Look up CVE IDs
Check a list of CVE IDs against the catalog.
Updated November 10, 2026
What this example returns
The dataset’s “Catalog entries” view shows 12 columns: CVE ID, Vendor / project, Product, Name, Added, Due, Ransomware use, Forensic triage, CWEs, Description, Required action, and NVD. See every output field.
What each setting does
The input this example runs CISA KEV Catalog Scraper with. “Try this input” opens it in the console, where you can run it as-is or change any field first.
- Sort by
sortBy Date added, oldest first
Order of the saved entries. Applied before the maximum results.
Default: Date added, newest first → this example uses Date added, oldest first
- CVE IDs
cveIds CVE-2021-44228, cve-2023-34362, CVE-2024-3400, CVE-2017-0144, CVE-2019-19781, CVE-2020-29583, CVE-1999-0001
Only these CVE IDs, e.g. CVE-2024-3400, one per line. IDs that are not in the catalog are listed in the run status.
{
"cveIds": [
"CVE-2021-44228",
"cve-2023-34362",
"CVE-2024-3400",
"CVE-2017-0144",
"CVE-2019-19781",
"CVE-2020-29583",
"CVE-1999-0001"
],
"sortBy": "oldest"
}What it costs
You pay for the events the actor reports, such as each result or page it produces. Platform usage is included in the event prices: compute, proxies, browser and storage cost nothing extra.
- Catalog entryfrom $0.000595One CISA KEV catalog entry saved: CVE ID, vendor, product, name, description, dates, ransomware use, forensic triage, required action, notes and CWEs.
When to use this example
From the CISA KEV Catalog Scraper readme:
Why is `cwes` empty for some entries?
CISA lists no CWE for those entries (175 of 1,779 on 2026-11-10).
Other ways to run CISA KEV Catalog Scraper
- Microsoft Windows and SharePoint, ransomware use knownWindows and SharePoint entries added in 2024-2025 with known ransomware campaign use, soonest due date first.
- Added in the last 90 daysThe 20 newest catalog entries added in the last 90 days.
- Command injection entries by CWEEntries tagged CWE-78 or CWE-77 that mention command injection, by CVE ID.
About CISA KEV Catalog Scraper
Export the CISA Known Exploited Vulnerabilities (KEV) catalog: CVE ID, vendor, product, name, description, date added, due date, ransomware use, forensic triage, required action, notes and CWEs. Whole catalog or filtered by date, vendor, product, keyword or CWE. No login needed.
- Price:
- from $0.595 / 1,000 results
- Developer:
- Querystone
- Categories:
- Developer tools, Automation
Related actors
Latest articles
Guidesn8n Puppeteer Node: Puppeteer and Playwright in n8n Without Self-Hosting Chrome
The n8n Puppeteer node needs Chromium inside your n8n container and installs only on self-hosted n8n. How it and the Playwright nodes install, where they break, and how to run the same browser scrape on Scrape.ly from n8n instead, with a real tested run.
Read the article
GuidesPuppeteer vs Selenium for Web Scraping: The Same Scraper in Both
Puppeteer vs Selenium for web scraping: languages, browsers, protocols, waiting, request blocking and parallel sessions, from the official docs on 28 October 2026, plus the same scraper written in Puppeteer and Selenium and tested on a JavaScript-rendered page.
Read the article
GuidesGet Notified When a Scrape Finishes: Webhooks, Slack and Email
How to use webhooks for web scraping: get an HTTP call, a Slack or Discord message or an email the moment a scraper run finishes, with the run and dataset IDs to fetch results. Event types, payload templates, retries, a tested Python receiver and the API calls to set it up.
Read the article
The internet is full of data.
Start owning yours.
Scrape.ly gives you the infrastructure, the tooling, and the team to extract, process, and operationalize web data at any scale. Setup takes minutes.