISA KEV: date added, remediation due date, ransomware use) and its EPSS probability of exploitation. Filter to your stack and get only new CVEs every day. Or watch CISA's known-exploited catalog for new additions.

Built for security and IT teams, MSPs and MSSPs, vulnerability-management and GRC vendors, threat-intelligence analysts, and AI agents.

What you get

Field	Meaning
`cveId`, `url`, `published`, `lastModified`, `status`, `description`	The CVE
`cvssScore`, `severity`, `cvss` (vector, version, attack vector)	How bad it is
`cwe`	Weakness types
`vendors`, `products`, `cpes`	What is affected
`knownExploited`, `kev` (date added, due date, required action, ransomware use)	Exploited in the wild (CISA)
`epss`, `epssPercentile`	Chance of exploitation in the next 30 days (FIRST)
`publicExploitReference`, `references`	Advisories, patches, exploit links

Why this Actor

Three sources joined: NVD, CISA KEV and EPSS in one row.
Filters: vendors, products, keywords, severity, minimum CVSS, known exploited only, minimum EPSS.
Alerts: Only new CVEs + a daily schedule, to Slack, email, Jira (via webhooks) or Google Sheets.
Two modes: everything new in NVD, or CVEs newly added to CISA's known-exploited list.
For AI agents. Callable as an MCP tool.

How to use it

Critical and high CVEs for your vendors, as a daily alert:

{ "withinDays": 2, "vendors": ["microsoft", "cisco", "fortinet"], "severities": ["CRITICAL", "HIGH"], "onlyNew": true }

Newly known-exploited vulnerabilities this week:

{ "source": "kev", "withinDays": 7 }

Pricing

$3 per 1,000 vulnerabilities plus a small start fee per run. On the Apify free plan a run returns up to 100 vulnerabilities.

Good to know

New CVEs often have no CVSS or EPSS score for a few days until NVD and FIRST analyse them.
For long date ranges, add your free NVD API key (optional) to read about 10× faster.
Questions: tacps126@gmail.com.

NVD CVE Vulnerability Crawler

jungle_synthesizer/nvd-cve-crawler

Crawl 250K+ CVE records from the NIST National Vulnerability Database. Extract CVSS v3.1 scores, severity ratings, attack vectors, affected products (CPE), CWE weaknesses, and exploit/patch status. Filter by keyword, severity, vendor, and date range.

BowTiedRaccoon

NVD Critical CVE & KEV Vulnerability API

koalastuff/nvd-cve-vulnerability-monitor

Search NIST NVD CVEs by product, date, CVSS severity, CWE, CVE ID, or CISA KEV status. Export normalized cybersecurity vulnerability data for SOC teams.

Timo Schmidt

CISA KEV Ransomware Vulnerability Monitor

koalastuff/cisa-kev-priority-monitor

Search CISA Known Exploited Vulnerabilities by vendor, product, ransomware use, CWE, due date, or keyword. Export remediation-ready cybersecurity data.

Timo Schmidt

NVD CVE Vulnerability Scraper (CVSS, CWE, CPE)

scrapers_lat/nvd-cve-scraper

Scrape CVE vulnerability records from the National Vulnerability Database with description, CVSS score and severity, attack vector, CWE weakness, reference links and affected products (CPE). Search by keyword, CVE ID or published date range. Export to JSON, CSV or Excel.

Scrapers Lat

CVE Monitor — New Vulnerability Feed with Alerts

mukedlii/nvd-cve-monitor

Monitor the NIST National Vulnerability Database (NVD) for new and updated CVEs. Filter by vendor, product, CVSS score, or severity level. Get instant Telegram alerts when critical vulnerabilities affect your stack.

Genoff Márk

CVE Risk Prioritizer, from NVD, CISA KEV and EPSS data

br_data_hub/cve-risk-prioritizer

One row per CVE built from public NVD (CVSS, CWE, affected products), CISA KEV (exploited, due date, ransomware) and FIRST EPSS data, with an explainable patch priority.

br_data_hub

CVE Vulnerability Lookup: NVD, CISA KEV, EPSS, OSV

pushbuild/cve-vulnerability-lookup

Look up CVEs by ID or keyword, or check open-source packages for known vulnerabilities. Each result has CVSS score, CWE, affected products and fixed versions, CISA known-exploited status and EPSS exploit probability.

Pushbuild Data

Vulnerability Checker: CVE, CISA KEV & EPSS for SBOMs

reliable_tools/vulnerability-checker

Vulnerability checker for your software inventory or SBOM: CVEs per component with CVSS, CISA KEV exploited status and due date, EPSS score, fixed version and a priority bucket. No scanning.

Reliable Tools

NVD CVE Scraper — Vulnerabilities by Product, Severity & KEV

northbell/nvd-cve-scraper

CVE vulnerabilities from the official NIST NVD API 2.0: description, CVSS v3.1 / v4 score, CWE, affected vendor and product, CISA KEV fields. Filter by product, keyword, severity or KEV, and flag CVEs that are new or changed since your last run.

Northbell

CVE Alerts by Vendor or Product: New NVD Vulnerabilities

accountable_eel/cve-vendor-product-alerts

Monitor National Vulnerability Database (NVD) CVE alerts by vendor, product name, or CPE. Get new and modified vulnerabilities with CVSS scores, severity, CWE IDs, and affected versions. Schedule alerts with no duplicate charges.