{
  "_meta": {
    "generated_at": "2026-09-17 21:39:08",
    "tables": [
      "cve_summary",
      "cve_cpe"
    ],
    "total_cves": 394785
  },
  "cve_summary": {
    "schema": {
      "cve_id": {
        "type": "string",
        "description": "CVE identifier, e.g. CVE-2024-12345."
      },
      "published": {
        "type": "timestamp",
        "description": "When the CVE was first published to the NVD (UTC)."
      },
      "last_modified": {
        "type": "timestamp",
        "description": "When the CVE record was last updated in the NVD (UTC)."
      },
      "vuln_status": {
        "type": "string",
        "description": "NVD analysis status, e.g. Analyzed, Awaiting Analysis."
      },
      "is_app": {
        "type": "integer",
        "description": "1 if the CVE affects an application, per its CPE configurations, else 0."
      },
      "is_os": {
        "type": "integer",
        "description": "1 if the CVE affects an operating system, per its CPE configurations, else 0."
      },
      "is_hardware": {
        "type": "integer",
        "description": "1 if the CVE affects hardware, per its CPE configurations, else 0."
      },
      "product": {
        "type": "string",
        "description": "Most commonly referenced affected product in the CVE's CPE matches."
      },
      "cwe": {
        "type": "string",
        "description": "Primary weakness classification (CWE) assigned to the CVE."
      },
      "cvss_version": {
        "type": "string",
        "description": "Version of the CVSS metric used (4.0, 3.1, 3.0 or 2.0), highest available preferred."
      },
      "base_score": {
        "type": "float",
        "description": "CVSS base score for the primary metric (0.0-10.0)."
      },
      "base_severity": {
        "type": "string",
        "description": "CVSS base severity rating, e.g. LOW, MEDIUM, HIGH, CRITICAL."
      },
      "is_remote": {
        "type": "integer",
        "description": "1 if the attack vector is Network (AV:N), else 0."
      },
      "is_adjacent": {
        "type": "integer",
        "description": "1 if the attack vector is Adjacent (AV:A), else 0."
      },
      "is_local": {
        "type": "integer",
        "description": "1 if the attack vector is Local (AV:L), else 0."
      },
      "is_physical": {
        "type": "integer",
        "description": "1 if the attack vector is Physical (AV:P), else 0."
      },
      "requires_auth": {
        "type": "integer",
        "description": "1 if exploitation requires the attacker to be authenticated/have privileges, else 0."
      },
      "requires_user_interaction": {
        "type": "integer",
        "description": "1 if exploitation requires interaction from a user other than the attacker, else 0."
      },
      "ssvc_exploitation": {
        "type": "string",
        "description": "SSVC exploitation state, e.g. none, poc, active."
      },
      "ssvc_automatable": {
        "type": "string",
        "description": "SSVC automatable rating (yes/no) - whether exploitation can be scripted at scale."
      },
      "has_patch_reference": {
        "type": "integer",
        "description": "1 if a reference tagged 'Patch' is available, or the CNA's affected-versions data states a fixed (unaffected) version, else 0."
      },
      "cvss_vector": {
        "type": "string",
        "description": "Full CVSS vector string the metrics above were derived from."
      },
      "epss": {
        "type": "float",
        "description": "EPSS score (0.0-1.0): probability of exploitation in the next 30 days. N/A if no EPSS score exists for this CVE."
      },
      "epss_percentile": {
        "type": "float",
        "description": "Percentile rank of this CVE's EPSS score among all scored CVEs. N/A if no EPSS score exists for this CVE."
      },
      "is_kev": {
        "type": "integer",
        "description": "1 if listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, else 0."
      },
      "kev_date_added": {
        "type": "timestamp",
        "description": "When this CVE was added to the CISA KEV catalog (UTC). N/A if not KEV-listed."
      }
    },
    "files": {
      "csv": [
        "https://cve-db.pages.dev/cve_summary_1999.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2000.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2001.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2002.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2003.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2004.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2005.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2006.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2007.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2008.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2009.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2010.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2011.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2012.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2013.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2014.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2015.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2016.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2017.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2018.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2019.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2020.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2021.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2022.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2023.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2024.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2025.csv.gz",
        "https://cve-db.pages.dev/cve_summary_2026.csv.gz"
      ],
      "parquet": [
        "https://cve-db.pages.dev/cve_summary_1999.parquet",
        "https://cve-db.pages.dev/cve_summary_2000.parquet",
        "https://cve-db.pages.dev/cve_summary_2001.parquet",
        "https://cve-db.pages.dev/cve_summary_2002.parquet",
        "https://cve-db.pages.dev/cve_summary_2003.parquet",
        "https://cve-db.pages.dev/cve_summary_2004.parquet",
        "https://cve-db.pages.dev/cve_summary_2005.parquet",
        "https://cve-db.pages.dev/cve_summary_2006.parquet",
        "https://cve-db.pages.dev/cve_summary_2007.parquet",
        "https://cve-db.pages.dev/cve_summary_2008.parquet",
        "https://cve-db.pages.dev/cve_summary_2009.parquet",
        "https://cve-db.pages.dev/cve_summary_2010.parquet",
        "https://cve-db.pages.dev/cve_summary_2011.parquet",
        "https://cve-db.pages.dev/cve_summary_2012.parquet",
        "https://cve-db.pages.dev/cve_summary_2013.parquet",
        "https://cve-db.pages.dev/cve_summary_2014.parquet",
        "https://cve-db.pages.dev/cve_summary_2015.parquet",
        "https://cve-db.pages.dev/cve_summary_2016.parquet",
        "https://cve-db.pages.dev/cve_summary_2017.parquet",
        "https://cve-db.pages.dev/cve_summary_2018.parquet",
        "https://cve-db.pages.dev/cve_summary_2019.parquet",
        "https://cve-db.pages.dev/cve_summary_2020.parquet",
        "https://cve-db.pages.dev/cve_summary_2021.parquet",
        "https://cve-db.pages.dev/cve_summary_2022.parquet",
        "https://cve-db.pages.dev/cve_summary_2023.parquet",
        "https://cve-db.pages.dev/cve_summary_2024.parquet",
        "https://cve-db.pages.dev/cve_summary_2025.parquet",
        "https://cve-db.pages.dev/cve_summary_2026.parquet"
      ]
    }
  },
  "cve_cpe": {
    "schema": {
      "cve_id": {
        "type": "string",
        "description": "CVE identifier, joins to cve_summary.cve_id."
      },
      "criteria": {
        "type": "string",
        "description": "Full cpe:2.3 URI as it appears in the NVD record."
      },
      "vendor": {
        "type": "string",
        "description": "Parsed from criteria (4th colon-delimited field)."
      },
      "product": {
        "type": "string",
        "description": "Parsed from criteria (5th colon-delimited field)."
      },
      "version": {
        "type": "string",
        "description": "Exact version from criteria, or \"*\" if this match is range-based."
      },
      "version_start_including": {
        "type": "string",
        "description": "From NVD versionStartIncluding, null if absent."
      },
      "version_start_excluding": {
        "type": "string",
        "description": "From NVD versionStartExcluding, null if absent."
      },
      "version_end_including": {
        "type": "string",
        "description": "From NVD versionEndIncluding, null if absent."
      },
      "version_end_excluding": {
        "type": "string",
        "description": "From NVD versionEndExcluding, null if absent."
      },
      "vulnerable": {
        "type": "integer",
        "description": "NVD's own \"vulnerable\" flag on the cpeMatch entry (0 or 1)."
      }
    },
    "files": {
      "csv": [
        "https://cve-db.pages.dev/cve_cpe_1999.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2000.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2001.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2002.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2003.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2004.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2005.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2006.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2007.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2008.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2009.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2010.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2011.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2012.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2013.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2014.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2015.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2016.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2017.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2018.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2019.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2020.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2021.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2022.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2023.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2024.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2025.csv.gz",
        "https://cve-db.pages.dev/cve_cpe_2026.csv.gz"
      ],
      "parquet": [
        "https://cve-db.pages.dev/cve_cpe_1999.parquet",
        "https://cve-db.pages.dev/cve_cpe_2000.parquet",
        "https://cve-db.pages.dev/cve_cpe_2001.parquet",
        "https://cve-db.pages.dev/cve_cpe_2002.parquet",
        "https://cve-db.pages.dev/cve_cpe_2003.parquet",
        "https://cve-db.pages.dev/cve_cpe_2004.parquet",
        "https://cve-db.pages.dev/cve_cpe_2005.parquet",
        "https://cve-db.pages.dev/cve_cpe_2006.parquet",
        "https://cve-db.pages.dev/cve_cpe_2007.parquet",
        "https://cve-db.pages.dev/cve_cpe_2008.parquet",
        "https://cve-db.pages.dev/cve_cpe_2009.parquet",
        "https://cve-db.pages.dev/cve_cpe_2010.parquet",
        "https://cve-db.pages.dev/cve_cpe_2011.parquet",
        "https://cve-db.pages.dev/cve_cpe_2012.parquet",
        "https://cve-db.pages.dev/cve_cpe_2013.parquet",
        "https://cve-db.pages.dev/cve_cpe_2014.parquet",
        "https://cve-db.pages.dev/cve_cpe_2015.parquet",
        "https://cve-db.pages.dev/cve_cpe_2016.parquet",
        "https://cve-db.pages.dev/cve_cpe_2017.parquet",
        "https://cve-db.pages.dev/cve_cpe_2018.parquet",
        "https://cve-db.pages.dev/cve_cpe_2019.parquet",
        "https://cve-db.pages.dev/cve_cpe_2020.parquet",
        "https://cve-db.pages.dev/cve_cpe_2021.parquet",
        "https://cve-db.pages.dev/cve_cpe_2022.parquet",
        "https://cve-db.pages.dev/cve_cpe_2023.parquet",
        "https://cve-db.pages.dev/cve_cpe_2024.parquet",
        "https://cve-db.pages.dev/cve_cpe_2025.parquet",
        "https://cve-db.pages.dev/cve_cpe_2026.parquet"
      ]
    }
  }
}