Pricing

from $2.00 / 1,000 results

Try for free

Go to Apify Store

NVD CVE Scraper - Vulnerabilities, CVSS, CWE & CPE

Try for free

Search the official NIST National Vulnerability Database CVE 2.0 API. Export CVE descriptions, CVSS metrics, CWE weaknesses, affected CPEs, references, and CISA KEV fields.

Pricing

from $2.00 / 1,000 results

Rating

0.0

(0)

Developer

Thirdwatch

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

NVD CVE Scraper

Search NIST NVD vulnerabilities and export CVE descriptions, CVSS scores, CWE IDs, affected products, references, and CISA KEV status.

What you get

Build a structured vulnerability feed from the National Vulnerability Database by keyword or exact CVE ID. Results combine severity and scoring details with weaknesses, affected product identifiers, advisory references, and Known Exploited Vulnerability fields for prioritization and reporting.

Output fields

Field	Description
`cve_id`	CVE identifier
`source_identifier`	Organization that supplied the record
`published`	Initial publication timestamp
`last_modified`	Latest NVD modification timestamp
`vulnerability_status`	Current record status
`description`	English vulnerability description
`cvss_version`	Selected CVSS version
`cvss_vector`	CVSS vector string
`cvss_score`	Base score
`severity`	Low, Medium, High, or Critical rating
`exploitability_score`	CVSS exploitability score when available
`impact_score`	CVSS impact score when available
`cwe_ids`	Associated CWE weakness identifiers
`affected_cpes`	Affected CPE product identifiers, including nested matches
`references`	Advisory URLs, sources, and tags
`known_exploited`	Whether NVD includes CISA KEV fields
`cisa_exploit_added`	Date added to CISA KEV
`cisa_action_due`	Federal remediation due date
`cisa_required_action`	CISA required action
`cisa_vulnerability_name`	CISA vulnerability name
`nvd_url`	Official NVD record
`query`	Keyword or CVE ID used
`source`	Source name

Example output

{
  "cve_id": "CVE-2021-44228",
  "published": "2021-12-10T10:15:09.143",
  "description": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints.",
  "cvss_version": "3.1",
  "cvss_score": 10.0,
  "severity": "CRITICAL",
  "cwe_ids": ["CWE-502", "CWE-917"],
  "known_exploited": true,
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
  "query": "CVE-2021-44228"
}

Input parameters

Parameter	Required	Description
`keywordQueries`	No	Product, vendor, or vulnerability searches. Defaults to `Apache`.
`cveIds`	No	Exact identifiers such as `CVE-2021-44228`.
`severities`	No	Any combination of `LOW`, `MEDIUM`, `HIGH`, and `CRITICAL`.
`onlyKnownExploited`	No	Keep only records with CISA Known Exploited Vulnerability fields. Defaults to false.
`maxResultsPerSearch`	No	Maximum matching CVEs per keyword or ID. Defaults to 10.

Use cases

Security operations teams: monitor newly published critical vulnerabilities by product.
Vulnerability managers: enrich asset and ticket records with CVSS, CWE, CPE, and KEV data.
Researchers: build source-linked datasets for vulnerability trend analysis.
Developers: schedule an export into a SIEM, risk dashboard, or remediation workflow.

Limitations

NVD records evolve, and scoring or affected-product details may lag vendor advisories. Some CVEs lack CVSS, CWE, CPE, or CISA fields. Keyword matching searches descriptions rather than your private asset inventory. Validate remediation decisions against vendor advisories and the linked NVD record.

Compared to alternatives

Compared with benthepythondev/nvd-cve-scraper, this Actor adds exact CVE lookup, severity filters, affected CPEs, and CISA KEV fields while starting at a lower base result price at publication. Compared with compute-edge/nist-nvd-scraper, it adds an explicit Known Exploited-only workflow and includes CISA action dates and required actions. Store pricing and features can change.

FAQ

Can I look up one CVE without a keyword search?

Yes. Put the identifier in cveIds and clear keywordQueries.

Which CVSS version is returned?

The row uses the best available primary metric, preferring CVSS 4.0, then 3.1, 3.0, and 2.0.

Does known exploited mean the vulnerability is exploited everywhere?

No. It means the NVD record carries CISA KEV metadata. Use your exposure and asset context to prioritize action.

Explore more data products at thirdwatch.dev. Related Thirdwatch Actors: Google News Scraper, Google Search Scraper, and SEC EDGAR Scraper.

Last verified: 2026-07

NVD CVE Vulnerability Scraper (CVSS, CWE, CPE)

scrapers_lat/nvd-cve-scraper

Scrape CVE vulnerability records from the National Vulnerability Database with description, CVSS score and severity, attack vector, CWE weakness, reference links and affected products (CPE). Search by keyword, CVE ID or published date range. Export to JSON, CSV or Excel.

Scrapers Lat

NVD CVE Scraper — Vulnerabilities, CVSS Scores & CWE

devilscrapes/nvd-cve-vulnerabilities-scraper

Search the NIST National Vulnerability Database and export CVE records — CVE ID, description, CVSS score and severity, attack vector, CWE weakness, publication dates and reference links — as clean JSON, CSV or Excel.

DevilScrapes

NVD CVE Vulnerability Intelligence

wakey7dev/nvd-cve-normalizer

Search NIST NVD for CVE vulnerabilities — CVSS scores, affected products, patches. Cybersecurity research, vulnerability management, threat intelligence.

Chris Wakefield

NIST NVD CVE Scraper

parseforge/nist-nvd-cve-scraper

Scrapes CVE records from the NIST National Vulnerability Database by keyword, CVE ID, severity, CWE, date range, or CISA KEV status. Returns each vulnerability as a flat row with CVSS scores, affected products, weaknesses, and references.

ParseForge

NVD CVE Change History Scraper

ninhothedev/nvd-cve-history-scraper

$0.5/1K 🔥 NVD CVE History Scraper! Track CVE vulnerability records, change history, CVSS scores & references from the NVD. No key. JSON, CSV, Excel or API in seconds. Feed a security-monitoring or threat-intel tool ⚡

ninhothedev

NVD CVE Scraper - Vulnerability Database API

pink_comic/nvd-cve-vulnerability-database

Search the NIST NVD CVE vulnerability database by keyword, CVSS severity, vendor, or date. Use as an NVD scraper / CVE API for DevSecOps, patch management, threat intel, compliance monitoring, and security vulnerability research. No API key needed; pay per result.

Ava Torres

NVD CVE Vulnerability Crawler

jungle_synthesizer/nvd-cve-crawler

Crawl 250K+ CVE records from the NIST National Vulnerability Database. Extract CVSS v3.1 scores, severity ratings, attack vectors, affected products (CPE), CWE weaknesses, and exploit/patch status. Filter by keyword, severity, vendor, and date range.

BowTiedRaccoon

CVE Vulnerabilities Scraper: NVD Lookup & Dependency Audit

glitchbound/cve-scraper

Look up CVE vulnerabilities from NIST's NVD with CVSS score, CWE type and affected vendors, or audit your dependencies against Google's OSV to see which advisories hit the exact versions you run, each with the version that fixes it. npm, PyPI, Go, Maven. No API key.

Daniel Meshulam

CISA KEV Known Exploited Vulnerabilities Scraper

scrapers_lat/cisa-kev-exploited-vulns-scraper

Scrape the CISA Known Exploited Vulnerabilities catalog: CVEs actively exploited in the wild. Filter by vendor, product, CVE, CWE, ransomware use, date added and due date. Enrich each CVE with EPSS score, percentile and urgency. JSON, CSV, Excel.

Scrapers Lat

NVD Vulnerability Scraper

crawlerbros/nvd-vulnerability-scraper

Scrape the NIST National Vulnerability Database (NVD) - the U.S. government repository of CVE records, CVSS scores, CWE classifications, and Known Exploited Vulnerabilities (KEV). Search by keyword, lookup by CVE ID, filter by severity, date range, or CWE weakness.