Feed syndication

Vulnerability-Lookup can generate sightings from both RSS and Atom feeds, while also providing extensive support for these feed formats.

Available feeds

Endpoint	Description
`/known-exploited-vulnerabilities.<string:format>`	Most recent entries from Known Exploited Vulnerabilities.
`/recent/<string:source>.<string:format>[?vulnerability=<vuln-id>][?vendor=<vendor-id>]`	Recent vulnerabilities per source or for all sources.
`/bundles/feed.<string:format>[?user=<login>]`	Recent bundles.
`/comments/feed.<string:format>[?user=<login>]`	Recent comments.
`/user/<string:login>.<string:format>`	Recent user activity.
`/sightings/feed.<string:format>[?vulnerability=<vulnerability-id>]`	Recent sightings.
`/sightings/cpesearch/<string:cpe>/feed.<string:format>`	Recent sightings for all vulnerabilities related to a CPE.

The value of format can be one of the following:

["rss", "atom"]

The value of source can be one of the following:

["all", "github", "cvelistv5", "nvd", "fkie_nvd", "pysec", "gsd", "ossf_malicious_packages", "csaf_certbund", "csaf_siemens", "csaf_redhat", "csaf_cisa", "csaf_cisco", "csaf_sick", "csaf_nozominetworks", "csaf_ox", "jvndb", "tailscale", "variot"]

Examples

Most recent entries from Known Exploited Vulnerabilities

curl https://vulnerability.circl.lu/known-exploited-vulnerabilities.rss

curl https://vulnerability.circl.lu/known-exploited-vulnerabilities.rss?per_page=10&page=3

Recent vulnerabilities from all sources

curl https://vulnerability.circl.lu/recent/all.atom

Recent vulnerabilities from pysec

curl https://vulnerability.circl.lu/recent/pysec.atom

Recent vulnerabilities related to a vendor

curl 'https://vulnerability.circl.lu/recent/cvelistv5.atom?vendor=MISP&per_page=2&page=8'

Recent vulnerabilities linked to a vulnerability

curl 'https://vulnerability.circl.lu/recent/all.atom?vulnerability=cve-2021-22280'

Subscribing to the activity related to a vulnerability

The request will return recent observations (sightings) related to a vuln.

curl 'https://vulnerability.circl.lu/sightings/feed.atom?vulnerability=CVE-2024-0012'

Recent sightings related to a product

curl 'https://vulnerability.circl.lu/sightings/cpesearch/cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*/feed.atom'

This will return recent sightings related to recent CVEs for the specified product (identified by its CPE identifier). Sightings are based on information from various trusted sources, including security websites, Exploit-DB.com, GitHub repositories, security blogs, social networks, and MISP.