Pricing

$2.00 / 1,000 cve extracteds

NVD CVE Tracker by Vendor, Product, Severity

Pull new/modified CVEs from NIST NVD. Filter by vendor/product (CPE), severity, CWE, keyword. One row per CVE — id, description, CVSS v3 score, vector, CWEs, affected CPEs, refs. AppSec cron watchlist. NIST NVD REST 2.0 (free, no auth).

Pricing

$2.00 / 1,000 cve extracteds

Rating

0.0

(0)

Developer

vøiddo

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

NVD CVE Tracker — by Vendor, Product, Severity

Pull newly-published or newly-modified CVEs from NIST NVD. Filter by vendor/product (CPE 2.3), severity, CWE, or keyword. One clean row per CVE — id, description, CVSS v3 score & vector, CWEs, affected CPEs, references, NVD URL.

Built for cron: pass sinceDays: 1 for a daily AppSec watchlist of your tech stack.

Inputs

{
  "keywords": ["openssl", "cisco asa"],
  "cpeFilters": ["cpe:2.3:a:apache:*:*:*:*:*:*:*:*:*"],
  "severityFilters": ["HIGH", "CRITICAL"],
  "sinceDays": 7,
  "maxResultsPerQuery": 200
}

input	default	notes
`keywords`	—	Free-text searches over CVE descriptions. Each is a separate query.
`cpeFilters`	—	CPE 2.3 match strings (wildcards allowed). Each is a separate query.
`severityFilters`	all	Limit to `LOW`, `MEDIUM`, `HIGH`, `CRITICAL` (CVSS v3).
`cweId`	—	Optional CWE filter (e.g. `CWE-89`).
`sinceDays`	`7`	`lastModified >= now - sinceDays`. NVD max window is 120 days.
`maxResultsPerQuery`	`200`	Cap per keyword/CPE query. NVD page size up to 2000.
`apiKey`	—	Optional NVD API key — boosts rate from 5/30s to 50/30s.

Output

One row per CVE (deduplicated across keyword/CPE queries):

field	example
cveId	`CVE-2026-12345`
published	`2026-05-30T14:00:00.000`
lastModified	`2026-06-01T09:12:33.140`
vulnStatus	`Analyzed`, `Modified`, `Awaiting Analysis`
description	`In Apache HTTP Server <2.4.62, ...`
cvssV3Version	`3.1`
cvssV3BaseScore	`9.1`
cvssV3Severity	`CRITICAL`
cvssV3VectorString	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
exploitabilityScore	`3.9`
impactScore	`5.9`
cwes	`["CWE-119", "CWE-787"]`
affectedCpes	`["cpe:2.3:a:apache:http_server:2.4.61:::::::*"]`
references	`["https://www.openssl.org/news/secadv/20260530.txt", ...]`
nvdUrl	`https://nvd.nist.gov/vuln/detail/CVE-2026-12345`
queryOrigin	`kw=openssl sev=CRITICAL`

Daily cron pattern

{
  "cpeFilters": [
    "cpe:2.3:a:apache:*:*:*:*:*:*:*:*:*",
    "cpe:2.3:a:nginx:*:*:*:*:*:*:*:*:*",
    "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
  ],
  "severityFilters": ["HIGH", "CRITICAL"],
  "sinceDays": 1
}

Real-world questions this answers

AppSec triage. Daily firehose of HIGH+CRITICAL CVEs affecting our stack.
Vendor watch. Anything new from Cisco / Microsoft / Red Hat?
Supply-chain audit. New CVEs in a CPE-matched component.
Vulnerability research. Filter by CWE for class-specific datasets.

What it doesn't do

No EPSS / KEV enrichment yet (those are separate FIRST.org / CISA feeds; planned).
No vendor advisory PDFs — just NVD-stored references.
No exploit-availability flag (NVD doesn't expose exploit-db mapping reliably).

Maintained by

vøiddo studio — small independent shop.

Open Source Software Supply Chain MCP Server

ryanclinton/open-source-software-supply-chain-mcp

OSS dependency risk and SBOM compliance intelligence for application security teams, engineering leadership, and procurement.

Ryan Clinton

Entity Attack Surface MCP Server

ryanclinton/entity-attack-surface-mcp

Corporate cyber exposure intelligence via the Model Context Protocol. This MCP server orchestrates 11 data sources to discover and score an organization's digital attack surface -- from DNS and SSL infrastructure to technology vulnerabilities and CISA Known Exploited Vulnerabilities.

Ryan Clinton

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge

NVD CVE Vulnerability Crawler

jungle_synthesizer/nvd-cve-crawler

Crawl 250K+ CVE records from the NIST National Vulnerability Database. Extract CVSS v3.1 scores, severity ratings, attack vectors, affected products (CPE), CWE weaknesses, and exploit/patch status. Filter by keyword, severity, vendor, and date range.

BowTiedRaccoon

CVE Intelligence MCP - Updated

red.cars/cve-intelligence-mcp

CVE vulnerability intelligence for AI agents — NVD data, CVSS scoring, affected software, and vulnerability trend analysis.

AutomateLab

CVE Monitor — New Vulnerability Feed with Alerts

mukedlii/nvd-cve-monitor

Monitor the NIST National Vulnerability Database (NVD) for new and updated CVEs. Filter by vendor, product, CVSS score, or severity level. Get instant Telegram alerts when critical vulnerabilities affect your stack.

Genoff Márk

CVE Vulnerability Lookup (NIST NVD)

automation-lab/cve-vulnerability-lookup

Query the NIST NVD for CVE details — lookup by CVE ID, keyword, or CPE product. Returns CVSS scores, descriptions, CWE IDs, affected software, and patch links. No API key required.

Stas Persiianenko

NVD CVE Vulnerability Search

ryanclinton/nvd-cve-vulnerability-search

NVD CVE Vulnerability Search queries the NIST National Vulnerability Database (NVD) REST API v2.0 to retrieve detailed information about Common Vulnerabilities and Exposures (CVEs). The NVD is the U.S.

Ryan Clinton

CVE Vulnerability Monitor — NVD, CISA KEV & EPSS

nexgendata/cve-vulnerability-monitor

Monitor new/updated CVEs by vendor or product, enriched with CISA KEV exploited-flag and EPSS exploit probability. Official NVD data, no login.

NexGenData

CISA Known Exploited Vulnerabilities Search

ryanclinton/cisa-kev-search

Search and filter the official CISA Known Exploited Vulnerabilities (KEV) catalog -- the authoritative U.S. government list of vulnerabilities actively exploited in the wild.

Ryan Clinton

CIRCL CVE Search Scraper

parseforge/circl-cve-scraper

Scrape CVE vulnerability records from CIRCL CVE Search. Fetch the latest CVEs, look up by ID, browse vendor products, or list every CVE for a vendor/product. Returns CVSS, CWE, CPEs, references, CAPEC, and impact metrics.

ParseForge