NVD - Data Feeds (original) (raw)

1. Vulnerabilities

APIs and Data Feed Types

The following table contains links and short descriptions for each API or data feed the NVD offers. Please read how to keep up-to-date with NVD data when using the traditional data feeds.

Users of the data feeds provided on this page must have an understanding of the XML and/or JSON standards and XML or JSON related technologies as defined by www.w3.org.

CVE and CPE APIs

The 2.0 APIs are the preferred method for staying up to date with the NVD. Users interested in learning where to begin with the API should visitthe NVD developers pages.

Benefits of the APIs over the traditional data feeds include:

• The APIs are updated as frequently as our website (unlike the traditional feeds which have explicit update intervals)
• The APIs provide search capabilities based on the Advanced search feature of the website
• The APIs provide CVE and CPE based searching capabilities, including the ability to search for single CVE and CPE entries
• The ability to view only the information that has changed since a given date or time
• Simplified methods of identifying CPE matches to Applicability statements

How to Keep Up-to-Date with the NVD Data Using the Traditional Feeds

The vulnerability feeds provide CVE® data organized by the first four digits of a CVE® identifier (except for the 2002 feeds which include vulnerabilities prior to and including "CVE-2002-"). If you are locally mirroring NVD data, either the APIs or the data feeds may be used to stay synchronized. After performing a one-time import of the complete data set using the compressed JSON vulnerability feeds, the "modified" feeds should be used to keep up-to-date.

Each feed is updated nightly, but only if the content of that feed has changed. For example, the 2004 feeds will be updated only if there is an addition or modification to any vulnerability with a starting CVE® identifier of "CVE-2004-". The "recent" feeds are a list of recently published vulnerabilities and the "modified" feeds are a list of recently published and modified vulnerabilities. The "recent" and "modified" feeds only contain vulnerabilities changed within the previous eight days. These feeds are updated approximately every two hours.

JSON 2.0 Feeds

These data feeds include updated NVD data in the new 2.0 JSON format. The "year" feeds are updated once per day, while the "recent" and "modified" feeds are updated every two hours.

NVD/CVE Translated XML Feed (version 1.0)

NVD provides an XML feed for translations of CVE vulnerabilities into other languages.

Currently, INCIBE (Spanish National Cybersecurity Institute) is translating vulnerabilities into Spanish. INCIBE is solely responsible for the Spanish translation content.

Created September 20, 2022 , Updated August 20, 2025