{ "openapi": "3.0.1", "info": { "title": "CVE Records $0.49/1K: Security Data, Vulnerability Database", "description": "$0.49/1K | 389,995 CVEs joined with CISA KEV and EPSS — the only feed here that tells you what is exploited RIGHT NOW, what ransomware crews use and the odds of an attack. NVD data, CVE data, KEV catalog, EPSS scores, threat intelligence data, security risk data, vulnerability API.", "version": "0.1", "x-build-id": "cuJNwbta6Kb0bdJo8" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/snow_leo_data~cve-nvd-kev-vulnerability-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-snow_leo_data-cve-nvd-kev-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/snow_leo_data~cve-nvd-kev-vulnerability-scraper/runs": { "post": { "operationId": "runs-sync-snow_leo_data-cve-nvd-kev-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/snow_leo_data~cve-nvd-kev-vulnerability-scraper/run-sync": { "post": { "operationId": "run-sync-snow_leo_data-cve-nvd-kev-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "keyword": { "title": "Keyword — free text across all 389,995 CVEs in NVD", "type": "string", "description": "Free-text search across NVD — `log4j`, `apache`, `remote code execution`. Leave empty for everything." }, "severity": { "title": "Severity — CVSS v3 band, applied at the source", "enum": [ "", "CRITICAL", "HIGH", "MEDIUM", "LOW" ], "type": "string", "description": "CVSS v3 severity band, applied at the source.", "default": "" }, "kevOnly": { "title": "Only actively exploited (CISA KEV)", "type": "boolean", "description": "1,705 of the 389,995 CVEs are known to be exploited in the wild. This keeps only those — the ones that are not a forecast but a fact.", "default": false }, "modifiedWithinDays": { "title": "Changed within", "minimum": 0, "maximum": 120, "type": "integer", "description": "Ask NVD for records touched in the last N days. The source accepts windows up to 120 days; both ends are computed for you. Ideal for a daily monitor.", "default": 0 }, "publishedWithinDays": { "title": "Published within", "minimum": 0, "maximum": 120, "type": "integer", "description": "Only newly published CVEs. Ignored when \"Changed within\" is set.", "default": 0 }, "cveId": { "title": "One specific CVE", "type": "string", "description": "e.g. `CVE-2021-44228`. Overrides the other search fields.", "default": "" }, "ransomwareOnly": { "title": "Only ransomware-linked", "type": "boolean", "description": "CISA marks which exploited vulnerabilities are used in ransomware campaigns. This keeps only those.", "default": false }, "minCvss": { "title": "Minimum CVSS score", "minimum": 0, "maximum": 10, "type": "integer", "description": "0–10. Records with no CVSS score at all are dropped when this is set.", "default": 0 }, "minEpss": { "title": "Minimum EPSS probability", "type": "string", "description": "0–1, e.g. `0.5` for a coin-flip chance of an exploitation attempt within 30 days.", "default": "" }, "minRiskScore": { "title": "Minimum risk score", "minimum": 0, "maximum": 100, "type": "integer", "description": "0–100, the combined score described in the README.", "default": 0 }, "priorities": { "title": "Priority is one of", "type": "array", "description": "The plain-English bucket this Actor computes.", "items": { "type": "string", "enum": [ "act now", "urgent", "high", "medium", "low" ], "enumTitles": [ "Act now (exploited)", "Urgent", "High", "Medium", "Low" ] }, "default": [] }, "vendors": { "title": "Vendors", "type": "array", "description": "Matched against vendors parsed out of the CPE strings, e.g. `microsoft`, `cisco`.", "default": [], "items": { "type": "string" } }, "products": { "title": "Products", "type": "array", "description": "Matched against products parsed out of CPE, e.g. `windows_server`, `log4j`.", "default": [], "items": { "type": "string" } }, "cwe": { "title": "Weakness types (CWE)", "type": "array", "description": "e.g. `CWE-79`, `CWE-89`.", "default": [], "items": { "type": "string" } }, "keywords": { "title": "Must contain any of", "type": "array", "description": "Extra text match on the description, vendors and products, after the source query.", "default": [], "items": { "type": "string" } }, "excludeKeywords": { "title": "Must not contain", "type": "array", "description": "Drops a record if any of these appears in its description.", "default": [], "items": { "type": "string" } }, "withPatchOnly": { "title": "Only where a patch is referenced", "type": "boolean", "description": "Detected from the reference URLs and tags — vendor advisories, release notes, security updates.", "default": false }, "withExploitOnly": { "title": "Only where an exploit is referenced", "type": "boolean", "description": "Detected from references to Exploit-DB, Metasploit, proof-of-concept pages.", "default": false }, "maxAgeDays": { "title": "Published no longer ago than", "minimum": 0, "type": "integer", "description": "0 = any age. Applied after collection, unlike \"Published within\".", "default": 0 }, "enrich": { "title": "Join CISA KEV and EPSS", "type": "boolean", "description": "On: every record carries exploitation status, ransomware use and exploit probability, and the risk score is meaningful. Off: NVD only, and the run is faster.", "default": true }, "includeDescription": { "title": "Include the description text", "type": "boolean", "description": "The advisory text is the largest field. Turn it off for smaller rows.", "default": true }, "compactOutput": { "title": "Compact output", "type": "boolean", "description": "13 core fields only — for AI agents and dashboards.", "default": false }, "excludeEmptyFields": { "title": "Drop empty fields", "type": "boolean", "description": "Leave out what the sources did not provide instead of returning it empty.", "default": false }, "onlyNew": { "title": "Only records not seen before", "type": "boolean", "description": "For schedules. Delivered CVEs are remembered in a named store that survives runs, so a daily run returns — and charges for — only what is new or changed.", "default": false }, "emitUnchanged": { "title": "Also return unchanged records", "type": "boolean", "description": "Off by default: an unchanged record is something you already paid for.", "default": false }, "maxItems": { "title": "Max records", "minimum": 0, "type": "integer", "description": "0 = no limit. The form starts at 300 so a first run is quick and cheap.", "default": 0 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }