cve-search

Query the NVD CVE database for known vulnerabilities with keyword and severity filters.

3|1|Updated Dec 23, 2025

Search Tags:#vulnerability #api #cvss #cve #nvd #cve-search

Ready to run

npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill cve-search

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cve-search
Source: https://github.com/naporin0624/claude-web-audit-plugins/tree/main/skills/cve-search
Command: npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill cve-search

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill queries the NVD CVE database using API 2.0 to retrieve known vulnerabilities, including CVE details, CVSS scores, affected software, and references.

Core Features & Use Cases

Keyword/CVE search with comprehensive filtering (keyword, cve, cwe, severity, days).
Enriched results with CVSS scores and CWE references.
JSON output for integration into reports and pipelines.

Quick Start

Example: npx cve-search --keyword "jquery"

Frequently Asked Questions about cve-search

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I search for known vulnerabilities in specific software using CVE databases?▼

CVE search queries the NVD database to identify known vulnerabilities for software versions by keyword, CVE identifier, or CWE classification. Results include CVE IDs, CVSS severity scores, affected components, and references for security assessment and patch planning.

Can I filter CVE results by severity and recency when researching vulnerabilities?▼

Yes, CVE lookup supports filtering by CVSS severity level and disclosure date range. Apply keyword, CVE, CWE, and days filters to narrow results, then export enriched JSON output with scores and exploit indicators for reports and vulnerability management pipelines.

What information does an NVD API query return about a specific vulnerability?▼

NVD API 2.0 returns CVE identifiers, descriptions, CVSS scores, affected software versions, CWE references, advisory links, exploit availability flags, and bounty estimates in structured JSON format for integration into security workflows.

How do I automate vulnerability scanning across my software stack?▼

Use API-driven CVE queries with keyword and CWE filters to systematically check dependencies against the NVD database. Output JSON results for programmatic ingestion into security dashboards, patch management systems, and compliance reporting tools.

What's the difference between searching by CVE ID versus keyword in vulnerability lookup?▼

CVE-ID searches retrieve a specific vulnerability record with full details; keyword searches discover related vulnerabilities across software names, affected versions, and CWE categories, returning multiple matches for broader threat assessment.