{ "openapi": "3.0.1", "info": { "title": "NVD CVE Scraper", "description": "Scrape CVE vulnerabilities from the NIST National Vulnerability Database (NVD) by keyword, CVE id, product, CWE, severity or date: CVSS v4.0/v3/v2 scores, CISA known-exploited status, affected versions and references. Any date range. No login, no proxy; optional free API key.", "version": "1.0", "x-build-id": "3gpZc6hXjQT4L2K3F" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/anyxsolutions~nvd-cve-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-anyxsolutions-nvd-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/anyxsolutions~nvd-cve-scraper/runs": { "post": { "operationId": "runs-sync-anyxsolutions-nvd-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/anyxsolutions~nvd-cve-scraper/run-sync": { "post": { "operationId": "run-sync-anyxsolutions-nvd-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "startUrls": { "title": "NVD URLs", "type": "array", "description": "Public NVD pages: a CVE page (https://nvd.nist.gov/vuln/detail/CVE-2021-44228) or a vulnerability search (https://nvd.nist.gov/vuln/search?resultType=records&keyword=log4j). Classic search links (https://nvd.nist.gov/vuln/search/results?query=log4j&search_type=all) work too.", "items": { "type": "object", "required": [ "url" ], "properties": { "url": { "type": "string", "title": "URL of a web page", "format": "uri" } } } }, "searchTerms": { "title": "Keyword search", "type": "array", "description": "Words to find in CVE descriptions, one search per line, for example log4j or wordpress plugin (every word must appear). Quote a phrase for an exact match, for example \"remote code execution\".", "items": { "type": "string" } }, "cveIds": { "title": "CVE ids", "type": "array", "description": "Specific CVEs to look up, one per line, for example CVE-2021-44228 or CVE-2024-3094.", "items": { "type": "string" } }, "severities": { "title": "CVSS v3 severity", "type": "array", "description": "Only return CVEs with one of these CVSS v3 severities. Leave empty for every severity.", "items": { "type": "string", "enum": [ "CRITICAL", "HIGH", "MEDIUM", "LOW" ], "enumTitles": [ "Critical (9.0–10.0)", "High (7.0–8.9)", "Medium (4.0–6.9)", "Low (0.1–3.9)" ] } }, "cweIds": { "title": "CWE weaknesses", "type": "array", "description": "Only return CVEs with one of these weakness types, one per line, for example CWE-79 (cross-site scripting), CWE-89 (SQL injection) or CWE-787 (out-of-bounds write).", "items": { "type": "string" } }, "cpeName": { "title": "Affected product (CPE)", "type": "string", "description": "Only return CVEs that affect this product version, as a CPE 2.3 name, for example cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:* or cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*." }, "knownExploitedOnly": { "title": "Known exploited only (CISA KEV)", "type": "boolean", "description": "Only return CVEs listed in CISA's Known Exploited Vulnerabilities catalog, the ones attackers are actively using.", "default": false }, "publishedFrom": { "title": "Published from", "type": "string", "description": "Only return CVEs published on or after this date, for example 2026-01-01. Ranges of any length work." }, "publishedTo": { "title": "Published until", "type": "string", "description": "Only return CVEs published on or before this date, for example 2026-06-30." }, "modifiedFrom": { "title": "Modified from", "type": "string", "description": "Only return CVEs last modified on or after this date, for example 2026-10-01. Use it to pick up re-scored and re-analysed CVEs." }, "modifiedTo": { "title": "Modified until", "type": "string", "description": "Only return CVEs last modified on or before this date, for example 2026-10-31." }, "maxItems": { "title": "Maximum CVEs per source", "minimum": 1, "type": "integer", "description": "Maximum number of CVEs to return per URL or keyword search. Leave empty for every matching CVE." }, "apiKey": { "title": "NVD API key", "type": "string", "description": "Optional free NVD API key, for example 0a1b2c3d-.... It raises the NVD rate limit tenfold (50 instead of 5 requests per 30 seconds), which matters for long CVE id lists and large searches. Request one at https://nvd.nist.gov/developers/request-an-api-key." }, "proxyConfiguration": { "title": "Proxy configuration", "type": "object", "description": "Proxy settings. The NVD is public and needs no proxy; the Actor keeps to the NVD's request-rate limit.", "default": { "useApifyProxy": false } } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }