{ "openapi": "3.0.1", "info": { "title": "CVE Vulnerability Scraper: NVD API + CISA KEV + EPSS", "description": "Search CVEs from the official NVD API by keyword, vendor/product, severity, CWE and date. Each CVE comes with CVSS, CISA KEV exploited status, EPSS score and a priority label. Daily CVE alerts. $0.80 per 1,000 CVEs.", "version": "1.0", "x-build-id": "MdkfeHpMvrgK23ZZY" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/manageable_gully~cve-vulnerability-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-manageable_gully-cve-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/manageable_gully~cve-vulnerability-scraper/runs": { "post": { "operationId": "runs-sync-manageable_gully-cve-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/manageable_gully~cve-vulnerability-scraper/run-sync": { "post": { "operationId": "run-sync-manageable_gully-cve-vulnerability-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "keywords": { "title": "Keywords", "type": "string", "description": "Words searched in CVE descriptions (e.g. 'log4j', 'wordpress plugin', 'sql injection'). All words must appear. Empty = no keyword filter." }, "exactPhrase": { "title": "Exact phrase", "type": "boolean", "description": "Match the keywords as one exact phrase.", "default": false }, "product": { "title": "Vendor / product (CPE)", "type": "string", "description": "Only CVEs affecting this product: 'vendor:product' (e.g. apache:log4j, microsoft:exchange_server), 'vendor:product:version' (e.g. apache:http_server:2.4.49) or a full cpe:2.3 string. Version ranges are matched by NVD." }, "severities": { "title": "Severity (CVSS v3)", "type": "array", "description": "Only CVEs with these CVSS v3 severities. Empty = all.", "items": { "type": "string", "enum": [ "CRITICAL", "HIGH", "MEDIUM", "LOW" ], "enumTitles": [ "Critical (9.0-10)", "High (7.0-8.9)", "Medium (4.0-6.9)", "Low (0.1-3.9)" ] } }, "publishedFrom": { "title": "Published from", "type": "string", "description": "YYYY-MM-DD or relative ('24 hours', '7 days', '2 weeks', '6 months', '2 years'). Ranges longer than 120 days are split automatically. If no filter at all is set, the last 7 days are used." }, "publishedTo": { "title": "Published to", "type": "string", "description": "YYYY-MM-DD or relative. Default: now." }, "onlyKnownExploited": { "title": "Only known exploited (CISA KEV)", "type": "boolean", "description": "Only CVEs in CISA's Known Exploited Vulnerabilities catalog (actively exploited in the wild).", "default": false }, "minCvssScore": { "title": "Minimum CVSS score", "minimum": 0, "maximum": 10, "type": "number", "description": "Drop CVEs below this base score (0-10, newest CVSS version available: 4.0, 3.1, 3.0, then 2.0). Filtered CVEs are free." }, "minEpss": { "title": "Minimum EPSS score", "minimum": 0, "maximum": 1, "type": "number", "description": "Drop CVEs whose EPSS exploit probability (next 30 days) is below this value, e.g. 0.1 = 10%. Filtered CVEs are free." }, "cweId": { "title": "Weakness (CWE)", "type": "string", "description": "Only CVEs with this weakness, e.g. CWE-79 (XSS), CWE-89 (SQL injection), CWE-787." }, "cveIds": { "title": "CVE IDs (lookup mode)", "type": "array", "description": "Look up specific CVEs (e.g. CVE-2021-44228). When set, the search filters above are ignored, except severity, KEV and minimum scores. Without an NVD API key each lookup takes ~6.5 s (NVD rate limit).", "items": { "type": "string" } }, "modifiedFrom": { "title": "Modified from (track updates)", "type": "string", "description": "Only CVEs changed since this date or relative time (new analysis, new CVSS score, new references). Max window 120 days. Combine with 'Only new' for an update feed." }, "modifiedTo": { "title": "Modified to", "type": "string", "description": "YYYY-MM-DD or relative. Default: now." }, "onlyNew": { "title": "Only new (alerts)", "type": "boolean", "description": "Remember CVEs already returned (per state key) and only output new ones on the next run. Schedule the Actor for daily CVE alerts. With 'Modified from', a CVE is returned again when NVD updates it.", "default": false }, "stateKey": { "title": "State key", "type": "string", "description": "Name of the memory used by 'Only new'. Use a different key per watch list.", "default": "default" }, "sort": { "title": "Order", "enum": [ "newest", "oldest" ], "type": "string", "description": "Output order.", "default": "newest" }, "maxItems": { "title": "Max CVEs", "minimum": 0, "type": "integer", "description": "Maximum CVEs to save. 0 = no limit.", "default": 100 }, "enrichKev": { "title": "Add CISA KEV data", "type": "boolean", "description": "Add date added, due date, ransomware use and required action from CISA's KEV catalog. No extra charge.", "default": true }, "enrichEpss": { "title": "Add EPSS scores", "type": "boolean", "description": "Add FIRST EPSS exploit probability and percentile. No extra charge.", "default": true }, "maxCpesPerCve": { "title": "Max affected CPEs per CVE", "minimum": 0, "maximum": 500, "type": "integer", "description": "How many affected product configurations (CPE + version range) to include per CVE. The full count is always given.", "default": 25 }, "includeRejected": { "title": "Include rejected CVEs", "type": "boolean", "description": "Also return CVEs with status Rejected.", "default": false }, "nvdApiKey": { "title": "NVD API key (optional)", "type": "string", "description": "Your free NVD API key (nvd.nist.gov/developers/request-an-api-key) makes runs ~10x faster (50 instead of 5 requests per 30 s). Not required." } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }