{"uid":"cap_hWnO8y3emui2oDerAuRML","slug":"fittings-cve-search-26485f36","name":"fittings CVE Search","description":"Search the National Vulnerability Database by keyword, CPE, publication window or CVSS severity, returning a paginated list with scores and CWE classifications.","url":"https://fittings.sh/v1/cve/search?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"cpe":{"type":"string","description":"CPE 2.3 match string, e.g. cpe:2.3:a:apache:log4j"},"exact":{"type":"boolean","description":"Match the keyword as an exact phrase"},"limit":{"type":"number","description":"1-50, default 10"},"offset":{"type":"number","description":"0-10000, default 0"},"keyword":{"type":"string","description":"Words to match in the description; multiple words are ANDed"},"severity":{"type":"string","description":"LOW | MEDIUM | HIGH | CRITICAL (CVSS v3)"},"publishedTo":{"type":"string","description":"YYYY-MM-DD; requires publishedFrom"},"publishedFrom":{"type":"string","description":"YYYY-MM-DD; requires publishedTo, window at most 120 days"},"includeRejected":{"type":"boolean","description":"Include withdrawn CVE records, default false"}}}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.00596","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.00596/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.00596","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.00596","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gQD6bOFn_Q5em2hY-Csho","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.00596","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Search the National Vulnerability Database (NVD) by keyword, CPE, date range, or CVSS severity, returning paginated CVE records with scores and CWE classifications.","exampleAgentPrompt":"Search the NVD for CRITICAL severity CVEs matching 'remote code execution' published between 2024-01-01 and 2024-03-31, and return the first 20 results.","exampleUseCases":[{"title":"Audit dependencies for known vulnerabilities","prompt":"Search the National Vulnerability Database for any CVEs matching the CPE cpe:2.3:a:apache:log4j and filter to only HIGH or CRITICAL severity — give me the first 10 results."},{"title":"Weekly threat intel digest","prompt":"Find all CRITICAL CVEs published between 2024-06-01 and 2024-06-30 — up to 20 results — so I can review what new critical vulnerabilities dropped this month."},{"title":"Research specific vulnerability class","prompt":"Search NVD for CVEs containing the keyword 'heap overflow' with severity HIGH, give me the first 15 results starting from offset 0."}],"resultDescription":"A paginated list of CVE records from the NVD, each including the CVE ID, CVSS v3 severity and base score, CWE classification(s), a human-readable vulnerability description, and publication/modification dates. The response also includes total result count to support further pagination.","failureModes":["Invalid or malformed CPE string returns no results or a 400 error","publishedFrom/publishedTo date window exceeding 120 days returns an error","Missing publishedFrom when publishedTo is supplied (or vice versa) causes a validation error","Offset beyond 10000 is rejected","Severity value outside LOW/MEDIUM/HIGH/CRITICAL is invalid","No matching CVEs returns an empty result list","Rate limiting or upstream NVD API unavailability may cause transient failures"],"whenToPreferThis":"Use this endpoint when you need to query the authoritative NIST NVD for CVE data with flexible filters — keyword, CPE, severity, or date range — and want a straightforward paginated JSON response. Prefer it over the GitHub Advisory Database endpoint (also on fittings.sh) when you need broad NVD coverage rather than GitHub-ecosystem-specific advisories, or when you don't have a specific GHSA/CVE ID to look up directly.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T06:44:44.154Z","isFirstParty":false,"canonicalSlug":"fittings-cve-search-26485f36"}