2023-04-27 15:02:47 +02:00
# nvd-json-data-feeds
2023-04-24 14:55:30 +02:00
Community reconstruction of the soon-to-be deprecated JSON NVD Data Feeds.
2023-04-27 20:00:28 +02:00
[Releases ](releases/latest ) each day at 00:00 AM UTC.
2023-04-27 16:00:24 +02:00
Repository synchronizes with the NVD every 2 hours.
2023-04-24 14:55:30 +02:00
2023-04-27 16:00:24 +02:00
## Repository at a Glance
2023-04-24 14:55:30 +02:00
2023-04-27 16:00:24 +02:00
### Last Repository Update
2023-04-24 14:55:30 +02:00
```plain
2023-05-03 18:00:27 +02:00
2023-05-03T16:00:24.647552+00:00
2023-04-24 14:55:30 +02:00
```
2023-04-27 16:00:24 +02:00
### Most recent CVE Modification Timestamp synchronized with NVD
2023-04-24 14:55:30 +02:00
```plain
2023-05-03 18:00:27 +02:00
2023-05-03T15:46:52.087000+00:00
2023-04-24 14:55:30 +02:00
```
2023-04-27 16:00:24 +02:00
### Last Data Feed Release
2023-04-24 14:55:30 +02:00
2023-04-27 20:00:28 +02:00
Download and Changelog: [Click ](releases/latest )
2023-04-24 14:55:30 +02:00
```plain
2023-05-03 04:00:27 +02:00
2023-05-03T00:00:20.967707+00:00
2023-04-24 14:55:30 +02:00
```
2023-04-27 16:00:24 +02:00
### Total Number of included CVEs
2023-04-24 14:55:30 +02:00
2023-04-27 15:02:47 +02:00
```plain
2023-05-03 18:00:27 +02:00
213998
2023-04-24 14:55:30 +02:00
```
2023-04-27 16:00:24 +02:00
### CVEs added in the last Commit
2023-04-24 14:55:30 +02:00
2023-05-03 18:00:27 +02:00
Recently added CVEs: `18`
* [CVE-2022-46852 ](CVE-2022/CVE-2022-468xx/CVE-2022-46852.json ) (`2023-05-03T15:15:11.190` )
* [CVE-2023-22372 ](CVE-2023/CVE-2023-223xx/CVE-2023-22372.json ) (`2023-05-03T15:15:11.437` )
* [CVE-2023-22683 ](CVE-2023/CVE-2023-226xx/CVE-2023-22683.json ) (`2023-05-03T14:15:30.667` )
* [CVE-2023-23785 ](CVE-2023/CVE-2023-237xx/CVE-2023-23785.json ) (`2023-05-03T15:15:11.627` )
* [CVE-2023-23808 ](CVE-2023/CVE-2023-238xx/CVE-2023-23808.json ) (`2023-05-03T15:15:11.770` )
* [CVE-2023-23809 ](CVE-2023/CVE-2023-238xx/CVE-2023-23809.json ) (`2023-05-03T15:15:12.117` )
* [CVE-2023-23874 ](CVE-2023/CVE-2023-238xx/CVE-2023-23874.json ) (`2023-05-03T14:15:31.987` )
* [CVE-2023-23876 ](CVE-2023/CVE-2023-238xx/CVE-2023-23876.json ) (`2023-05-03T14:15:32.290` )
* [CVE-2023-24461 ](CVE-2023/CVE-2023-244xx/CVE-2023-24461.json ) (`2023-05-03T15:15:12.310` )
* [CVE-2023-24594 ](CVE-2023/CVE-2023-245xx/CVE-2023-24594.json ) (`2023-05-03T15:15:12.447` )
* [CVE-2023-25979 ](CVE-2023/CVE-2023-259xx/CVE-2023-25979.json ) (`2023-05-03T14:15:32.667` )
* [CVE-2023-27378 ](CVE-2023/CVE-2023-273xx/CVE-2023-27378.json ) (`2023-05-03T15:15:12.587` )
* [CVE-2023-28406 ](CVE-2023/CVE-2023-284xx/CVE-2023-28406.json ) (`2023-05-03T15:15:12.720` )
* [CVE-2023-28656 ](CVE-2023/CVE-2023-286xx/CVE-2023-28656.json ) (`2023-05-03T15:15:12.860` )
* [CVE-2023-28724 ](CVE-2023/CVE-2023-287xx/CVE-2023-28724.json ) (`2023-05-03T15:15:13.020` )
* [CVE-2023-28742 ](CVE-2023/CVE-2023-287xx/CVE-2023-28742.json ) (`2023-05-03T15:15:13.153` )
* [CVE-2023-29163 ](CVE-2023/CVE-2023-291xx/CVE-2023-29163.json ) (`2023-05-03T15:15:13.287` )
* [CVE-2023-29240 ](CVE-2023/CVE-2023-292xx/CVE-2023-29240.json ) (`2023-05-03T15:15:13.423` )
2023-04-24 14:55:30 +02:00
2023-04-29 02:00:26 +02:00
### CVEs modified in the last Commit
2023-04-28 23:55:26 +02:00
2023-05-03 18:00:27 +02:00
Recently modified CVEs: `80`
* [CVE-2021-23166 ](CVE-2021/CVE-2021-231xx/CVE-2021-23166.json ) (`2023-05-03T14:38:22.883` )
* [CVE-2021-23176 ](CVE-2021/CVE-2021-231xx/CVE-2021-23176.json ) (`2023-05-03T14:28:25.537` )
* [CVE-2021-23178 ](CVE-2021/CVE-2021-231xx/CVE-2021-23178.json ) (`2023-05-03T14:25:43.207` )
* [CVE-2021-44465 ](CVE-2021/CVE-2021-444xx/CVE-2021-44465.json ) (`2023-05-03T14:12:22.630` )
* [CVE-2022-2873 ](CVE-2022/CVE-2022-28xx/CVE-2022-2873.json ) (`2023-05-03T14:15:10.653` )
* [CVE-2022-30995 ](CVE-2022/CVE-2022-309xx/CVE-2022-30995.json ) (`2023-05-03T14:41:11.100` )
* [CVE-2022-3405 ](CVE-2022/CVE-2022-34xx/CVE-2022-3405.json ) (`2023-05-03T14:41:11.100` )
* [CVE-2022-3424 ](CVE-2022/CVE-2022-34xx/CVE-2022-3424.json ) (`2023-05-03T14:15:12.830` )
* [CVE-2022-3545 ](CVE-2022/CVE-2022-35xx/CVE-2022-3545.json ) (`2023-05-03T14:15:13.337` )
* [CVE-2022-36280 ](CVE-2022/CVE-2022-362xx/CVE-2022-36280.json ) (`2023-05-03T14:15:12.327` )
* [CVE-2022-3707 ](CVE-2022/CVE-2022-37xx/CVE-2022-3707.json ) (`2023-05-03T14:15:14.110` )
* [CVE-2022-40302 ](CVE-2022/CVE-2022-403xx/CVE-2022-40302.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2022-40318 ](CVE-2022/CVE-2022-403xx/CVE-2022-40318.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2022-41218 ](CVE-2022/CVE-2022-412xx/CVE-2022-41218.json ) (`2023-05-03T14:15:14.560` )
* [CVE-2022-43681 ](CVE-2022/CVE-2022-436xx/CVE-2022-43681.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2022-45934 ](CVE-2022/CVE-2022-459xx/CVE-2022-45934.json ) (`2023-05-03T14:15:14.953` )
* [CVE-2022-4744 ](CVE-2022/CVE-2022-47xx/CVE-2022-4744.json ) (`2023-05-03T14:15:15.753` )
* [CVE-2022-47929 ](CVE-2022/CVE-2022-479xx/CVE-2022-47929.json ) (`2023-05-03T14:15:15.467` )
* [CVE-2022-48150 ](CVE-2022/CVE-2022-481xx/CVE-2022-48150.json ) (`2023-05-03T14:57:34.217` )
* [CVE-2023-0045 ](CVE-2023/CVE-2023-00xx/CVE-2023-0045.json ) (`2023-05-03T14:15:16.303` )
* [CVE-2023-0266 ](CVE-2023/CVE-2023-02xx/CVE-2023-0266.json ) (`2023-05-03T14:15:16.877` )
* [CVE-2023-0394 ](CVE-2023/CVE-2023-03xx/CVE-2023-0394.json ) (`2023-05-03T14:15:17.673` )
* [CVE-2023-0458 ](CVE-2023/CVE-2023-04xx/CVE-2023-0458.json ) (`2023-05-03T14:15:18.220` )
* [CVE-2023-0461 ](CVE-2023/CVE-2023-04xx/CVE-2023-0461.json ) (`2023-05-03T14:15:18.783` )
* [CVE-2023-1073 ](CVE-2023/CVE-2023-10xx/CVE-2023-1073.json ) (`2023-05-03T14:15:19.060` )
* [CVE-2023-1074 ](CVE-2023/CVE-2023-10xx/CVE-2023-1074.json ) (`2023-05-03T14:15:19.413` )
* [CVE-2023-1078 ](CVE-2023/CVE-2023-10xx/CVE-2023-1078.json ) (`2023-05-03T14:15:19.747` )
* [CVE-2023-1079 ](CVE-2023/CVE-2023-10xx/CVE-2023-1079.json ) (`2023-05-03T14:15:21.417` )
* [CVE-2023-1118 ](CVE-2023/CVE-2023-11xx/CVE-2023-1118.json ) (`2023-05-03T14:15:21.720` )
* [CVE-2023-1281 ](CVE-2023/CVE-2023-12xx/CVE-2023-1281.json ) (`2023-05-03T14:15:23.817` )
* [CVE-2023-1383 ](CVE-2023/CVE-2023-13xx/CVE-2023-1383.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-1384 ](CVE-2023/CVE-2023-13xx/CVE-2023-1384.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-1385 ](CVE-2023/CVE-2023-13xx/CVE-2023-1385.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-1513 ](CVE-2023/CVE-2023-15xx/CVE-2023-1513.json ) (`2023-05-03T14:15:24.243` )
* [CVE-2023-1670 ](CVE-2023/CVE-2023-16xx/CVE-2023-1670.json ) (`2023-05-03T14:15:25.157` )
* [CVE-2023-1731 ](CVE-2023/CVE-2023-17xx/CVE-2023-1731.json ) (`2023-05-03T14:21:49.653` )
* [CVE-2023-1829 ](CVE-2023/CVE-2023-18xx/CVE-2023-1829.json ) (`2023-05-03T14:15:25.480` )
* [CVE-2023-1855 ](CVE-2023/CVE-2023-18xx/CVE-2023-1855.json ) (`2023-05-03T14:15:25.843` )
* [CVE-2023-1989 ](CVE-2023/CVE-2023-19xx/CVE-2023-1989.json ) (`2023-05-03T14:15:27.110` )
* [CVE-2023-1990 ](CVE-2023/CVE-2023-19xx/CVE-2023-1990.json ) (`2023-05-03T14:15:28.543` )
* [CVE-2023-1998 ](CVE-2023/CVE-2023-19xx/CVE-2023-1998.json ) (`2023-05-03T15:16:29.733` )
* [CVE-2023-2162 ](CVE-2023/CVE-2023-21xx/CVE-2023-2162.json ) (`2023-05-03T14:15:33.847` )
* [CVE-2023-2194 ](CVE-2023/CVE-2023-21xx/CVE-2023-2194.json ) (`2023-05-03T14:15:34.133` )
* [CVE-2023-2220 ](CVE-2023/CVE-2023-22xx/CVE-2023-2220.json ) (`2023-05-03T15:26:07.897` )
* [CVE-2023-2226 ](CVE-2023/CVE-2023-22xx/CVE-2023-2226.json ) (`2023-05-03T14:51:43.173` )
* [CVE-2023-2227 ](CVE-2023/CVE-2023-22xx/CVE-2023-2227.json ) (`2023-05-03T14:53:27.287` )
* [CVE-2023-2228 ](CVE-2023/CVE-2023-22xx/CVE-2023-2228.json ) (`2023-05-03T14:55:49.147` )
* [CVE-2023-2231 ](CVE-2023/CVE-2023-22xx/CVE-2023-2231.json ) (`2023-05-03T15:22:57.563` )
* [CVE-2023-22713 ](CVE-2023/CVE-2023-227xx/CVE-2023-22713.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-23454 ](CVE-2023/CVE-2023-234xx/CVE-2023-23454.json ) (`2023-05-03T14:15:31.060` )
* [CVE-2023-23455 ](CVE-2023/CVE-2023-234xx/CVE-2023-23455.json ) (`2023-05-03T14:15:31.450` )
* [CVE-2023-23559 ](CVE-2023/CVE-2023-235xx/CVE-2023-23559.json ) (`2023-05-03T14:15:31.700` )
* [CVE-2023-23708 ](CVE-2023/CVE-2023-237xx/CVE-2023-23708.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-23820 ](CVE-2023/CVE-2023-238xx/CVE-2023-23820.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-24818 ](CVE-2023/CVE-2023-248xx/CVE-2023-24818.json ) (`2023-05-03T15:44:33.400` )
* [CVE-2023-25131 ](CVE-2023/CVE-2023-251xx/CVE-2023-25131.json ) (`2023-05-03T15:29:22.673` )
* [CVE-2023-25783 ](CVE-2023/CVE-2023-257xx/CVE-2023-25783.json ) (`2023-05-03T14:41:11.100` )
* [CVE-2023-25784 ](CVE-2023/CVE-2023-257xx/CVE-2023-25784.json ) (`2023-05-03T14:41:11.100` )
* [CVE-2023-25786 ](CVE-2023/CVE-2023-257xx/CVE-2023-25786.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25787 ](CVE-2023/CVE-2023-257xx/CVE-2023-25787.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25789 ](CVE-2023/CVE-2023-257xx/CVE-2023-25789.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25792 ](CVE-2023/CVE-2023-257xx/CVE-2023-25792.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25796 ](CVE-2023/CVE-2023-257xx/CVE-2023-25796.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25797 ](CVE-2023/CVE-2023-257xx/CVE-2023-25797.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-25798 ](CVE-2023/CVE-2023-257xx/CVE-2023-25798.json ) (`2023-05-03T14:41:00.093` )
* [CVE-2023-26097 ](CVE-2023/CVE-2023-260xx/CVE-2023-26097.json ) (`2023-05-03T15:44:39.657` )
* [CVE-2023-26099 ](CVE-2023/CVE-2023-260xx/CVE-2023-26099.json ) (`2023-05-03T15:46:52.087` )
* [CVE-2023-26545 ](CVE-2023/CVE-2023-265xx/CVE-2023-26545.json ) (`2023-05-03T14:15:32.977` )
* [CVE-2023-26865 ](CVE-2023/CVE-2023-268xx/CVE-2023-26865.json ) (`2023-05-03T14:57:14.857` )
* [CVE-2023-27848 ](CVE-2023/CVE-2023-278xx/CVE-2023-27848.json ) (`2023-05-03T15:29:21.517` )
* [CVE-2023-27990 ](CVE-2023/CVE-2023-279xx/CVE-2023-27990.json ) (`2023-05-03T15:01:39.687` )
* [CVE-2023-27991 ](CVE-2023/CVE-2023-279xx/CVE-2023-27991.json ) (`2023-05-03T15:04:37.820` )
* [CVE-2023-28328 ](CVE-2023/CVE-2023-283xx/CVE-2023-28328.json ) (`2023-05-03T14:15:33.387` )
* [CVE-2023-29020 ](CVE-2023/CVE-2023-290xx/CVE-2023-29020.json ) (`2023-05-03T14:42:00.337` )
* [CVE-2023-29579 ](CVE-2023/CVE-2023-295xx/CVE-2023-29579.json ) (`2023-05-03T14:27:39.120` )
* [CVE-2023-29582 ](CVE-2023/CVE-2023-295xx/CVE-2023-29582.json ) (`2023-05-03T14:29:09.613` )
* [CVE-2023-29905 ](CVE-2023/CVE-2023-299xx/CVE-2023-29905.json ) (`2023-05-03T15:17:55.217` )
* [CVE-2023-29906 ](CVE-2023/CVE-2023-299xx/CVE-2023-29906.json ) (`2023-05-03T15:18:18.183` )
* [CVE-2023-30456 ](CVE-2023/CVE-2023-304xx/CVE-2023-30456.json ) (`2023-05-03T14:15:34.530` )
* [CVE-2023-30772 ](CVE-2023/CVE-2023-307xx/CVE-2023-30772.json ) (`2023-05-03T14:15:34.807` )
2023-04-24 14:55:30 +02:00
## Download and Usage
There are several ways you can work with the data in this repository:
### 1) Release Data Feed Packages
2023-04-27 20:00:28 +02:00
The most straightforward approach is to obtain the latest Data Feed release packages [here ](releases/latest ).
2023-04-24 14:55:30 +02:00
2023-04-27 16:00:24 +02:00
Each day at 00:00 AM UTC we package and upload JSON files that aim to reconstruct the legacy NVD CVE Data Feeds.
2023-04-24 14:55:30 +02:00
Those are aggregated by the `year` part of the CVE identifier:
```
# CVE-<YEAR>.json
CVE-1999.json
CVE-2001.json
CVE-2002.json
CVE-2003.json
[...]
CVE-2023.json
```
2023-04-27 15:02:47 +02:00
We also upload the well-known `Recent` and `Modified` feeds.
Furthermore, we provide the `All` feed, which contains a recent snapshot of all NVD records.
2023-04-27 16:00:24 +02:00
Once your local copy is synchronized and the last synchronization is no older than 8 days, you can rely on these to stay up to date:
2023-04-24 14:55:30 +02:00
```plain
CVE-Recent.json # CVEs that were added in the previous eight days
CVE-Modified.json # CVEs that were modified or added in the previous eight days
```
2023-04-27 16:00:24 +02:00
Note that all feeds are distributed in `xz` -compressed format to save storage and bandwidth.
2023-04-24 14:55:30 +02:00
For decompression execute:
```sh
xz -d -k < feed > .json.xz
```
#### Automation using Release Data Feed Packages
2023-04-27 16:00:24 +02:00
You can fetch the latest releases for each package with the following static link layout:
2023-04-24 14:55:30 +02:00
```sh
2023-04-27 15:02:47 +02:00
https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-< YEAR > .json.xz
2023-04-24 14:55:30 +02:00
```
Example:
```sh
2023-04-27 15:02:47 +02:00
wget https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-2023.json.xz
2023-04-24 14:55:30 +02:00
xz -d -k CVE-2023.json.xz
```
2023-04-27 16:00:24 +02:00
### 2) Clone the Repository (with Git History)
2023-04-24 14:55:30 +02:00
2023-04-27 16:00:24 +02:00
As you can see by browsing this repository, there is a slight difference between the release packages format and the repository folder structure.
2023-04-24 14:55:30 +02:00
This is because we want to maintain explorability of the dataset.
2023-04-27 16:00:24 +02:00
Each CVE gets its own JSON file, e.g., `CVE-1999-0001.json` .
2023-04-24 14:55:30 +02:00
Here, each file is put into a folder layout that first sorts by CVE `year` identifier part and then by `number` part.
2023-04-27 16:00:24 +02:00
We mask (`xx` ) the last two digits to create easily navigable folders that hold a maximum of 100 CVE JSON files:
2023-04-24 14:55:30 +02:00
```plain
.
├── CVE-1999
│ ├── CVE-1999-00xx
│ │ ├── CVE-1999-0001.json
│ │ ├── CVE-1999-0002.json
│ │ └── [...]
│ ├── CVE-1999-01xx
2023-04-25 17:08:25 +02:00
│ │ ├── CVE-1999-0101.json
│ │ └── [...]
2023-04-24 14:55:30 +02:00
│ └── [...]
├── CVE-2000
│ ├── CVE-2000-00xx
│ ├── CVE-2000-01xx
│ └── [...]
└── [...]
```
2023-04-27 16:00:24 +02:00
A byproduct of managing and continuously updating this dataset via Git is that we can track changes over time through the Git history.
2023-04-24 14:55:30 +02:00
2023-04-27 16:00:24 +02:00
If you are interested in having the NVD data as organized above, including the historical data of changes, just clone this repository (large!):
2023-04-24 14:55:30 +02:00
```sh
2023-04-27 15:02:47 +02:00
git clone https://github.com/fkie-cad/nvd-json-data-feeds.git
2023-04-24 14:55:30 +02:00
```
2023-04-27 16:00:24 +02:00
### 3) Clone the Repository (without Git History)
2023-04-24 14:55:30 +02:00
Don't need the history? Then create a shallow copy:
```sh
2023-04-27 15:02:47 +02:00
git clone --depth 1 -b main https://github.com/fkie-cad/nvd-json-data-feeds.git
2023-04-24 14:55:30 +02:00
```
## Motivation
2023-04-27 16:00:24 +02:00
As of September 2023, the NIST will retire all [JSON-based NVD Data Feeds ](https://nvd.nist.gov/vuln/data-feeds#divRetirementBanner-1 ).
2023-04-24 14:55:30 +02:00
The new [NVD CVE API 2.0 ](https://nvd.nist.gov/developers/vulnerabilities ) is, without a doubt, a great way to obtain CVE information.
However, we from [Fraunhofer FKIE - Cyber Analysis and Defense ](https://www.fkie.fraunhofer.de/en/departments/cad.html ) believe that the API does not cover a variety of use cases.
The legacy NVD Data Feeds provided a convenient way to quickly obtain a complete, file-based offline database snapshot; just download the `CVE-<YEAR>.tar.gz` , decompress it, and use it as you please, e.g.:
2023-04-27 16:00:24 +02:00
* Put the JSON feed into a document-based database and quickly leverage upon that data in your software project, ...
2023-04-24 14:55:30 +02:00
* Parse and analyze it using your favorite programming language, ...
* Put it on a USB stick and transfer it to a system without internet access, or ...
* Query the file using `jq` !
2023-04-27 16:00:24 +02:00
Unfortunately, the new NVD API 2.0 adds complexity to this process.
2023-04-24 14:55:30 +02:00
We want to preserve ease of use by reconstructing these data sources.
## Non-Endorsement Clause
This project uses and redistributes data from the NVD API but is not endorsed or certified by the NVD.
