Security Wanderings

Publicly Available CVE Related API Endpoints

Summary Table

Website Additional Description
NVD   The CVE API is used to easily retrieve information on a single CVE or a collection of CVE from the NVD.
CVE Search GitHub cve-search project is a set of tools to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) to facilitate search and processing of CVEs. A public API of cve-search is operated by CIRCL and can be accessed without installing cve-search
CVE List V5 CVE.org The CVE List is catalog of all CVE Records identified by, or reported to, the CVE Program.This repository hosts bulk download files of CVE Records in CVE JSON 5.0 format (view the schema). You may search, download, and use the content hosted in this repository, per the CVE Program Terms of Use.
Open CVE GitHub OpenCVE is a platform used to locally import the list of CVEs and perform searches on it (by vendors, products, CVSS, CWE…).Users subscribe to vendors or products, and OpenCVE alerts them when a new CVE is created or when an update is done in an existing CVE.

NVD

Retrieves the vulnerabilities associated with KEV, paginated from 980 to 999

https://services.nvd.nist.gov/rest/json/cves/2.0/?hasKev&resultsPerPage=20&startIndex=980

curl --insecure -XGET -H "Content-type: application/json" 'https://services.nvd.nist.gov/rest/json/cves/2.0/?hasKev&resultsPerPage=20&startIndex=980'
https://cve.circl.lu/api/search/microsoft/office

It doesn’t work for now.

CVE List V5

https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7002.json

Open CVE

https://www.opencve.io/api/cve/CVE-2006-0986
https://www.opencve.io/api/vendors/wordpress/cve?page=31

Gists

Embedded content

You can also embed a lot of stuff, for example from YouTube, using the embed.html include.