cve-search is a vulnerability search engine and database manager designed to index, synchronize, and query CVE and CPE security vulnerability data. It functions as a security data warehouse that imports vulnerability feeds into a local database to enable fast, keyword-based discovery of security flaws.
The project provides a web-based vulnerability browser and a programmatic JSON API for retrieving records and risk scores. It utilizes full-text indexing for vulnerability descriptions and implements an identity-verified security portal using the OpenID Connect standard for user authentication.
The system includes capabilities for incremental data synchronization, in-memory caching of platform enumeration data, and vulnerability filtering by product, vendor, or date. It also features user account management, TLS traffic encryption, and priority ranking based on criticality.
The application is distributed as a containerized deployment via Docker to ensure consistent installation across different environments.