Command injection entries by CWE

What this example returns

This example returns up to 25 catalog entries.

The dataset’s “Catalog entries” view shows 12 columns: CVE ID, Vendor / project, Product, Name, Added, Due, Ransomware use, Forensic triage, CWEs, Description, Required action, and NVD. See every output field.

What each setting does

The input this example runs CISA KEV Catalog Scraper with. “Try this input” opens it in the console, where you can run it as-is or change any field first.

Maximum results maxResults

25

How many catalog entries to save. Leave empty (or 0) to save every matching entry: with no filter that is the whole catalog (about 1,800 entries).

Sort by sortBy

CVE ID

Order of the saved entries. Applied before the maximum results.

Default: Date added, newest first → this example uses CVE ID

Keywords keywords

command injection

Only entries that contain one of these words in the CVE ID, vendor, product, name, description or notes (any case).

Forensic triage forensicTriage

No

Keep only entries with this value of the catalog's forensicTriage field.

Default: Any → this example uses No

CWE IDs cwes

CWE-78, 77

Only entries tagged with one of these weakness IDs, e.g. CWE-79 or 79.

{
  "cwes": [
    "CWE-78",
    "77"
  ],
  "keywords": [
    "command injection"
  ],
  "forensicTriage": "No",
  "sortBy": "cveId",
  "maxResults": 25
}

What it costs

From about $0.015 for 25 catalog entries

An estimate at the lowest plan price: 25 × $0.000595 per catalog entry (One CISA KEV catalog entry saved: CVE ID, vendor, product, name, description, dates, ransomware use, forensic triage, required action, notes and CWEs). A run is charged for the events it reports, so one that finds fewer catalog entries costs less. Platform usage is included in the event price.

Full pricing

When to use this example

From the CISA KEV Catalog Scraper readme:

Other ways to run CISA KEV Catalog Scraper

• Microsoft Windows and SharePoint, ransomware use knownWindows and SharePoint entries added in 2024-2025 with known ransomware campaign use, soonest due date first.
• Look up CVE IDsCheck a list of CVE IDs against the catalog.
• Added in the last 90 daysThe 20 newest catalog entries added in the last 90 days.

All examples of CISA KEV Catalog Scraper

About CISA KEV Catalog Scraper

Export the CISA Known Exploited Vulnerabilities (KEV) catalog: CVE ID, vendor, product, name, description, date added, due date, ransomware use, forensic triage, required action, notes and CWEs. Whole catalog or filtered by date, vendor, product, keyword or CWE. No login needed.

Price:

from $0.595 / 1,000 results

Developer:

Querystone

Categories:

Developer tools, Automation

CISA KEV Catalog Scraper pageOutput fieldsPricing