NIST National Vulnerability Database (NVD)

Name: NIST National Vulnerability Database (NVD)
Creator: US National Institute of Standards and Technology
License: https://creativecommons.org/publicdomain/zero/1.0/

Dataset · US National Institute of Standards and Technology · primary source ↗

Full CVE catalog with CVSS v3 scores, CWE codes, and affected-product CPEs. ~240k CVEs lifetime.

Source agency

US National Institute of Standards and Technology

License

CC0 / US public domain

API endpoint

/api/v1/nvd/recent

Keywords

NISTNVDCVECVSSvulnerabilityCWE

Provenance

Every record in this dataset can be traced back to its primary source at https://services.nvd.nist.gov/rest/json/cves/2.0. Underlying content is a US federal government work (public domain under 17 USC §105); our derived data is licensed CC0 1.0.

For agents

JSON-LD: Accept: application/ld+json
API spec: /openapi.json
MCP tools that query this: see /mcp tools/list
Catalog: /datasets/