CVE Tools

CVE Tools is an AI-assisted vulnerability intelligence platform that aggregates, enriches, and presents CVE data from multiple authoritative sources. Data Sources: - CVEProject/cvelistV5 (official CVE database) - NVD (NIST National Vulnerability Database) - GHSA (GitHub Security Advisories) - CISA KEV (Known Exploited Vulnerabilities catalog) - BDU FSTEC (Russian FSTEC vulnerability database) - Nuclei Templates (ProjectDiscovery) The platform maintains a database of over 320,000 accepted CVEs spanning from 1999 to present, continuously synced from upstream sources. Each CVE record is enriched with CVSS scores, CPE identifiers, CWE classifications, EPSS scores, exploit links, Nuclei scanner templates, and MITRE ATT&CK technique mappings. Core Capabilities: - CVE search and filtering by severity, vendor, date range, exploit availability, CWE, EPSS range, KEV status, and attack vector - Exploit intelligence linking CVEs to GitHub PoC repositories, ExploitDB entries, and Metasploit modules - EPSS scoring from FIRST.org for exploit probability-based prioritization - CISA KEV tracking for confirmed actively exploited vulnerabilities - Attack surface graph visualization mapping products to CVEs to MITRE ATT&CK techniques and kill chain stages - AI assistant for CVE impact analysis, remediation recommendations, detection rule generation, and natural language database queries - Nuclei template discovery and AI-assisted template generation - REST API for programmatic access - MCP (Model Context Protocol) server for integration with compatible AI tools Search is powered by Typesense, enabling sub-50ms full-text and faceted search results. The platform offers a free account tier with no credit card required.