Search the world's CVEslive from our database
0 CVEs enriched with EPSS, CISA KEV, CERT-FR, MSRC, GHSA, Exploit-DB, and Nuclei. Public REST API, free tier available.
NVD-backed, continuously synced
CISA KEV catalog ∪ SSVC=active
Severity = CRITICAL, published in window
FIRST exploit-prediction probability
refreshed every 30 min · source: production PostgreSQL
Hot CVEs right now
Recent high-severity CVEs straight from our PostgreSQL catalog — with KEV, EPSS, and exploitation flags inline.
No CVEs indexed yet — the catalog sync has not completed for this environment.
Open CVE WatchThree lenses on the catalog
Same database, different cuts. Each list is a real query against cveCatalog at request time.
No new KEV adds in the last 30 days.
EPSS data warming up.
No unauthenticated RCEs flagged yet.
What we enrich every CVE with
Nine upstream sources, one normalized record per CVE.
Base CVE record + CVSS v3 scores and vectors
Known Exploited Vulnerabilities catalog with due dates
FIRST exploit-prediction score and percentile
French national CSIRT advisories with severity
Microsoft Security Response Center title + KB articles
GitHub Security Advisories cross-references
Public proof-of-concept and exploit identifiers
Detection-template availability flag
Change-log titles and history counts
What teams use it for
Vulnerability management
Continuous CPE-based monitoring with KEV / EPSS prioritization for the products you actually run.
Patch prioritization
Combine CVSS, EPSS, and KEV signals to rank which CVEs deserve emergency change windows.
CI/CD gating
Block pull requests when a dependency surfaces a high-EPSS or KEV-flagged CVE in the bulk API.
Compliance reporting
Export filtered CVE lists with CERT-FR / KEV / GHSA links for audit packets.
Frequently asked questions
How many CVEs are in the catalog?
The full NVD CVE catalog from 1999 to present is ingested with continuous backfill, and the count above reflects the live row count in our PostgreSQL store. We enrich each record with CISA KEV, EPSS, CERT-FR, MSRC, GHSA, Exploit-DB, Nuclei template availability, and OpenCVE change history when available.
How fresh is the data?
Daily NVD sync plus EPSS daily snapshots, CISA KEV refresh, and external enrichment cron jobs. The most recent CVEs typically land within a few hours of NVD publication.
What does "actively exploited" mean?
A CVE is shown as actively exploited when at least one of these is true: it appears in the CISA KEV catalog, FIRST has classified its SSVC exploitation level as "active", or our GCVE (Google CVE) enrichment has confirmed in-the-wild exploitation evidence.
How does EPSS differ from CVSS?
CVSS measures intrinsic severity (impact × exploitability). EPSS measures the empirical probability that a CVE will be exploited in the wild within the next 30 days, based on global telemetry. We surface both — most teams prioritize on EPSS × KEV first, then CVSS for ties.
Is CVE search included on the free tier?
Yes. The Free plan (€0, no credit card) includes 30 reputation/CVE checks per month with rate-limited API access. Pro (€99/mo) raises that to 10,000 and includes bulk, downloadable blocklists, AI-generated assessment, the SSE stream, webhooks, and STIX/TAXII.
Can I subscribe to alerts when new CVEs match my stack?
Yes — that is what CVE Watch is for. You define perimeters of CPE strings (the products and versions you run) and we continuously match new CVEs to those perimeters. Alerts are delivered via dashboard, email, webhook, or the SSE stream.
Is the API public?
The /api/cve and /api/cve/recent endpoints are publicly accessible (rate-limited) so you can integrate without an API key for low-volume usage. Higher-volume access requires registration and a free or paid plan.
How do I cite or link to a single CVE?
Every CVE in the catalog gets a stable canonical page at https://ismalicious.com/cve/CVE-YYYY-NNNNN with full metadata, JSON-LD, and links to the original NVD/KEV/CERT-FR/MSRC/GHSA references.
Wire CVE intel into your stack
Free API key, 30 checks/month, no credit card. Bulk and stream endpoints available on Pro.
No credit card required · 30 free checks/month