kev_search
Search KEV by vendor, product, or keyword
How to use it
Project documentation lists kev_search for the Cve MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.
Install Cve MCP
npx cve-mcpOther tools in Cve MCP (39)
Community assessments from AttackerKB (attacker value, exploitability)
CIRCL CVE enrichment (CAPEC, alt references, impact vectors)
Get CPE matches for a specific CVE
Search NVD CPE dictionary by keyword
Search CVEs by product name (CPE keyword match)
Side-by-side comparison of two CVEs
Full enrichment: NVD + EPSS + KEV + GHSA + OSV + Shodan + Nuclei + MSF in parallel
List all 11 data sources and their availability
Rank CVEs by risk (CVSS × EPSS × KEV × Exploit multiplier)
Map CVE CWE IDs to MITRE ATT&CK techniques and tactics
Currently trending CVEs by exploitation probability
Parse and explain CVSS v3.1 or v4.0 vector string with score calculation
Full CWE details from MITRE API (1000+ CWEs, mitigations, examples)
CWE parent/child hierarchy from MITRE API
Look up CWE weakness by ID or search by keyword (static DB)
MITRE CWE Top 25 Most Dangerous Software Weaknesses
EPSS exploitation probability for one or more CVEs
Top CVEs by exploitation probability
Search for public PoC exploits (GitHub repositories)
Get advisory details by GHSA ID or CVE ID
Search GitHub security advisories by keyword, ecosystem, severity
Check if CVE(s) are in CISA Known Exploited Vulnerabilities catalog
Recently added KEV entries
Check if a Metasploit exploit module exists for a CVE
Check if a Nuclei detection template exists for a CVE
Get full CVE details (CVSS, CWE, CPE, references)
Recently published/modified CVEs
Search CVEs by keyword, severity, CWE, date range
Batch query multiple packages at once
Get vulnerability details by OSV/GHSA/CVE ID
Query vulnerabilities for a specific package version
CVE lookup via Shodan CVEDB (EPSS, KEV, CPE integrated, zero-auth)
Get known vulnerabilities for an IP address (InternetDB)
Find CVEs by product/vendor name via Shodan
CVE search by CPE string
Extended KEV catalog (~80% more entries than CISA)
CVE search by Package URL (purl)
CVE details from Vulners (200+ sources, exploit refs)
Full-text vulnerability search across Vulners database