NIST CVE Vulnerability Scanner
Free NIST National Vulnerability Database (NVD) CVE search API. Find vulnerabilities by keyword, product, severity, or date range. Returns full CVE details including CVSS v3 scores, CWE classifications, and affected software versions.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
keyword |
string | ❌ | Search term (e.g., Log4j, OpenSSL) |
cpe |
string | ❌ | CPE 2.3 string for product-specific search |
severity |
string | ❌ | critical, high, medium, low |
published_after |
string | ❌ | ISO date filter (e.g., 2024-01-01) |
results_per_page |
integer | ❌ | 1–2000 (default: 20) |
Example Response
{
"total_results": 847,
"vulnerabilities": [
{
"cve_id": "CVE-2024-3094",
"description": "XZ Utils backdoor — malicious code in liblzma 5.6.0/5.6.1",
"published": "2024-03-29",
"cvss_v3": {"score": 10.0, "severity": "CRITICAL", "vector": "AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},
"cwe": "CWE-506",
"affected_versions": ["xz 5.6.0", "xz 5.6.1"]
}
]
}
Use Cases
- Asset inventory CVE mapping for vulnerability management
- Software bill of materials (SBOM) security scanning
- Penetration testing reconnaissance automation
Access
# x402 endpoint — pay $0.01 USDC per call (Base mainnet)
POST https://x402.ntriq.co.kr/nist-cve-scan
# Service catalog
curl https://x402.ntriq.co.kr/services
x402 micropayments — USDC on Base, gasless EIP-3009