# NVD CVE Vulnerability Search - Vendor Risk Diligence API (`pink_comic/nvd-cve-vulnerability-database`) Actor

Search NIST NVD CVEs by keyword, severity, vendor, or date for vendor-risk diligence and patch workflows. CVSS, affected products, and source-linked vulnerability evidence — not proof a deployment is exploitable. Related: CISA KEV catalog, SSL certificate checker.

- **URL**: https://apify.com/pink_comic/nvd-cve-vulnerability-database.md
- **Developed by:** [Ava Torres](https://apify.com/pink_comic) (community)
- **Categories:** Business, Developer tools, Agents
- **Features:** Limited permissions
- **Stats:** 6 total users, 0 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $1.60 / 1,000 results

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## NVD CVE Vulnerability Database - Security & Compliance Intelligence

Search the **NIST National Vulnerability Database (NVD)** for CVE security vulnerabilities. Filter by keyword, CVSS severity, and publication date. Extract structured data for vulnerability monitoring, security compliance, patch management, and threat intelligence workflows.

No API key required. Uses the official [NVD CVE API 2.0](https://nvd.nist.gov/developers/vulnerabilities).

### What you get

Each CVE record includes:

- **CVE ID** (e.g. `CVE-2021-44228`)
- **Description** — plain-English explanation of the vulnerability
- **Severity** — CVSS v3 severity: CRITICAL, HIGH, MEDIUM, or LOW
- **CVSS score** — base score from 0.0 to 10.0
- **CVSS vector string** — full CVSS v3 vector for scoring details
- **CWE ID** — weakness category (e.g. `CWE-79` for XSS, `CWE-89` for SQL injection)
- **Affected products** — CPE URI list of vulnerable software and versions (up to 50 per CVE)
- **Published date** and **last modified date**
- **Source URL** — direct link to the NVD detail page

### Use cases

- **Vulnerability monitoring:** Track new CRITICAL and HIGH CVEs affecting your technology stack
- **Security compliance:** Audit CVE exposure across specific software components for SOC 2, ISO 27001, or FedRAMP
- **Patch management:** Identify unpatched vulnerabilities by keyword or product CPE
- **Threat intelligence:** Correlate CVE data with CVSS scores and CWE categories for risk prioritization
- **Penetration testing research:** Find known vulnerabilities by keyword (e.g. "apache", "openssl", "remote code execution")
- **Security tooling:** Enrich SIEM, vulnerability scanners, or asset management systems with NVD data

### Input

| Field | Type | Description |
|-------|------|-------------|
| `keywordSearch` | string | Keyword to search CVE descriptions (e.g. `log4j`, `apache`, `buffer overflow`) |
| `severity` | string | CVSS v3 severity filter: `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, or blank for all |
| `pubStartDate` | string | Published on or after this date: `YYYY-MM-DD` or `YYYY-MM-DDTHH:MM:SS.mmm` |
| `pubEndDate` | string | Published on or before this date: `YYYY-MM-DD` or `YYYY-MM-DDTHH:MM:SS.mmm` |
| `maxResults` | integer | Max records to return (default 100, max 20,000) |

All fields are optional. With no filters, returns the most recently published CVEs.

### Output example

```json
{
  "cveId": "CVE-2021-44228",
  "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints...",
  "severity": "CRITICAL",
  "cvssScore": 10.0,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "cweId": "CWE-917",
  "affectedProducts": [
    "cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*",
    "cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*"
  ],
  "publishedDate": "2021-12-10T10:15:09.143",
  "lastModifiedDate": "2023-04-03T20:15:08.127",
  "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228"
}
```

### Rate limits

The NVD API allows 5 requests per 30-second rolling window without an API key. This actor paginates automatically and respects the rate limit between pages. Large queries (>2,000 results) will take additional time due to enforced delays between pages.

### Data source

Uses the official [NVD CVE API 2.0](https://services.nvd.nist.gov/rest/json/cves/2.0) maintained by NIST. Data is authoritative, continuously updated, and free to use. Coverage spans all published CVEs from 1999 to present.

### How to use

1. Open [NVD CVE Vulnerability Search - Vendor Risk Diligence API](https://apify.com/pink_comic/nvd-cve-vulnerability-database) in Apify Console and click **Start** (or **Try for free**).
2. Fill in the input form - start with **Keyword Search**, **Max Results**. Every field is optional unless marked required, and the form is prefilled with a working example.
3. Set **Maximum results** to cap your cost, then run the Actor.
4. Download the results as JSON, CSV, Excel, XML or HTML, or pull them with the Apify API.

#### Example input

```json
{
  "keywordSearch": "log4j",
  "maxResults": 10
}
```

### Pricing

Pay per event: **$0.002 per result** plus **$0.0001 per run start**. No subscription to this Actor is needed. Apify Store discounts apply, so the price per result is lower on Silver, Gold and higher Apify plans. Use **Maximum results** to cap the cost of each run.

### FAQ

#### How much does NVD CVE Vulnerability Search - Vendor Risk Diligence API cost?

$0.002 per result plus $0.0001 per run. For example, 1,000 results cost about $2.00. Higher Apify plans get a Store discount.

#### Do I need an API key or login?

This Actor has an optional or required key field in the input; see the input table above.

#### Can I run it on a schedule or from code?

Yes. Use Apify Schedules for recurring runs, or call it from the Apify API, the JavaScript or Python client, Make, Zapier, n8n, or any MCP-compatible AI agent.

#### Why did my run return no results?

Your filters are probably too narrow. Remove a filter or broaden the search, then run again. You only pay the result price for records that are actually saved.

#### Is the data accurate and up to date?

Each run fetches live data from the source described above, so results are as current as that source. Verify critical records with the original source before acting on them.

### Use with the API

```bash
curl -X POST "https://api.apify.com/v2/acts/pink_comic~nvd-cve-vulnerability-database/run-sync-get-dataset-items?token=YOUR_APIFY_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{"keywordSearch": "log4j", "maxResults": 10}'
```

# Actor input Schema

## `keywordSearch` (type: `string`):

Search CVE descriptions by keyword (e.g. "apache", "log4j", "remote code execution"). Leave blank to search without a keyword filter.

## `severity` (type: `string`):

Filter results by CVSS v3 severity. Leave blank to include all severities.

## `pubStartDate` (type: `string`):

Filter CVEs published on or after this date. Use ISO 8601 format: YYYY-MM-DD or YYYY-MM-DDTHH:MM:SS.mmm (e.g. "2024-01-01").

## `pubEndDate` (type: `string`):

Filter CVEs published on or before this date. Use ISO 8601 format: YYYY-MM-DD or YYYY-MM-DDTHH:MM:SS.mmm (e.g. "2024-12-31").

## `maxResults` (type: `integer`):

Maximum number of CVE records to return. NVD returns up to 2,000 per API page; large result sets are paginated automatically.

## Actor input object example

```json
{
  "keywordSearch": "log4j",
  "severity": "",
  "pubStartDate": "",
  "pubEndDate": "",
  "maxResults": 100
}
```

# Actor output Schema

## `results` (type: `string`):

All records from this run in the default dataset, shown with the Overview table view.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "keywordSearch": "log4j",
    "severity": "",
    "pubStartDate": "",
    "pubEndDate": "",
    "maxResults": 100
};

// Run the Actor and wait for it to finish
const run = await client.actor("pink_comic/nvd-cve-vulnerability-database").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = {
    "keywordSearch": "log4j",
    "severity": "",
    "pubStartDate": "",
    "pubEndDate": "",
    "maxResults": 100,
}

# Run the Actor and wait for it to finish
run = client.actor("pink_comic/nvd-cve-vulnerability-database").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "keywordSearch": "log4j",
  "severity": "",
  "pubStartDate": "",
  "pubEndDate": "",
  "maxResults": 100
}' |
apify call pink_comic/nvd-cve-vulnerability-database --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,pink_comic/nvd-cve-vulnerability-database"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/w9pTwKe5cBDW5x7OQ/builds/qG9rOJZ7mWe2H15Bi/openapi.json