CVE Lookup
Look up any CVE in the US National Vulnerability Database (NVD): CVSS 3.1 score and severity vector, weakness (CWE) classification, human summary and references. The authoritative answer when an agent needs to know how bad a vulnerability actually is.
🔌 Server-side tool
This tool runs on the server (it fetches third-party URLs directly and cannot run in your browser). Use the paid JSON API below — the worked examples show real server-side results and refresh automatically.
Worked examples
Log4Shell
GET /api/v1/security/cve-lookup?cveId=CVE-2021-44228
Result: CVE-2021-44228 — 10.0 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Heartbleed
GET /api/v1/security/cve-lookup?cveId=CVE-2014-0160
Result: CVE-2014-0160 — 7.5 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
A recent one
GET /api/v1/security/cve-lookup?cveId=CVE-2024-3094
Result: CVE-2024-3094 — 10.0 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Machine API (x402)
$0.005 / callThis tool is also a JSON API for AI agents. Requests without payment receive 402 Payment Required plus instructions; agents pay USDC on Base via the x402 protocol — no accounts, no API keys.
GET /api/v1/security/cve-lookup?cveId=CVE-2021-44228 HTTP/1.1
Host: agentstoolshub.com
→ 402 (payment required, instructions in headers)
→ 200 (after X-PAYMENT header; JSON body below)
{
"tool": "security/cve-lookup",
"input": {"cveId":"CVE-2021-44228"},
"result": { "value": 10, "answer": "CVE-2021-44228 — 10.0 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)" }
}Agent docs: /llms.txt · OpenAPI spec · integration guide
About this tool
CVE details straight from the NVD 2.0 API: CVSS 3.1 base score, severity band, vector string, CWE weakness type, plain-English description and primary references. Cached an hour and keyless — the fast deterministic way to triage a vulnerability mention.
Frequently asked questions
Why might a CVE show no score?
Reserved or recently published CVEs often have no NVD analysis yet (no CVSS). The record exists but scoring is added by NVD analysts — the tool reports exactly what NVD has.
Which CVSS version is shown?
The best available: 3.1, then 3.0, then 2.0 — the same precedence NVD uses. The vector string is included so you can recompute or compare.