Find vulnerabilities affecting a product by searching the...
Find vulnerabilities affecting a product by searching the NIST National Vulnerability Database. Pass product (free-text keyword, e.g. "apache log4j", "openssl", "wordpress plugin contact-form-7") or cpe (an exact CPE 2.3 name, e.g. cpe:2.3:a:apache:log4j:2.14.1:::::::*). Returns matching CVEs newest-first, each with its id, description, CVSS base score/severity/vector, and dates. Optional limit (1–50). For "what CVEs affect X" / surveying a product's vulnerability history — distinct from security.cve, which resolves a single CVE id across NVD + CISA KEV + EPSS. Free, keyless.
Request
- Base URL: https://2s.io
- URL: https://2s.io/api/security/cve-search
- Auth: API key in header PAYMENT-SIGNATURE
Query parameters
Free-text product/keyword (e.g. "apache log4j").
Exact CPE 2.3 name (e.g. cpe:2.3:a:apache:log4j:2.14.1:::::::*).
Max CVEs to return (1–50, default 20).
Try before you buy. Set to 1 for one free real call per endpoint per hour — no wallet or payment needed — to verify the endpoint before paying. Equivalent to sending the "X-2s-Trial: 1" request header. Listed only on operations that offer a trial; the others always answer 402.
Response
Changes
No recorded changes to this operation across all 1 revision of this API.