# NIST API: Search vulnerabilities > Finds known vulnerabilities (CVEs) in the NVD that match a product or vendor name, newest first. Each CVE is flagged when it is in CISA's known exploited catalog. Unofficial. Not affiliated with or endorsed by NIST. - Page: https://fous.com/methods/nvd.nist.gov/search-vulnerabilities - Method: `nvd.nist.gov/search_vulnerabilities`, version 1 - Website: nvd.nist.gov - Returns: CVE number, severity, CVSS score, description, published date, affected versions, known-exploited flag, NVD link - Effect: read (it gets data and changes nothing) - Sign-in: none needed - Cost: 1 credit per completed run (1¢ with pay as you go); failed runs are free - Verified: Nov 2, 2026 ## Inputs | Field | Type | Required | In the run below | Description | |---|---|---|---|---| | `product` | string | yes | `"Apache Tomcat"` | Product and/or vendor name, such as Apache Tomcat. | | `severity` | string | no | | Severity to include, such as critical; any includes unrated flaws. One of "any", "low", "medium", "high", "critical". Default "any". | | `max_results` | integer | no | | Maximum number of results, such as 20 (up to 100). Default 20. | | `published_after` | string | no | | Include vulnerabilities published on or after this date (YYYY-MM-DD), such as 2025-01-01. | ## Output From a run on Oct 23, 2026, shortened. Its input: ```json { "product": "Apache Tomcat" } ``` Its output: ```json { "vulnerabilities": [ { "nvd_link": "https://nvd.nist.gov/vuln/detail/CVE-2026-93446", "severity": "Unknown", "cve_number": "CVE-2026-93446", "cvss_score": null, "description": "Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 o…", "published_date": "2026-10-20", "affected_versions": "Apache Software Foundation Apache Tomcat: from 11.0.0-M21 through 11.0.26; Apache Software Foundation Apache Tomcat: from 10.1.25 through 10.1.60; Apache Software Foundation Apache Tomcat: from 9.0.90 through 9.0.122", "known_exploited_in_the_wild": false }, { "nvd_link": "https://nvd.nist.gov/vuln/detail/CVE-2026-88041", "severity": "Unknown", "cve_number": "CVE-2026-88041", "cvss_score": null, "description": "Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122.\n\n\n\nUsers are recommended to upg…", "published_date": "2026-10-20", "affected_versions": "Apache Software Foundation Apache Tomcat: from 11.0.0-M23 through 11.0.26; Apache Software Foundation Apache Tomcat: from 10.1.27 through 10.1.60; Apache Software Foundation Apache Tomcat: from 9.0.92 through 9.0.122", "known_exploited_in_the_wild": false }, { "nvd_link": "https://nvd.nist.gov/vuln/detail/CVE-2026-80353", "severity": "Unknown", "cve_number": "CVE-2026-80353", "cvss_score": null, "description": "Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the same…", "published_date": "2026-10-20", "affected_versions": "Apache Software Foundation Apache Tomcat: from 9.0.47 through 9.0.122", "known_exploited_in_the_wild": false } ] } ``` ## Run it From code, with a Fous API key in `FOUS_API_KEY`; the answer's `data` holds the output: ```bash curl https://api.fous.com/v1/runs \ -H "Authorization: Bearer $FOUS_API_KEY" \ -H "Content-Type: application/json" \ -d '{"method":"nvd.nist.gov/search_vulnerabilities","input":{"product":"Apache Tomcat"}}' ``` From an AI agent connected to the Fous MCP server: its `run` with the same method and input. To connect one, give it `set up https://fous.com/SKILL.md`. ## Ask your agent - Show me the latest critical CVEs affecting Apache Tomcat published since 2025-01-01, up to 15 results. - Are there any known exploited vulnerabilities in OpenSSL? List the newest ones with CVSS scores. - Find high severity flaws for Microsoft Exchange Server from nist.gov, limit to 10 results. - List every unrated vulnerability tied to the vendor Cisco published after 2024-06-01. - Search the NVD for medium and higher issues in Fortinet FortiOS, returning 50 results newest first. ## Input schema ```json { "type": "object", "required": [ "product" ], "properties": { "product": { "type": "string", "minLength": 1, "description": "Product and/or vendor name, such as Apache Tomcat." }, "severity": { "enum": [ "any", "low", "medium", "high", "critical" ], "type": "string", "default": "any", "description": "Severity to include, such as critical; any includes unrated flaws." }, "max_results": { "type": "integer", "default": 20, "maximum": 100, "minimum": 1, "description": "Maximum number of results, such as 20 (up to 100)." }, "published_after": { "type": "string", "description": "Include vulnerabilities published on or after this date (YYYY-MM-DD), such as 2025-01-01." } } } ``` ## Output schema ```json { "type": "object", "required": [ "vulnerabilities" ], "properties": { "vulnerabilities": { "type": "array", "items": { "type": "object", "required": [ "cve_number", "severity", "cvss_score", "description", "published_date", "affected_versions", "known_exploited_in_the_wild", "nvd_link" ], "properties": { "nvd_link": { "type": "string" }, "severity": { "type": "string" }, "cve_number": { "type": "string" }, "cvss_score": { "type": [ "number", "null" ] }, "description": { "type": [ "string", "null" ] }, "published_date": { "type": "string" }, "affected_versions": { "type": [ "string", "null" ] }, "known_exploited_in_the_wild": { "type": "boolean" } } } } } } ``` ## See more - [NIST API: Get vulnerability by CVE number](https://fous.com/methods/nvd.nist.gov/get-vulnerability.md): Looks up one CVE on the National Vulnerability Database and returns its description, CVSS score and vector, attack conditions, weakness number, affected products, exploitation flag, dates and references. - [Have I Been Pwned API: Search breaches](https://fous.com/methods/haveibeenpwned.com/search-breaches.md): Finds recorded data breaches whose title or website domain matches a company or website name, newest first. - [CPSC API: Search product recalls](https://fous.com/methods/cpsc.gov/search-recalls.md): Finds U.S. consumer product recalls matching a product type or brand, newest first, with hazards, remedies, incidents, sale details and photos when published. - [NHTSA API: Check vehicle recalls](https://fous.com/methods/nhtsa.gov/check-recalls.md): Lists NHTSA safety recalls for a vehicle model, given a model year, make and model or a 17-character VIN. Results cover the model, not whether a specific car has been repaired. - [NIH API: Search grants](https://fous.com/methods/reporter.nih.gov/search-grants.md): Finds NIH research grants by topic, organisation, or researcher name. Searches the last five fiscal years by default. - [FDA API: Search drug recalls](https://fous.com/methods/open.fda.gov/search-drug-recalls.md): Finds FDA drug enforcement recalls by medicine or company name, newest first, with status, class, reason and quantity. Recent recalls may not yet appear. - [USAspending API: Search federal awards](https://fous.com/methods/usaspending.gov/search-federal-awards.md): Searches USAspending federal awards by keywords, awarding agency, state of performance and date across contracts, grants, loans and direct payments. Searches from October 1, 2007 onward. - [FDA API: Search food recalls](https://fous.com/methods/open.fda.gov/search-food-recalls.md): Finds FDA food recall enforcement reports by product, brand, or allergen, newest first. Reports are updated weekly and recall statuses may lag. - [All NIST methods](https://fous.com/methods/nist.gov.md)