CVE Intel Feed pulls vulnerability data from authoritative public sources, normalizes it for fast search, and presents severity, exploit signals, and CISA KEV status in a feed designed for security teams and curious defenders.
We aggregate openly available intelligence — we do not generate CVE records ourselves.
CVE records, CVSS scores, affected products, references, and publication dates come from the NVD, maintained by the U.S. National Institute of Standards and Technology. This site syncs regularly with the NVD API to keep the feed current.
nvd.nist.govExploit Prediction Scoring System (EPSS) estimates the probability a vulnerability will be exploited in the wild. Scores and percentiles are provided by FIRST.org and updated daily to help prioritize patching alongside CVSS severity.
first.org/epssWhen a CVE appears on the CISA KEV catalog, it is flagged here as actively exploited in the wild. KEV status is sourced from CISA’s catalog and surfaced alongside NVD severity and EPSS scores.
CISA KEV catalogThis project was created by Chris Spencer as a practical, public-facing way to explore CVE activity without wading through raw NVD exports. It is an independent tool — not affiliated with NIST, FIRST.org, or CISA.
Questions, feedback, or ideas? Reach out via perimeter-check.com.