mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-09-17 18:45:49 +00:00
74 lines
3.4 KiB
Markdown
74 lines
3.4 KiB
Markdown
# Terms of Use
|
||
|
||
The National Vulnerability Database (NVD) was created by the National Institute
|
||
of Standards and Technology (NIST) and is being made available as a public
|
||
service. The NVD offers some of its public data in machine-readable format via
|
||
an Application Programming Interface ("API"). This service is offered subject
|
||
to this Terms of Use and NIST Website Policies (collectively, the "Terms of Use"
|
||
or "TOU").
|
||
|
||
## Use
|
||
|
||
The NVD API is intended to be used to develop a service or services to search,
|
||
display, analyze, retrieve, view and otherwise "get" information from NVD data.
|
||
|
||
Examples of specific use cases are described in the guidance on the NVD’s
|
||
website. Enterprise scale development that uses the NVD should consult this
|
||
guidance.
|
||
|
||
## Attribution
|
||
|
||
Services which utilize or access the NVD API are asked to display the following
|
||
notice prominently within the application: "This product uses the NVD API but is
|
||
not endorsed or certified by the NVD."
|
||
|
||
You may use the NVD name in order to identify the source of API content subject
|
||
to these rules. You may not use the NVD name, to imply endorsement of any
|
||
product, service, or entity, not-for-profit, commercial or otherwise.
|
||
|
||
## Modification or False Representation of Content
|
||
|
||
If you modify the content accessed through the API, you may not attribute the
|
||
source as the NVD.
|
||
|
||
## Use Limitations
|
||
|
||
Your use of the API may be subject to certain limitations on access, calls, or
|
||
use as set forth within these Agreements or otherwise provided by the NVD. If
|
||
the NVD’s administrators believe that you have attempted to exceed or circumvent
|
||
these limits, or misuse access to this system, your ability to access the API
|
||
and/or the NVD may be temporarily or permanently blocked. The NVD may monitor
|
||
your use of the API to improve the service or to ensure access limitations are
|
||
not exceeded.
|
||
|
||
Without an API key, you may make a number of queries equal to the public rate
|
||
limits posted at nvd.nist.gov/developers. More than the public rate limit
|
||
requires that you register for an API key. The key will become part of your data
|
||
request. Keys should not be used by, or shared with, individuals or organizations
|
||
other than the original requestor.
|
||
|
||
Queries from a business or organization having multiple requestors might employ
|
||
a proxy service or firewall. This may make all of the users of that business or
|
||
organization to appear to have the same IP address. If multiple employees were
|
||
making queries, the rate limits are for the user’s proxy server/firewall, not
|
||
the individual user.
|
||
|
||
A unique API key is suggested for any mobile or web application that makes a
|
||
number of requests based on dynamically changing information. Rate limits may be
|
||
reached by the total number of requests from all instances when the application
|
||
queries the NVD API, even if multiple users access your application through
|
||
different IP addresses.
|
||
|
||
## Disclaimer of Warranties
|
||
|
||
The API is provided "as is" and on an "as-available" basis. The NVD hereby
|
||
disclaim all warranties of any kind, express or implied, including without
|
||
limitation the warranties of merchantability, fitness for a particular purpose,
|
||
and non-infringement. The NVD makes no warranty that the API will be error free
|
||
or that access thereto will be continuous or uninterrupted.
|
||
|
||
## No Waiver
|
||
|
||
The NVD’s failure to exercise or enforce any right or provision of these Terms
|
||
of Use shall not constitute waiver of such right or provision.
|