Skip to main content
fastcrw
All providers

NIST National Vulnerability Database

DeveloperUS

services.nvd.nist.gov

CVE records with CVSS scores, references and affected configurations.

Try it nowRead the docs

Capabilities (6)

GET /v1/data/nvd/cpe-match1 credit

Returns the match-criteria records NVD uses to translate a vulnerability's version ranges into concrete products: each criteria string with its version bounds and the full list of cpeNames it expands to.

cveId?matchCriteriaId?matchStringSearch?lastModStartDate?lastModEndDate?resultsPerPage?startIndex?
GET /v1/data/nvd/cpes1 credit

Searches NIST's official CPE dictionary and returns matching product entries with their canonical cpeName, cpeNameId, human-readable titles, reference links and deprecation status.

keywordSearch?keywordExactMatch?cpeNameId?cpeMatchString?matchCriteriaId?lastModStartDate?lastModEndDate?resultsPerPage?startIndex?
GET /v1/data/nvd/cve1 credit

Returns the single NVD record for one CVE: descriptions, CVSS v2/v3.1/v4 metrics and vectors, CWE weaknesses, references, configuration (CPE) ranges, and publication and last-modified timestamps.

cveId
GET /v1/data/nvd/cve-history1 credit

Returns the ordered audit trail of one CVE: every modification event with its timestamp, the source that made it, and the exact fields added, changed or removed.

cveIdeventName?changeStartDate?changeEndDate?resultsPerPage?startIndex?
GET /v1/data/nvd/cves1 credit

Searches the NVD CVE corpus and returns a paged list of full CVE records, filterable by keyword, affected CPE, CWE, CVSS severity, reporting source and publication or modification window.

cveId?keywordSearch?keywordExactMatch?cpeName?cweId?cvssV2Severity?cvssV3Severity?cvssV3Metrics?sourceIdentifier?virtualMatchString?versionStart?versionStartType?versionEnd?versionEndType?pubStartDate?pubEndDate?lastModStartDate?lastModEndDate?resultsPerPage?startIndex?
GET /v1/data/nvd/sources1 credit

Returns the registry of organisations that supply data to NVD: each source's name, contact email, every identifier it publishes under, and its CVSS v2/v3/v4 and CWE acceptance levels.

sourceIdentifier?lastModStartDate?lastModEndDate?resultsPerPage?startIndex?

Licence

A work of the United States Government, not subject to domestic copyright under 17 U.S.C. 105, published by the agency as open data.

https://nvd.nist.gov/developers/terms-of-use

Attribution

Display this wherever you show the data. It arrives on every response as provenance.attribution_text.

Source: NIST National Vulnerability Database

Cache: up to 21600s

Read the docsBack to the catalog