CVEDB API - Fast Vulnerability Lookups

The CVEDB API offers a quick way to check information about vulnerabilities in a service. You can search using either the CVE-ID, CPE23 or EUVD-ID.

View API Docs View Dashboard

Last Updated:




Frequently Asked Questions

  • How much does it cost?
    It's free for non-commercial use! If you're using the CVEDB API to make money, then you need an enterprise license.
  • How often is it updated?
    The API gets updated every day.
  • Do I need a Shodan API key?
    No, you don't need to have a Shodan account or a Shodan API key in order to use the CVEDB API.

Newest Vulnerabilities?

Here is a compilation of the most recent vulnerabilities impacting various products.
CVE ID Affected Products

Examples

Quickly check vulnerability:
 
~$
curl https://cvedb.shodan.io/cve/CVE-2024-0204
~$
curl https://cvedb.shodan.io/euvd/EUVD-2024-16003
~$
curl https://cvedb.shodan.io/cves?cpe23=cpe:2.3:a:libpng:libpng:0.8

Use the requests Python library to lookup a vulnerability:
                        import requests

# Searching vulnerability information with a specific CVE-ID
CVE_ID = "CVE-2024-0204"
cve = requests.get(f"https://cvedb.shodan.io/cve/{CVE_ID}").json()

# Searching vulnerability information with a specific EUVD-ID
EUVD_ID = "EUVD-2024-16003"

# Searching all vulnerabilities with a specific CPE23
CPE23 = "cpe:2.3:a:libpng:libpng:0.8"
cves = requests.get(f"https://cvedb.shodan.io/cves?cpe23={CPE23}").json()
                    

                        {
  "cve_id": "CVE-2024-0204",
  "summary": "Authentication bypass in Fortra's GoAnywhere MFT
    prior to 7.4.1 allows an unauthorized user to create an 
    admin user via the administration portal.",
  "cvss": 9.8,
  "cvss_version": 3,
  "cvss_v2": null,
  "cvss_v3": 9.8,
  "cvss_v4": null,
  "epss": 0.93048,
  "ranking_epss": 0.99791,
  "kev": false,
  "propose_action": null,
  "ransomware_campaign": null,
  "references": [
    "https://www.fortra.com/security/advisory/fi-2024-001",
    ...
  ],
  "cpes": [
    "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:6.0.0",
    "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.0n",
    "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.1t",
    "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.2s",
    ...
  ],
  "published_time": "2024-01-23T01:15:20",
  "euvd": {
    "id": "EUVD-2024-16003",
    "description": "Authentication bypass in Fortra's GoAnywhere MFT
     prior to 7.4.1 allows an unauthorized user to create an admin
     user via the administration portal.",
    "published_time": "2024-01-22T18:05:13",
    "cvss": 9.8,
    "cvss_version": "3.1",
    "epss": 0.9305,
    "assigner": "Fortra",
    "references": [
      "https://www.fortra.com/security/advisory/fi-2024-001",
      ...
    ],
    "products": [
      "GoAnywhere MFT",
      "GoAnywhere MFT"
    ],
    "vendors": [
      "Fortra"
    ]
  }
}
    
                        {
  "euvd_id": "EUVD-2024-16003",
  "description": "Authentication bypass in Fortra's GoAnywhere
    MFT prior to 7.4.1 allows an unauthorized user to create an
    admin user via the administration portal.",
  "published_time": "2024-01-22T18:05:13",
  "cvss": 9.8,
  "cvss_version": "3.1",
  "epss": 0.9305,
  "assigner": "Fortra",
  "references": [
    "https://www.fortra.com/security/advisory/fi-2024-001",
    ...
  ],
  "products": [
    "GoAnywhere MFT",
    "GoAnywhere MFT"
  ],
  "vendors": [
    "Fortra"
  ],
  "cve": {
    "id": "CVE-2024-0204",
    "summary": "Authentication bypass in Fortra's GoAnywhere
     MFT prior to 7.4.1 allows an unauthorized user to creat
     an admin user via the administration portal.",
    "cvss": 9.8,
    "cvss_version": 3,
    "cvss_v2": null,
    "cvss_v3": 9.8,
    "cvss_v4": null,
    "epss": 0.93048,
    "ranking_epss": 0.99791,
    "kev": false,
    "propose_action": null,
    "ransomware_campaign": null,
    "references": [
      "https://www.fortra.com/security/advisory/fi-2024-001",
       ...
    ],
    "published_time": "2024-01-23T01:15:20",
    "cpes": [
        "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:6.0.0",
        "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.0n",
        "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.1t",
        "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:7.0.2s",
        ...
    ]
  }
}
                    

Insight Data

  •  
    # Accessing specific Vulnerability Details by CVE ID
    ~$
    curl https://cvedb.shodan.io/cve/CVE-2024-0204
  •  
    # Accessing specific Vulnerability Details by EUVD ID
    ~$
    curl https://cvedb.shodan.io/euvd/EUVD-2024-16003
  •  
    # Accessing the newest Vulnerabilities
    ~$
    curl https://cvedb.shodan.io/cves
  •  
    # Searching Vulnerabilities by Product
    ~$
    curl https://cvedb.shodan.io/cves?product=php
  •  
    # Identifying Known Exploited Vulnerabilities
    ~$
    curl https://cvedb.shodan.io/cves?is_kev=true
  •  
    # Discovering the Highest EPSS Scores
    ~$
    curl https://cvedb.shodan.io/cves?sort_by_epss=true
  •  
    # Retrieving CPE 2.3 Dictionary by Product
    ~$
    curl https://cvedb.shodan.io/cpes?product=macos
  •  
    # Filtering Vulnerabilities by Timestamp
    ~$
    curl https://cvedb.shodan.io/cves?start_date=2023-01-01&end_date=2023-12-31
  •  
    # Searching Vulnerabilities by CPE 2.3
    ~$
    curl https://cvedb.shodan.io/cves?cpe23=cpe:2.3:o:redhat:linux:7
  •  
    # Counting Vulnerabilities by CPE 2.3
    ~$
    curl https://cvedb.shodan.io/cves?cpe23=cpe:2.3:o:redhat:linux:7&count=true


  • Contact Us

    Shodan ® - All rights reserved