# cve-search/cve-search

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/cve-search-cve-search).**

2,593 stars · 618 forks · Python · agpl-3.0

## Links

- GitHub: https://github.com/cve-search/cve-search
- Homepage: https://www.cve-search.org/
- awesome-repositories: https://awesome-repositories.com/repository/cve-search-cve-search.md

## Topics

`common-vulnerabilities` `cpe` `cve` `cve-databases` `cve-entries` `cve-scanning` `cve-search` `vulnerabilities` `vulnerability-assessment` `vulnerability-detection`

## Description

cve-search is a vulnerability search engine and database manager designed to index, synchronize, and query CVE and CPE security vulnerability data. It functions as a security data warehouse that imports vulnerability feeds into a local database to enable fast, keyword-based discovery of security flaws.

The project provides a web-based vulnerability browser and a programmatic JSON API for retrieving records and risk scores. It utilizes full-text indexing for vulnerability descriptions and implements an identity-verified security portal using the OpenID Connect standard for user authentication.

The system includes capabilities for incremental data synchronization, in-memory caching of platform enumeration data, and vulnerability filtering by product, vendor, or date. It also features user account management, TLS traffic encryption, and priority ranking based on criticality.

The application is distributed as a containerized deployment via Docker to ensure consistent installation across different environments.

## Tags

### Security & Cryptography

- [CVE Database Managers](https://awesome-repositories.com/f/security-cryptography/cve-database-managers.md) — Provides a comprehensive system for importing, indexing, and synchronizing vulnerability feeds into a local database for fast searching.
- [Security Vulnerabilities](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/security-vulnerabilities.md) — Provides a searchable engine to filter security records by product or vendor to identify risks and attack vectors.
- [Vulnerability Detail Retrievals](https://awesome-repositories.com/f/security-cryptography/cve-vulnerability-aggregators/vulnerability-detail-retrievals.md) — Enables the retrieval of specific CVE details by ID or product name for security analysis.
- [CVE Vulnerability Search Engines](https://awesome-repositories.com/f/security-cryptography/cve-vulnerability-search-engines.md) — Implements a searchable database for indexing and querying CVE and CPE security vulnerability data via a web interface and API.
- [Vulnerability Database Management](https://awesome-repositories.com/f/security-cryptography/security/offensive-operations/vulnerability-research-analysis/research-reference-knowledge/vulnerability-database-management.md) — Synchronizes and maintains local copies of CVE and CPE security metadata from external feeds.
- [Vulnerability Data Query Engines](https://awesome-repositories.com/f/security-cryptography/security/offensive-operations/vulnerability-research-analysis/research-reference-knowledge/vulnerability-databases/vulnerability-data-query-engines.md) — Provides a query engine to identify specific vulnerabilities using product names or unique identifiers. ([source](https://cdn.jsdelivr.net/gh/cve-search/cve-search@master/README.md))
- [Vulnerability Browsers](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/vulnerability-reporting/contextual-vulnerability-analysis/vulnerability-browsers.md) — Ships with a graphical web interface for visually exploring recent security entries and detailed vulnerability information. ([source](https://cdn.jsdelivr.net/gh/cve-search/cve-search@master/README.md))
- [Vulnerability Database APIs](https://awesome-repositories.com/f/security-cryptography/vulnerability-database-apis.md) — Provides a programmatic JSON API for retrieving vulnerability records and risk scores for external security platforms. ([source](https://cve-search.github.io/cve-search/software/software.html))
- [Vulnerability Data Synchronization](https://awesome-repositories.com/f/security-cryptography/vulnerability-scanning/vulnerability-data-synchronization.md) — Loads and synchronizes security vulnerability records from remote sources into a local searchable database. ([source](https://cve-search.github.io/cve-search/))
- [OIDC Authentication Plugins](https://awesome-repositories.com/f/security-cryptography/oidc-authentication-plugins.md) — Provides a mechanism to verify user identities via integration with OpenID Connect identity providers. ([source](https://cve-search.github.io/cve-search/webgui/webgui.html))
- [OIDC Identity Integrations](https://awesome-repositories.com/f/security-cryptography/oidc-identity-integrations.md) — Delegates user authentication to external identity providers using the OpenID Connect standard.
- [User Account Management](https://awesome-repositories.com/f/security-cryptography/user-account-management.md) — Provides user account management to control interface access and administrative roles. ([source](https://cve-search.github.io/cve-search/webgui/webgui.html))

### Data & Databases

- [Data Warehousing](https://awesome-repositories.com/f/data-databases/data-warehousing.md) — Functions as a security data warehouse by importing and indexing large sets of vulnerability information.
- [Full-Text Search Indexes](https://awesome-repositories.com/f/data-databases/database-management-systems/database-systems-management/full-text-search-indexes.md) — Utilizes full-text indexing of vulnerability descriptions to enable efficient keyword-based discovery of security flaws.
- [Incremental Data Synchronization](https://awesome-repositories.com/f/data-databases/incremental-data-synchronization.md) — Implements incremental synchronization to update the local data store using only changed records from security feeds.
- [Local Indexes](https://awesome-repositories.com/f/data-databases/secondary-indexes/local-indexes.md) — Maintains local copies of vulnerability records and search indices to allow fast lookups without external API dependencies.
- [JSON API Servers](https://awesome-repositories.com/f/data-databases/json-api-servers.md) — Exposes internal vulnerability records through a structured JSON API for integration with external security scanners.
- [Vulnerability Attribute Filters](https://awesome-repositories.com/f/data-databases/search-indexing-technologies/search-indexing/search-and-indexing/content-search-filters/vulnerability-attribute-filters.md) — Allows filtering of security records by product, vendor, or date to retrieve specific risk scores and attack vectors. ([source](https://cve-search.github.io/cve-search/))

### DevOps & Infrastructure

- [Docker-Based Deployment Tools](https://awesome-repositories.com/f/devops-infrastructure/container-orchestration/container-runtimes/runtime-configuration-interfaces/docker-socket-orchestrators/docker-target-configurators/docker-container-deployments/docker-based-deployment-tools.md) — Ships as a Docker-based deployment to ensure consistent installation across different environments.
- [Vulnerability Detail Retrievals](https://awesome-repositories.com/f/devops-infrastructure/scan-result-interpreters/scan-result-exporters/detailed-result-retrieval/vulnerability-detail-retrievals.md) — Implements a JSON interface for retrieving detailed records of specific CVEs by their unique identifiers. ([source](https://cdn.jsdelivr.net/gh/cve-search/cve-search@master/README.md))