NIST National Vulnerability Database (NVD)

Dataset · US National Institute of Standards and Technology · primary source ↗

Full CVE catalog with CVSS v3 scores, CWE codes, and affected-product CPEs. ~240k CVEs lifetime.

Source agency
US National Institute of Standards and Technology
License / terms
API endpoint

Keywords

NISTNVDCVECVSSvulnerabilityCWE

Provenance

Every record in this dataset can be traced back to its primary source at https://services.nvd.nist.gov/rest/json/cves/2.0. Source-specific terms apply. US federal employee-authored works are generally public domain under 17 USC 105; non-federal and third-party material retains source terms. Free or keyless access does not alter source terms. AI Analytics-authored metadata and normalization are CC0 only where expressly stated.

For agents