--- type: "firecrawl-provider" description: "Official CVE Records from the CVE Program's CVE Services API (cveawg.mitre.org), the source NVD and OSV copy from: look up any CVE by id or cve.org URL the day its CNA publishes it, before NVD analysis, including reserved and rejected ids. Each record carries the CNA's own affected vendor/product/version ranges, CWEs, CVSS scores, references, credits and solutions, plus CISA's Vulnrichment ADP (SSVC exploitation, automatable and technical impact, the KEV date added, CISA-added CVSS, CWE and CPE). Also lists CVEs newly published or updated in the CVE List over the last hours or days (from the cvelistV5 delta log), and finds which CVE Numbering Authority assigns CVEs for a vendor or project, with its security contacts. NVD (nvd-nist-gov) adds its own analysis and CPE configurations; OSV (osv-dev) maps package versions; this program is the CNA source record and CISA's triage. Every result carries MITRE's required copyright and license notice." use_when: "Official CVE Records from the CVE Program's CVE Services API (cveawg.mitre.org), the source NVD and OSV copy from: look up any CVE by id or cve.org URL the day its CNA publishes it, before NVD analysis, including reserved and rejected ids. Each record carries the CNA's own affected vendor/product/version ranges, CWEs, CVSS scores, references, credits and solutions, plus CISA's Vulnrichment ADP (SSVC exploitation, automatable and technical impact, the KEV date added, CISA-added CVSS, CWE and CPE). Also lists CVEs newly published or updated in the CVE List over the last hours or days (from the cvelistV5 delta log), and finds which CVE Numbering Authority assigns CVEs for a vendor or project, with its security contacts. NVD (nvd-nist-gov) adds its own analysis and CPE configurations; OSV (osv-dev) maps package versions; this program is the CNA source record and CISA's triage. Every result carries MITRE's required copyright and license notice." categories: "Developer" capabilities: 3 credits_per_call: 5 --- # CVE Program (CVE.org) CVE Services on Firecrawl Alexandria Official CVE Records from the CVE Program's CVE Services API (cveawg.mitre.org), the source NVD and OSV copy from: look up any CVE by id or cve.org URL the day its CNA publishes it, before NVD analysis, including reserved and rejected ids. Each record carries the CNA's own affected vendor/product/version ranges, CWEs, CVSS scores, references, credits and solutions, plus CISA's Vulnrichment ADP (SSVC exploitation, automatable and technical impact, the KEV date added, CISA-added CVSS, CWE and CPE). Also lists CVEs newly published or updated in the CVE List over the last hours or days (from the cvelistV5 delta log), and finds which CVE Numbering Authority assigns CVEs for a vendor or project, with its security contacts. NVD (nvd-nist-gov) adds its own analysis and CPE configurations; OSV (osv-dev) maps package versions; this program is the CNA source record and CISA's triage. Every result carries MITRE's required copyright and license notice. - Categories: Developer - Category index: [Developer category](https://firecrawl.dev/alexandria/agents/categories/developer) - Provider key: `cve-org` - Access: Firecrawl credits - Cost: 5 credits per call ## More - [Human guide](https://firecrawl.dev/app/alexandria/cve-org) - [OpenAPI spec](https://firecrawl.dev/alexandria/agents/providers/cve-org/openapi.json) ## Capabilities - [Cna lookup](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/cna_lookup): Which CVE Numbering Authority (CNA) assigns CVEs for a vendor, product or project, from the CVE Program's partner list behind cve.org: short name (as CVE records name the assigner), organization, scope in its own words, country, CNA types and roles, its Root and Top-Level Root, security contact emails and pages, disclosure policy and advisory URLs. Search by words, exact short name, cve.org partner URL or country. Neither NVD nor OSV exposes CNA scopes or contacts. - [Cve record](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/cve_record): One official CVE Record from CVE Services by CVE id or cve.org record URL, available as soon as the CNA publishes it (often days before NVD analyses it, when nvd-nist-gov still answers not_found). Returns state (PUBLISHED, REJECTED with reasons, or RESERVED), the assigning CNA, reserved/published/updated dates, title, English description, the CNA's affected vendor/product/package version ranges (which NVD and OSV do not return in this form), CWEs, CNA CVSS v4.0/v3.x/v2 scores, references with tags, credits, timeline, solutions and workarounds, and a separate cisa_adp block with CISA Vulnrichment SSVC decision points (exploitation none/poc/active, automatable, technical impact), the KEV date added, and CISA-added CVSS, CWE and CPE data. Carries MITRE's required notice. - [Recent changes](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/recent_changes): CVEs newly published or updated in the official CVE List over the last 1 to 168 hours, or over up to 7 whole UTC days within the last 30, read live from the CVE Program's cvelistV5 delta log. One row per CVE with the change type (new or updated), its dateUpdated, cve.org page and record file; filter to new or updated only. Answers 'what CVEs were published today / this week' straight from the CVE List, including CVEs NVD has not received or analysed yet. Use cve_record for any id's content. ## 1. Choose this provider when Official CVE Records from the CVE Program's CVE Services API (cveawg.mitre.org), the source NVD and OSV copy from: look up any CVE by id or cve.org URL the day its CNA publishes it, before NVD analysis, including reserved and rejected ids. Each record carries the CNA's own affected vendor/product/version ranges, CWEs, CVSS scores, references, credits and solutions, plus CISA's Vulnrichment ADP (SSVC exploitation, automatable and technical impact, the KEV date added, CISA-added CVSS, CWE and CPE). Also lists CVEs newly published or updated in the CVE List over the last hours or days (from the cvelistV5 delta log), and finds which CVE Numbering Authority assigns CVEs for a vendor or project, with its security contacts. NVD (nvd-nist-gov) adds its own analysis and CPE configurations; OSV (osv-dev) maps package versions; this program is the CNA source record and CISA's triage. Every result carries MITRE's required copyright and license notice. ## 2. Minimal request Call `POST https://api.firecrawl.dev/v2/scrape` with `{ alexandria: { provider, capability, options } }`. For a batch, send `{ alexandria: [...] }` with up to 10 calls. ```json { "provider": "cve-org", "capability": "vulnerabilities/cna_lookup", "options": { "query": "jenkins" } } ``` ## 3. Add provider options Use only the options needed for the task: - `country` (string): Country as cve.org writes it (USA, China, Germany ...). Example: `` - `limit` (number): Results, default 10. Example: `10` - `query` (string): Words that must all appear in the CNA short name, organization name or scope, e.g. jenkins or 'red hat'. Example: `` - `short_name` (string): Exact CNA short name (case-insensitive), e.g. apache or a record's assigner_short_name. Unknown names are not_found. Example: `` - `url` (string): A https://www.cve.org/PartnerInformation/ListofPartners/partner/ URL. Pattern: ^https?://. Example: `` ## 4. Request through your preferred interface ### JavaScript ```javascript const result = await firecrawl.scrape({ alexandria: { provider: "cve-org", capability: "vulnerabilities/cna_lookup", options: { query: "jenkins", }, }, }); ``` ### Python ```python result = firecrawl.scrape_alexandria({ "provider": "cve-org", "capability": "vulnerabilities/cna_lookup", "options": { "query": "jenkins" } }) ``` ### cURL ```sh curl https://api.firecrawl.dev/v2/scrape \ -H "Authorization: Bearer $FIRECRAWL_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "alexandria": { "provider": "cve-org", "capability": "vulnerabilities/cna_lookup", "options": { "query": "jenkins" } } }' ``` ### CLI ```sh firecrawl scrape 'cve-org/vulnerabilities/cna_lookup' \ --options '{"query":"jenkins"}' ``` ### MCP Call the FCX MCP retrieve tool with this object: ```json { "provider": "cve-org", "capability": "vulnerabilities/cna_lookup", "options": { "query": "jenkins" } } ``` Ask for only the returned fields needed by the task. ## 5. Full request shape ```json { "provider": "cve-org", "capability": "vulnerabilities/cna_lookup", "options": { "query": "jenkins" } } ``` ## 6. Response data The response includes `success`, `provider`, `capability`, `creditsCost` and `data`. This example shows the provider payload in `data`: ```json { "cnas": [ { "advisory_urls": [ "https://jenkins.io/security/advisories/" ], "cna_id": "CNA-2018-0015", "contact_urls": [], "country": "USA", "cve_org_url": "https://www.cve.org/PartnerInformation/ListofPartners/partner/jenkins", "disclosure_policy_urls": [ "https://jenkins.io/security/" ], "emails": [ "jenkinsci-cert@googlegroups.com" ], "is_root": false, "organization_name": "Jenkins Project", "roles": [ "CNA" ], "root_short_name": null, "scope": "Jenkins and Jenkins plugins distributed by the Jenkins Project (listed on plugins.jenkins.io) only.", "short_name": "jenkins", "tlr_short_name": "mitre", "types": [ "Open Source" ] } ], "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.", "observed_at_ms": 1792790243855, "source_url": "https://raw.githubusercontent.com/CVEProject/cve-website/dev/src/assets/data/CNAsList.json", "total": 1 } ``` ## API reference-derived contract The following capability contract is generated from the same normalized Alexandria API reference exposed in the API spec. ### Cna lookup - Capability: `vulnerabilities/cna_lookup` - Description: Which CVE Numbering Authority (CNA) assigns CVEs for a vendor, product or project, from the CVE Program's partner list behind cve.org: short name (as CVE records name the assigner), organization, scope in its own words, country, CNA types and roles, its Root and Top-Level Root, security contact emails and pages, disclosure policy and advisory URLs. Search by words, exact short name, cve.org partner URL or country. Neither NVD nor OSV exposes CNA scopes or contacts. - Instructions: You need who issues CVEs for a vendor or project, where to report a vulnerability, or what a record's assigner_short_name stands for. - Cost: 5 credits per call - Capability file: [Cna lookup](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/cna_lookup) Accepted options: - `country` (string): Country as cve.org writes it (USA, China, Germany ...). Example: `` - `limit` (number): Results, default 10. Example: `10` - `query` (string): Words that must all appear in the CNA short name, organization name or scope, e.g. jenkins or 'red hat'. Example: `` - `short_name` (string): Exact CNA short name (case-insensitive), e.g. apache or a record's assigner_short_name. Unknown names are not_found. Example: `` - `url` (string): A https://www.cve.org/PartnerInformation/ListofPartners/partner/ URL. Pattern: ^https?://. Example: `` Response schema example: ```json { "cnas": [ { "advisory_urls": [ "https://jenkins.io/security/advisories/" ], "cna_id": "CNA-2018-0015", "contact_urls": [], "country": "USA", "cve_org_url": "https://www.cve.org/PartnerInformation/ListofPartners/partner/jenkins", "disclosure_policy_urls": [ "https://jenkins.io/security/" ], "emails": [ "jenkinsci-cert@googlegroups.com" ], "is_root": false, "organization_name": "Jenkins Project", "roles": [ "CNA" ], "root_short_name": null, "scope": "Jenkins and Jenkins plugins distributed by the Jenkins Project (listed on plugins.jenkins.io) only.", "short_name": "jenkins", "tlr_short_name": "mitre", "types": [ "Open Source" ] } ], "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.", "observed_at_ms": 1792790243855, "source_url": "https://raw.githubusercontent.com/CVEProject/cve-website/dev/src/assets/data/CNAsList.json", "total": 1 } ``` ### Cve record - Capability: `vulnerabilities/cve_record` - Description: One official CVE Record from CVE Services by CVE id or cve.org record URL, available as soon as the CNA publishes it (often days before NVD analyses it, when nvd-nist-gov still answers not_found). Returns state (PUBLISHED, REJECTED with reasons, or RESERVED), the assigning CNA, reserved/published/updated dates, title, English description, the CNA's affected vendor/product/package version ranges (which NVD and OSV do not return in this form), CWEs, CNA CVSS v4.0/v3.x/v2 scores, references with tags, credits, timeline, solutions and workarounds, and a separate cisa_adp block with CISA Vulnrichment SSVC decision points (exploitation none/poc/active, automatable, technical impact), the KEV date added, and CISA-added CVSS, CWE and CPE data. Carries MITRE's required notice. - Instructions: You have a CVE id or a www.cve.org/CVERecord?id= URL and need the authoritative CNA record, affected versions, or CISA's exploitation triage, especially for a new CVE NVD has not analysed yet. - Cost: 5 credits per call - Capability file: [Cve record](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/cve_record) Accepted options: - `cve_id` (string): CVE id, e.g. CVE-2021-44228 (case-insensitive). Give cve_id or url. Pattern: ^\s*[Cc][Vv][Ee]-[0-9]{4}-[0-9]{4,19}\s*$. Example: `` - `url` (string): A https://www.cve.org/CVERecord?id=CVE-... URL (or a legacy cve.mitre.org cvename.cgi?name= URL). Mutually exclusive with cve_id. Pattern: ^https?://. Example: `` Response schema example: ```json { "adp": [ { "date_updated": "2024-08-04T04:17:24.696Z", "metric_count": 0, "org_id": "af854a3a-2127-422b-91ae-364da2661108", "reference_count": 53, "short_name": "CVE", "title": "CVE Program Container" }, { "date_updated": "2025-10-21T23:25:23.121Z", "metric_count": 3, "org_id": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "reference_count": 1, "short_name": "CISA-ADP", "title": "CISA ADP Vulnrichment" } ], "affected": [ { "collection_url": null, "cpes": [], "default_status": null, "modules": [], "package_name": null, "platforms": [], "product": "Apache Log4j2", "repo": null, "vendor": "Apache Software Foundation", "versions": [ { "changes": [ { "at": "2.3.1", "status": "unaffected" }, { "at": "2.4", "status": "affected" }, { "at": "2.12.2", "status": "unaffected" }, { "at": "2.13.0", "status": "affected" }, { "at": "2.15.0", "status": "unaffected" } ], "less_than": "log4j-core*", "less_than_or_equal": null, "status": "affected", "version": "2.0-beta9", "version_type": "custom" } ] } ], "assigner_org_id": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "assigner_short_name": "apache", "cisa_adp": { "affected": [], "cvss": [ { "base_score": 10, "base_severity": "CRITICAL", "scenario": null, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" } ], "date_updated": "2025-10-21T23:25:23.121Z", "kev": { "date_added": "2021-12-10", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228" }, "problem_types": [], "references": [ { "name": null, "tags": [ "government-resource" ], "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228" } ], "ssvc": { "automatable": "yes", "exploitation": "active", "role": "CISA Coordinator", "technical_impact": "total", "timestamp": "2025-02-04T14:25:34.416117Z", "version": "2.0.3" }, "title": "CISA ADP Vulnrichment" }, "credits": [ { "lang": "en", "type": null, "value": "This issue was discovered by Chen Zhaojun of Alibaba Cloud Security Team." } ], "cve_id": "CVE-2021-44228", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2021-44228", "cvss": [], "data_version": "5.1", "date_published": "2021-12-10T00:00:00.000Z", "date_rejected": null, "date_reserved": "2021-11-26T00:00:00.000Z", "date_updated": "2025-10-21T23:25:23.121Z", "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.", "in_kev": true, "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.", "observed_at_ms": 1792790243776, "other_metrics": [ { "content_json": "{\"other\":\"critical\"}", "type": "unknown" } ], "problem_types": [ { "cwe_id": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "lang": "en", "type": "CWE" }, { "cwe_id": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE" }, { "cwe_id": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE" } ], "references": [ { "name": null, "tags": [], "url": "https://logging.apache.org/log4j/2.x/security.html" }, { "name": "[oss-security] 20211210 CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/10/1" }, { "name": "[oss-security] 20211210 Re: CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/10/2" }, { "name": "20211210 Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021", "tags": [ "vendor-advisory" ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd" }, { "name": "[oss-security] 20211210 Re: CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/10/3" }, { "name": null, "tags": [], "url": "https://security.netapp.com/advisory/ntap-20211210-0007/" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html" }, { "name": null, "tags": [], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032" }, { "name": null, "tags": [], "url": "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html" }, { "name": "DSA-5020", "tags": [ "vendor-advisory" ], "url": "https://www.debian.org/security/2021/dsa-5020" }, { "name": "[debian-lts-announce] 20211212 [SECURITY] [DLA 2842-1] apache-log4j2 security update", "tags": [ "mailing-list" ], "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html" }, { "name": "FEDORA-2021-f0f501d01f", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/" }, { "name": "Microsoft’s Response to CVE-2021-44228 Apache Log4j 2", "tags": [ "vendor-advisory" ], "url": "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/" }, { "name": "[oss-security] 20211213 Re: CVE-2021-4104: Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/13/2" }, { "name": "[oss-security] 20211213 CVE-2021-4104: Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/13/1" }, { "name": "[oss-security] 20211214 CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/14/4" }, { "name": "20211210 A Vulnerability in Apache Log4j Library Affecting Cisco Products: December 2021", "tags": [ "vendor-advisory" ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd" }, { "name": "VU#930724", "tags": [ "third-party-advisory" ], "url": "https://www.kb.cert.org/vuls/id/930724" }, { "name": null, "tags": [], "url": "https://twitter.com/kurtseifried/status/1469345530182455296" }, { "name": null, "tags": [], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html" }, { "name": null, "tags": [], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html" }, { "name": "20211210 Vulnerabilities in Apache Log4j Library Affecting Cisco Products: December 2021", "tags": [ "vendor-advisory" ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd" }, { "name": "[oss-security] 20211215 Re: CVE-2021-45046: Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/12/15/3" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html" }, { "name": null, "tags": [], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf" }, { "name": "FEDORA-2021-66d6c484f3", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html" }, { "name": null, "tags": [], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf" }, { "name": null, "tags": [], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf" }, { "name": null, "tags": [], "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html" }, { "name": null, "tags": [], "url": "https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html" }, { "name": "20220314 APPLE-SA-2022-03-14-7 Xcode 13.3", "tags": [ "mailing-list" ], "url": "http://seclists.org/fulldisclosure/2022/Mar/23" }, { "name": null, "tags": [], "url": "https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001" }, { "name": null, "tags": [], "url": "https://github.com/cisagov/log4j-affected-db" }, { "name": null, "tags": [], "url": "https://support.apple.com/kb/HT213189" }, { "name": null, "tags": [], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": null, "tags": [], "url": "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228" }, { "name": null, "tags": [], "url": "https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html" }, { "name": "20220721 Open-Xchange Security Advisory 2022-07-21", "tags": [ "mailing-list" ], "url": "http://seclists.org/fulldisclosure/2022/Jul/11" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html" }, { "name": "20221208 Intel Data Center Manager <= 5.1 Local Privileges Escalation", "tags": [ "mailing-list" ], "url": "http://seclists.org/fulldisclosure/2022/Dec/2" }, { "name": null, "tags": [], "url": "http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html" } ], "rejected_reasons": [], "solutions": [], "source_url": "https://cveawg.mitre.org/api/cve/CVE-2021-44228", "state": "PUBLISHED", "timeline": [], "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints", "workarounds": [] } ``` ### Recent changes - Capability: `vulnerabilities/recent_changes` - Description: CVEs newly published or updated in the official CVE List over the last 1 to 168 hours, or over up to 7 whole UTC days within the last 30, read live from the CVE Program's cvelistV5 delta log. One row per CVE with the change type (new or updated), its dateUpdated, cve.org page and record file; filter to new or updated only. Answers 'what CVEs were published today / this week' straight from the CVE List, including CVEs NVD has not received or analysed yet. Use cve_record for any id's content. - Instructions: You need the CVEs published or changed recently (today, the last 24 hours, October 19 to 23), not one known id. - Cost: 5 credits per call - Capability file: [Recent changes](https://firecrawl.dev/alexandria/agents/providers/cve-org/vulnerabilities/recent_changes) Accepted options: - `change` (string): all (default), new (newly published) or updated. Example: `all` - `cursor` (string): next_cursor from a previous page; it keeps that page's window. Example: `` - `from` (string): First UTC day, YYYY-MM-DD, within the last 30 days. Give with to. Pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2}$. Example: `` - `hours` (number): Window ending now, in hours. Default 24. Mutually exclusive with from/to. Example: `10` - `limit` (number): Rows per page, default 100. Example: `10` - `to` (string): Last UTC day, inclusive; at most 7 days after from. Pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2}$. Example: `` Response schema example: ```json { "changes": [ { "change": "updated", "cve_id": "CVE-2026-111816", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2026-111816", "date_updated": "2026-10-23T21:22:57.204Z", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111816.json" }, { "change": "updated", "cve_id": "CVE-2026-111805", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2026-111805", "date_updated": "2026-10-23T21:22:42.961Z", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111805.json" }, { "change": "updated", "cve_id": "CVE-2026-111808", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2026-111808", "date_updated": "2026-10-23T21:22:09.150Z", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111808.json" }, { "change": "updated", "cve_id": "CVE-2026-111810", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2026-111810", "date_updated": "2026-10-23T21:21:35.176Z", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111810.json" }, { "change": "updated", "cve_id": "CVE-2026-111817", "cve_org_url": "https://www.cve.org/CVERecord?id=CVE-2026-111817", "date_updated": "2026-10-23T21:21:06.850Z", "record_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111817.json" } ], "complete": true, "covered_from": "2026-10-22T21:22:36.302Z", "log_newest": "2026-10-23T21:23:06.426Z", "next_cursor": "5.1792704409680.1792790809680", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.", "observed_at_ms": 1792790809985, "source_url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/deltaLog.json", "total": 2385, "window": { "change": "all", "from": "2026-10-22T21:26:49.680Z", "to": "2026-10-23T21:26:49.680Z" }, "windows_scanned": 88 } ```