All providers
Sign in
Sign up to use NIST National Vulnerability Database (NVD)
Firecrawl Alexandria
Developer

NIST National Vulnerability Database (NVD)

CVE vulnerability records from the NIST National Vulnerability Database CVE API 2.0 (services.nvd.nist.gov): look up a CVE by id, search by keyword, CPE product, CWE weakness, CVSS severity, CISA KEV membership and publication or modification dates, and list CVEs published or changed in the last days. Each record carries CVSS v4.0/v3.x/v2 scores, CWEs, CPE applicability matches, the CISA Known Exploited Vulnerabilities flag and dates, and references. Every result carries NVD's required notice.

Try in Agent
What is the CVSS score of CVE-2021-44228, which CWE is it, and is it in CISA's Known Exploited Vulnerabilities catalog?

Try NIST National Vulnerability Database (NVD) now.

Choose an example or ask your own question.

NIST National Vulnerability Database (NVD)
TRY ASKING
1Request
string

Optional NVD API key (raises NVD's limit from 5 to 50 requests per 30 seconds). Sent only in the apiKey header; never placed in URLs or output.

string

CVE id, e.g. CVE-2021-44228 (case-insensitive). Give cve_id or url.

string

An https://nvd.nist.gov/vuln/detail/CVE-... URL. Mutually exclusive with cve_id.

5 credits
Codefollows the fields above
const result = await firecrawl.scrape({
  alexandria: {
    provider: "nvd-nist-gov",
    capability: "vulnerabilities/cve",
    options: {
      cve_id: "CVE-2025-0282",
    },
  },
});
2Response example

This is a sample shape. Press Run to see live data from NIST National Vulnerability Database (NVD).

{
  "cve": {
    "cpe_match_count": 11,
    "cpe_matches": [
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*",
        "match_criteria_id": "247E71F8-A03B-4097-B7BF-09F8BF3ED4D6",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*",
        "match_criteria_id": "E0059C69-4A18-4153-9D9A-5C1B03AD1453",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*",
        "match_criteria_id": "FC523C88-115E-4CD9-A8CB-AE6E6610F7D4",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:*:*:*:*:*:*",
        "match_criteria_id": "3447428E-DBCD-4553-B51D-AC08ECAFD881",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:*:*:*:*:*:*",
        "match_criteria_id": "A08BAF98-7F05-4596-8BFC-91F1A79D3BD1",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2:*:*:*:*:*:*",
        "match_criteria_id": "67D43D1D-564D-4ACD-B0FF-3828B95E9864",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.2:*:*:*:*:*:*",
        "match_criteria_id": "BC8480E0-17C0-4590-950F-D3954E735365",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7:r2.3:*:*:*:*:*:*",
        "match_criteria_id": "3FAF4FB0-A88C-4A87-B6CB-32EF7B415885",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*",
        "match_criteria_id": "FD9BE8C2-43EB-4870-A4B7-267CB17A19F1",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:*:*:*:*:*:*",
        "match_criteria_id": "C8915BB2-C1C0-4189-A847-DDB2EF161D62",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      },
      {
        "configuration": 0,
        "configuration_operator": null,
        "criteria": "cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:*:*:*:*:*:*",
        "match_criteria_id": "8D24A8DB-D697-4C60-935D-B08EE36861CB",
        "node_negate": false,
        "node_operator": "OR",
        "version_end_excluding": null,
        "version_end_including": null,
        "version_start_excluding": null,
        "version_start_including": null,
        "vulnerable": true
      }
    ],
    "cpe_matches_truncated": false,
    "cve_id": "CVE-2025-0282",
    "cve_tags": [],
    "cvss": {
      "base_score": 9,
      "base_severity": "CRITICAL",
      "source": "nvd@nist.gov",
      "type": "Primary",
      "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "version": "3.1"
    },
    "cvss_metrics": [
      {
        "base_score": 9,
        "base_severity": "CRITICAL",
        "exploitability_score": 2.2,
        "impact_score": 6,
        "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type": "Secondary",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
      },
      {
        "base_score": 9,
        "base_severity": "CRITICAL",
        "exploitability_score": 2.2,
        "impact_score": 6,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
      }
    ],
    "cwes": [
      {
        "cwe_id": "CWE-121",
        "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type": "Secondary"
      },
      {
        "cwe_id": "CWE-787",
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "description": "A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.",
    "in_kev": true,
    "kev": {
      "action_due": "2025-01-15",
      "date_added": "2025-01-08",
      "required_action": "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.",
      "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability"
    },
    "last_modified": "2026-10-01T19:17:15.743",
    "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0282",
    "published": "2025-01-08T23:15:09.763",
    "reference_count": 7,
    "references": [
      {
        "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit",
          "Technical Description"
        ],
        "url": "https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Exploit"
        ],
        "url": "https://github.com/sfewer-r7/CVE-2025-0282"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "Exploit",
          "Third Party Advisory"
        ],
        "url": "https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0282"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-0282"
      }
    ],
    "source_identifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
    "status": "Analyzed"
  },
  "notice": "This product uses the NVD API but is not endorsed or certified by the NVD.",
  "nvd_timestamp": "2026-10-08T01:25:05.420",
  "observed_at_ms": 1791423210641,
  "source_url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-0282"
}

Related providers

Browse the library