NVD CVE Scraper: how to get Vulnerabilities by Vendor and Severity as JSON/CSV (API, Python, no code)

Pull new/modified CVEs from NIST NVD. This guide shows the output fields, a working input, and Python, JavaScript and cURL code for the Actor v0iddo/nvd-cve-tracker on Apify.

Open NVD CVE Scraper on Apify

What data you get

One row per result. Every row can be downloaded as JSON, CSV, Excel or HTML, or read through the API.

Input example

This is the input that is pre-filled on the Actor page. Change the values for your own run.

{
  "maxResultsPerQuery": 20
}

Output sample

Real rows from a run of the Actor. Fields that name people are left out of the sample.

[
  {
    "cveId": "CVE-2006-2073",
    "published": "2006-04-27T22:02:00.000",
    "lastModified": "2026-10-24T19:10:00.127",
    "vulnStatus": "Modified",
    "description": "Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a \"broken\" TSIG...",
    "affectedCpes": [
      "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*"
    ],
    "references": [
      "http://secunia.com/advisories/19808",
      "http://securitytracker.com/id?1015993",
      "http://www.kb.cert.org/vuls/id/955777"
    ],
    "nvdUrl": "https://nvd.nist.gov/vuln/detail/CVE-2006-2073",
    "queryOrigin": "kw=(none) sev=ALL"
  },
  {
    "cveId": "CVE-2007-0896",
    "published": "2007-02-13T11:28:00.000",
    "lastModified": "2026-10-19T11:55:19.830",
    "vulnStatus": "Analyzed",
    "description": "Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to...",
    "cwes": [
      "CWE-79"
    ],
    "affectedCpes": [
      "cpe:2.3:a:sage:sage:*:*:*:*:*:*:*:*"
    ],
    "references": [
      "http://jvn.jp/jp/JVN%2384430861/index.html",
      "http://mozdev.org/bugs/show_bug.cgi?id=16320",
      "http://osvdb.org/33131"
    ],
    "nvdUrl": "https://nvd.nist.gov/vuln/detail/CVE-2007-0896",
    "queryOrigin": "kw=(none) sev=ALL"
  }
]

Code: Python, JavaScript and cURL

Get your API token in Apify Console under Settings, then Integrations. The Actor id is v0iddo/nvd-cve-tracker.

Python (apify-client)

from apify_client import ApifyClient

client = ApifyClient("YOUR_APIFY_TOKEN")

run_input = {'maxResultsPerQuery': 20}

run = client.actor("v0iddo/nvd-cve-tracker").call(run_input=run_input)
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

JavaScript (apify-client)

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: 'YOUR_APIFY_TOKEN' });

const input = {
  "maxResultsPerQuery": 20
};

const run = await client.actor('v0iddo/nvd-cve-tracker').call(input);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items);

cURL

curl -X POST "https://api.apify.com/v2/acts/v0iddo~nvd-cve-tracker/run-sync-get-dataset-items" \
  -H "Authorization: Bearer YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"maxResultsPerQuery": 20}'

Price

$2.00 per 1,000 results. You pay per result row. There is no separate charge per run. Higher Apify plans pay less per result, down to $1.40 per 1,000. See the pricing tab for your plan. A new Apify account gets $5 of platform credit every month.

FAQ

What data does the NVD CVE Scraper return?

Each result is one row in an Apify dataset. Fields include cveId, published, lastModified, vulnStatus, description, cvssV3Version, cvssV3BaseScore, cvssV3Severity, and more. The table above shows every field with an example value.

How do I use the NVD CVE Scraper from Python?

Install the apify-client package, create a client with your Apify API token, call the Actor v0iddo/nvd-cve-tracker with an input like the one above, and read the rows from the run's dataset. The Python snippet above does exactly that.

Can I use it without writing code?

Yes. Open the Actor page on Apify, fill in the input form (an example is already filled in), press Start, and download the results as JSON, CSV, Excel or HTML. You can also schedule runs there.

How much does it cost?

$2.00 per 1,000 results. You pay per result row. There is no separate charge per run. Higher Apify plans pay less per result, down to $1.40 per 1,000. A new Apify account gets $5 of platform credit every month.

How do I limit the number of results?

Set a maximum cost for a run in the run options on Apify, and the run stops when it is reached.

Can I send the results to Google Sheets, Make, Zapier or n8n?

Yes. Apify datasets connect to Google Sheets, Slack, Make, Zapier and n8n, and a webhook can call your own service when a run finishes. You can also export the dataset as JSON, CSV or Excel.

Open NVD CVE Scraper on Apify

Related guides

• GitHub Trending Scraper: Pull the GitHub Trending repository list: daily, weekly, or monthly, filtered by programming language and s...
• Chrome Web Store Scraper: Snapshot Chrome Web Store extension metadata via the public listing page.
• Crossref Scraper: For each query, pull recent works from Crossref's public REST API with a server-side date filter.