dead-drop
Security
Ephemeral zero-knowledge encrypted data sharing
No keyCORSHTTPS
CISA Known Exploited Vulnerabilities
CISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due dates
API key
Required
HTTPS
Supported
Browser calls
Unconfirmed
Status
Not yet checked
How to call it
A starting template for CISA Known Exploited Vulnerabilities. Replace ENDPOINT with the path from the official documentation, which we link above rather than guess at.
# Requires an API key. Check the docs for whether it goes in a header or a query parameter.
curl -s "https://rapidapi.com/ENDPOINT" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Accept: application/json"Where this listing comes from
Aggregated from one public source (public-apis), then normalised and checked by us.
Report an issue with this listing ↗Other Security APIs
See all 84 →IPGuardian
Security
Check IP addresses against 140+ public threat intelligence blocklists
No keyCORSHTTPS
Microsoft Security Response Center (MSRC)
Security
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
No keyCORSHTTPS
National Vulnerability Database
Security
U.S. National Vulnerability Database
No keyCORSHTTPS
Presend
Security
Security and developer utility API -- malware, vulnerability, and domain checks, no signup
No keyCORSHTTPS
FishFish
Security
FishFish is an automated service designed to quickly detect and mitigate phishing threats before they can be exploited for malicious purposes. It provides a streamlined solution for identifying harmful resources efficiently.
No keyCORSHTTPS
CISA Known Exploited Vulnerabilities — common questions
Answered from what our own scheduled checks found, not from the provider's marketing.
Is CISA Known Exploited Vulnerabilities free to use?
CISA Known Exploited Vulnerabilities is listed in our free catalogue, but it requires an API key, so you will need to register before your first call. Providers frequently reserve higher limits and commercial use for paid plans.
Does CISA Known Exploited Vulnerabilities need an API key?
Yes. CISA Known Exploited Vulnerabilities authenticates with an API key. Keep it server-side rather than in browser code, because anything in your frontend bundle is readable by anyone who opens developer tools.
Can I call CISA Known Exploited Vulnerabilities from browser JavaScript?
We could not confirm CORS support for CISA Known Exploited Vulnerabilities. Test it from a browser before relying on it client-side; if the request succeeds in curl but fails in the console, CORS is the reason.
Is CISA Known Exploited Vulnerabilities available over HTTPS?
Yes. CISA Known Exploited Vulnerabilities serves over HTTPS, so you can call it from a secure page without triggering a mixed-content block.