NIST NVD CVE Archive — every CVE from 1988 to 2026 (351k+ vulnerabilities w/ CVSS scores)

Dataset · NIST · source URL ↗

Every CVE (Common Vulnerabilities and Exposures) record from the NIST National Vulnerability Database — 351,541 vulnerabilities since 1988. Per CVE: ID, source, published date, last modified, vuln status (Analyzed/Modified/Awaiting/Rejected), full English description, CVSS v3.1 base score + severity (LOW/MEDIUM/HIGH/CRITICAL) + vector string, CVSS v2 base score + severity, CWE classification (e.g. CWE-79 XSS, CWE-89 SQL injection, CWE-352 CSRF). Stored separately from DB1's nvd_cves (which has the 109k most recent) so we can serve the full ~3-decade history without bloating DB1.

Source organization
NIST
License / terms
Coverage
~351,541 CVEs (1988-present)
Latest local indexed-row date
2026-05-20
API endpoint

Keywords

CVEvulnerability databaseCVSS scoreCISA KEVCWEzero-dayRCE remote code executionbuffer overflowSQL injectioncybersecurity advisory

Provenance

The listed URL identifies a referenced source; it does not by itself document the ingestion endpoint. Referenced source URL: https://nvd.nist.gov/vuln/data-feeds. Source-specific terms apply. US federal employee-authored works are generally public domain under 17 USC 105; non-federal and third-party material retains source terms. Free or keyless access does not alter source terms. Metadata and normalization authored by MORVS (AI Analytics LLC) are CC0 only where expressly stated.

For agents