Question 1

Where do the CVEs come from?

Accepted Answer

A daily synchronization imports from the NVD API the entire CISA KEV catalog (actively exploited vulnerabilities) and recently published critical and high CVEs. The CISA feed also flags those used by ransomware and the EPSS score is refreshed every day. A missing CVE can be fetched live: type its full identifier.

Question 2

How do I find the vulnerabilities to patch first?

Accepted Answer

Turn on the CISA KEV filter, narrow the publication period if needed and sort by priority or EPSS: the flaws actually exploited, or most likely to be, come first. The Priority tile of each record sums up the decision (act now, prioritize, schedule, monitor) and its reasons.

Question 3

What is the EPSS score?

Accepted Answer

EPSS (Exploit Prediction Scoring System, published by FIRST) estimates the probability that a CVE will be exploited in the next 30 days. It complements CVSS, which measures severity: a flaw scored 9.8 with an EPSS of 0.1% is less urgent than a 7.5 flaw exploited at scale.

Question 4

What does the KEV badge mean?

Accepted Answer

CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog: it is actively exploited and should be patched as a priority. The CISA required action appears in the Remediation tab.

Question 5

Can I run the PoCs found?

Accepted Answer

PoCs are unverified third-party public repositories, sometimes booby-trapped. Only repositories named after the CVE are flagged as dedicated PoCs; lists and scanners that mention it are shown separately. Never run them on a production system: use an isolated test environment disconnected from your network.

Question 6

Can the CVE database be queried via an API?

Accepted Answer

Yes. With a personal API key (cve:read scope, created from the portal), GET /v1/cve/search mirrors the tool's search and filters (severity, CISA KEV, ransomware, PoC, recency) and GET /v1/cve/{id} returns the full record as JSON, fetched live if not yet indexed. Documentation: forenshield.com/en/developers/api.

CVE Database

Results

Select or search for a CVE