---
title: "Search"
method: POST
path: "/cve/search"
tags: ["CVEs"]
---

# Search

`POST /cve/search`

Returns a list of CVEs that matched the search query. Allows getting only the first 10,000 results. To get more results please use scroll or download API endpoints. By default, search operations, which return a list of found items, return only the first 25 items. To get a different set of items, you can use the offset and limit parameters in the request body.

## Request body

- SearchCVERequest
  - `limit` integer — The maximum number of items to return per page. Value must be in the range between 1 and 100.
  - `offset` integer — The offset of the item at which to begin the response. Value must be in the range between 1 and 9999.
  - `search_params` object[], required — A list of CVE attributes to filter the search results by. A comprehensive list of valid search parameters is shown in the table below.

## Response `200`

Operation successful

- CVEListResponse — CVEListResponse includes returning data
  - `data` CVEListResponseData
    - `limit` integer — The limit used for this page of results. This will be the same as the `limit` query parameter unless it exceeded the maximum value allowed for this API endpoint.
    - `offset` integer — The offset used for this page of results. The paging is limited to the first 10,000 results for performance. To get more results please use scroll or download API endpoints.
    - `total_items` integer — The number of found matches. The value is limited to 10,000 for performance reasons. To get a precise count number please use the count API endpoint.
    - `items` CVE[]
      - `conditions` Conditions[] — The conditions conductive to the vulnerability exploitation success.
        - `application` string
        - `cpe_prefix` string
        - `hardware` string
        - `operation_system` string
        - `version_end_excluding` string
        - `version_end_excluding_representation` integer
        - `version_end_including` string
        - `version_end_including_representation` integer
        - `version_start_excluding` string
        - `version_start_excluding_representation` integer
        - `version_start_including` string
        - `version_start_including_representation` integer
      - `description` Descriptions — Descriptions is unique and provides the relevant details to help users (1) find the CVE Record for a specific vulnerability, and/or (2) distinguish between similar-looking vulnerabilities.
        - `description_data` DescriptionData[]
          - `lang` string
          - `value` string
      - `id` string — CVE unique identifier.
      - `impact` CVEImpact — The impact the described vulnerability has on the systems CVE examines
        - `baseMetricV2` CVEBaseMetricV2
          - `acInsufInfo` boolean
          - `cvssV2` CVEBaseMetricCVSSV2
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
            - `version` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `severity` string
          - `userInteractionRequired` boolean
        - `baseMetricV3` CVEBaseMetricV3
          - `cvssV3` CVEBaseMetricCVSSV3
            - `attackComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `baseSeverity` string
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
            - `version` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
      - `lastModifiedDate` CVEModifiedDate — CVE modified date
      - `problemtype` ProblemType — The list of common weaknesses (CWE) assigned to the vulnerability
        - `problemtype_data` ProblemTypeData[]
          - `description` DescriptionData[]
            - `lang` string
            - `value` string
      - `publishedDate` CVEPublishedDate — CVE publication date
      - `references` References — Each CVE Record includes appropriate References. Each reference used in CVE (1) identifies the source, (2) includes a well-defined identifier to facilitate searching on a source's website, and (3) notes the associated CVE ID.
        - `reference_data` ReferencesData[]
          - `name` string
          - `refsource` string
          - `tags` string[]
          - `url` string

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `500` — Internal server error

---

[API](https://skmtc.net/spyse/apis/data-api.md) · [All operations](https://skmtc.net/spyse/apis/data-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/spyse/data-api/versions/fd05b83ed2c5/schema)