Vulnerabilities
Overview
Public vulnerabilities with the two things that decide urgency: whether CISA has seen it exploited, and how likely exploitation is.
- status
- live
- document id
doc_ide.g.CVE-2024-3400- citation
[CVE-2024-3400]
Common calls
Vulnerabilities in a product
POST /v1/cve/search {"query": "palo alto globalprotect rce"}Exploited in the wild, ranked by EPSS
POST /v1/cve/search {"query": "", "filters": {"kev": true, "severity": ["critical","high"]}, "sort": "epss"}Read one
GET /v1/cve/read/CVE-2024-3400Words, not meaning. This domain has no vectors: mode is keyword and a sentence describing what you want will find nothing — give it the terms. Quoted phrases, OR and -exclusions work; Chinese is segmented, and a mixed query is split into both.
The fine print
- NVD data is used under its terms: any display must carry the not-endorsed notice (see the attribution field).
- kev=true means CISA confirmed exploitation in the wild; epss is FIRST's probability estimate — different things.
- severity is derived from cvss_score; the 3,347 CVEs without a score have neither.
- Rank by exploitation risk with sort=epss, by time with sort=date.
- vuln_class / attacker_needs / impact / one_liner* are model-written — fine as a summary, not as a quote; the original text is description, in level=detail.
- Model-written fields (summarise, do not quote): affected, attacker_needs, impact, one_liner, one_liner_zh, vuln_class.
- The field table and enumerations are generated from the store's own self-description (search.field), not hand-written; enumeration counts are as of 2026-10-13.
Search
POST
/v1/cve/searchHybrid retrieval, one card per hit. 2 credits. Free sample:
log4j.Filter fields
| field | type · ops | meaning |
|---|---|---|
| cvss_score | number · range | CVSS score, range |
| epss | number · range | EPSS 30-day exploitation probability (0–1), range |
| kev | bool · eq | Listed in CISA KEV (known exploited in the wild) |
| published | datetime · range | Publication date range |
| severity | keyword · eq anymedium · high · critical · low | CVSS severity (derived from the score) |
| vuln_class | keyword · eq anyxss · remote_code_execution · denial_of_service · information_disclosure · injection · memory_corruption … 17 values, /facets lists them all | Vulnerability class (closed set of 17, model-assigned) |
3 more, all usable
| field | type · ops | meaning |
|---|---|---|
| affected | text · text | Affected product (fuzzy match, e.g. globalprotect) |
| cwe | keyword · eq any | CWE id |
| kev_added | datetime · range | Date added to KEV, range |
Parameters
| Parameter | Type | Description |
|---|---|---|
| query REQUIRED | string | 1–1000 characters. Or an array of up to 5 (batch; hits become results[]). |
| top_k | integer= 10 | 1–200. |
| fields | brief · head= brief | head costs one more credit and returns the head view per hit. |
| filters | json | Filter DSL object (see Getting started); declared fields are listed above. |
| mode | keyword= keyword | This domain has one mode — keyword matching, not semantics. |
| sort | relevance · date · epss · kev_added · published= relevance | Order of the hits. epss puts the likeliest to be exploited first. |
| offset | integer= 0 | Pagination. |
Example
{ "domain": "cve", "query": "…", "hits": [ { "id": "CVE-2024-3400", "score": 0.83, "brief": { … } } ], "total": null, "coverage": …, "warnings": [],
"meta": { "request_id": "req_…", "credits": { "charged": 2, "balance": 1998, "pool": "allowance" }, "latency_ms": 41, "cached": false } } Undeclared filter fields return 400 rather than being ignored silently. Filters combine with AND;
_or / _not are available.Read
GET
/v1/cve/read/{doc_id}Three depths.
detail is the default. Free sample: CVE-2024-3400.Levels
| level | credits | returns |
|---|---|---|
| brief | 1 | Card: affected, cvss_score, doc_id, epss, kev, one_liner, one_liner_zh, published… |
| detail (default) | 2 | Every structured field (card plus the source abstract and detail fields) |
Parameters
| Parameter | Type | Description |
|---|---|---|
| doc_id (path) REQUIRED | string | Document id (doc_id). |
| level | brief · detail= detail | How deep to read. |
| format | json · md · html= json | Response shape. |
Example
{ "domain": "cve", "id": "CVE-2024-3400", "level": "detail", "view": "detail", "data": { … } | "text": "…", "token_count": 1834, "meta": { … } } The older
GET /v1/cve/doc/{id}?view=… still works.Read many
POST
/v1/cve/readUp to 50 ids, one level. Missing ids come back with
error: "not_found" and are not charged.Parameters
| Parameter | Type | Description |
|---|---|---|
| ids REQUIRED | string[] | Document ids. |
| level | brief · detail= detail | Level for every id. |
Example
{ "domain": "cve", "level": "detail", "docs": [ { "id": "…", "data": { … } }, { "id": "…", "error": "not_found" } ], "meta": { … } } Facets
GET
/v1/cve/facets?field={field}Legal values for a filter field, so an agent never guesses; precomputed fields carry counts, declared enums come without. Free, no key.
Parameters
| Parameter | Type | Description |
|---|---|---|
| field REQUIRED | severity · vuln_class | Filter field with facets. |
| limit | integer= 50 | Max values. |
Example
{ "domain": "cve", "field": "…", "values": [ { "value": "…", "count": 3120 } ], "meta": { … } } Askregistered key+ /stream
POST
/v1/cve/askAgentic Q&A over this domain: with no vector layer, the model turns the question into structured filters plus bilingual full-text search, reads the hits and answers with [cve: ] citations; /stream is NDJSON with real token deltas. <code>effort</code> low / medium / high = 50 / 100 / 200 credits. Append <code>/stream</code> for NDJSON; the first event is always <code>billing</code>. A failure before the first <code>answer_delta</code> is refunded.</div> <h4>Parameters</h4> <div class="tblwrap"><table class="tbl t3 tparam"> <thead><tr><th>Parameter</th><th>Type</th><th>Description</th></tr></thead> <tbody> <tr> <td>query<span class="req"> REQUIRED</span></td> <td class="ty">string</td> <td>1–2000 characters. Be specific; ask for numbers if you want numbers.</td> </tr><tr> <td>effort</td> <td class="ty">low · medium · high<span class="def">= low</span></td> <td>Reading rounds, and the price: 50 / 100 / 200 credits. Your plan caps it.</td> </tr><tr> <td>verbose</td> <td class="ty">bool<span class="def">= false</span></td> <td>Include the tool-call trace (tool_call / tool_result / thinking events when streaming).</td> </tr><tr> <td>top_k</td> <td class="ty">integer<span class="def">= 10</span></td> <td>Speculative prefetch size.</td> </tr><tr> <td>stream_answer</td> <td class="ty">bool<span class="def">= true</span></td> <td>Streaming only: false emits one answer event instead of deltas.</td> </tr><tr> <td>max_rounds</td> <td class="ty">integer</td> <td>0–8, overrides the effort preset.</td> </tr><tr> <td>force_answer_after</td> <td class="ty">number</td> <td>Seconds; hard cutover into the answer phase.</td> </tr><tr> <td>max_answer_tokens</td> <td class="ty">integer<span class="def">= 4096</span></td> <td>Hitting it sets answer_truncated.</td> </tr><tr> <td>language</td> <td class="ty">string</td> <td>Answer language; defaults to the query’s.</td> </tr> </tbody> </table></div> <h4>Example</h4> <pre class="code">{ "answer": "… [CVE-2024-3400] …", "sources": [ … ], "stats": { "rounds": 1, "elapsed_s": 6.2, "answer_truncated": false }, "coverage"?: { … }, "meta": { "credits": { "charged": 50, … } } }</pre> <div class="callout "><b>Citations are real</b> — every id in <code>answer</code> exists in this domain (format <code>[CVE-2024-3400]</code>). <b><code>sources</code> is the retrieval set</b>, not the citation list. <b><code>answer_truncated</code> means incomplete.</b></div> </section> </div> </div> <aside class="pg" data-playground> <div class="pg-handle" data-pg-handle></div> <div class="pg-head"><b>Playground</b><span class="hint">Follows the section you are reading</span><button class="icon-btn" data-pg-close type="button" aria-label="Close">✕</button></div> <div class="pg-body" data-pg-body></div> <script type="application/json" data-pg-specs>[{"id":"cve-search","domain":"cve","method":"POST","path":"/v1/cve/search","auth":"optional","status":"live","title":{"en":"Search","zh":"检索"},"summary":{"en":"Hybrid retrieval, one card per hit. 2 credits. Free sample: <code>log4j</code>.<h4 class=\"sub\">Filter fields</h4><div class=\"tblwrap\"><table class=\"tbl t3\"><thead><tr><th>field</th><th>type · ops</th><th>meaning</th></tr></thead><tbody><tr><td class=\"mono\">cvss_score</td><td class=\"mono dim\">number · range</td><td>CVSS score, range</td></tr><tr><td class=\"mono\">epss</td><td class=\"mono dim\">number · range</td><td>EPSS 30-day exploitation probability (0–1), range</td></tr><tr><td class=\"mono\">kev</td><td class=\"mono dim\">bool · eq</td><td>Listed in CISA KEV (known exploited in the wild)</td></tr><tr><td class=\"mono\">published</td><td class=\"mono dim\">datetime · range</td><td>Publication date range</td></tr><tr><td class=\"mono\">severity</td><td class=\"mono dim\">keyword · eq any<span class=\"vals\">medium · high · critical · low</span></td><td>CVSS severity (derived from the score)</td></tr><tr><td class=\"mono\">vuln_class</td><td class=\"mono dim\">keyword · eq any<span class=\"vals\">xss · remote_code_execution · denial_of_service · information_disclosure · injection · memory_corruption <span class=\"dim\">… 17 values, /facets lists them all</span></span></td><td>Vulnerability class (closed set of 17, model-assigned)</td></tr></tbody></table></div><details class=\"adv\"><summary>3 more, all usable</summary><div class=\"tblwrap\"><table class=\"tbl t3\"><thead><tr><th>field</th><th>type · ops</th><th>meaning</th></tr></thead><tbody><tr><td class=\"mono\">affected</td><td class=\"mono dim\">text · text</td><td>Affected product (fuzzy match, e.g. globalprotect)</td></tr><tr><td class=\"mono\">cwe</td><td class=\"mono dim\">keyword · eq any</td><td>CWE id</td></tr><tr><td class=\"mono\">kev_added</td><td class=\"mono dim\">datetime · range</td><td>Date added to KEV, range</td></tr></tbody></table></div></details>","zh":"混合检索，每条命中一张卡片。2 credits。免费样例：<code>log4j</code>。<h4 class=\"sub\">过滤字段</h4><div class=\"tblwrap\"><table class=\"tbl t3\"><thead><tr><th>字段</th><th>类型 · op</th><th>含义</th></tr></thead><tbody><tr><td class=\"mono\">cvss_score</td><td class=\"mono dim\">number · range</td><td>CVSS 分数区间</td></tr><tr><td class=\"mono\">epss</td><td class=\"mono dim\">number · range</td><td>EPSS 30 天利用概率区间（0–1）</td></tr><tr><td class=\"mono\">kev</td><td class=\"mono dim\">bool · eq</td><td>是否在 CISA KEV（已知被在野利用）</td></tr><tr><td class=\"mono\">published</td><td class=\"mono dim\">datetime · range</td><td>发布日期区间</td></tr><tr><td class=\"mono\">severity</td><td class=\"mono dim\">keyword · eq any<span class=\"vals\">medium · high · critical · low</span></td><td>CVSS 等级（由分数推出）</td></tr><tr><td class=\"mono\">vuln_class</td><td class=\"mono dim\">keyword · eq any<span class=\"vals\">xss · remote_code_execution · denial_of_service · information_disclosure · injection · memory_corruption <span class=\"dim\">…共 17 个，/facets 可列全</span></span></td><td>漏洞类别（闭集 17 类，模型判定）</td></tr></tbody></table></div><details class=\"adv\"><summary>还有 3 个，照样能用</summary><div class=\"tblwrap\"><table class=\"tbl t3\"><thead><tr><th>字段</th><th>类型 · op</th><th>含义</th></tr></thead><tbody><tr><td class=\"mono\">affected</td><td class=\"mono dim\">text · text</td><td>受影响产品（模糊匹配，如 globalprotect）</td></tr><tr><td class=\"mono\">cwe</td><td class=\"mono dim\">keyword · eq any</td><td>CWE 编号</td></tr><tr><td class=\"mono\">kev_added</td><td class=\"mono dim\">datetime · range</td><td>进入 KEV 的日期区间</td></tr></tbody></table></div></details>"},"params":[{"name":"query","type":"string","required":true,"in":"body","example":"log4j","desc":{"en":"1–1000 characters. Or an array of up to 5 (batch; hits become results[]).","zh":"1–1000 字符。也可以是最多 5 条的数组（批量，hits 变 results[]）。"}},{"name":"top_k","type":"integer","default":"10","in":"body","desc":{"en":"1–200.","zh":"1–200。"}},{"name":"fields","type":"enum","options":["brief","head"],"default":"brief","in":"body","desc":{"en":"head costs one more credit and returns the head view per hit.","zh":"head 多扣 1 credit，每条附 head 视图。"}},{"name":"filters","type":"json","in":"body","example":"","desc":{"en":"Filter DSL object (see Getting started); declared fields are listed above.","zh":"过滤 DSL 对象（见快速开始）；可用字段见上表。"}},{"name":"mode","type":"enum","options":["keyword"],"default":"keyword","in":"body","advanced":true,"desc":{"en":"This domain has one mode — keyword matching, not semantics.","zh":"这个域只有一种模式——词面匹配，不是语义检索。"}},{"name":"sort","type":"enum","options":["relevance","date","epss","kev_added","published"],"default":"relevance","in":"body","desc":{"en":"Order of the hits. <code>epss</code> puts the likeliest to be exploited first.","zh":"结果排序。<code>epss</code> 把最可能被利用的排在前面。"}},{"name":"offset","type":"integer","default":"0","in":"body","advanced":true,"desc":{"en":"Pagination.","zh":"翻页。"}}],"example":"{ \"domain\": \"cve\", \"query\": \"…\", \"hits\": [ { \"id\": \"CVE-2024-3400\", \"score\": 0.83, \"brief\": { … } } ], \"total\": null, \"coverage\": …, \"warnings\": [],\n \"meta\": { \"request_id\": \"req_…\", \"credits\": { \"charged\": 2, \"balance\": 1998, \"pool\": \"allowance\" }, \"latency_ms\": 41, \"cached\": false } }","notes":[{"html":{"en":"<b>Undeclared filter fields return 400</b> rather than being ignored silently. Filters combine with AND; <code>_or</code> / <code>_not</code> are available.","zh":"<b>用了未声明的过滤字段返回 400</b>，不会静默忽略。过滤条件是 AND；可用 <code>_or</code> / <code>_not</code>。"}}]},{"id":"cve-read","domain":"cve","method":"GET","path":"/v1/cve/read/{doc_id}","auth":"optional","status":"live","title":{"en":"Read","zh":"读"},"summary":{"en":"Three depths. <code>detail</code> is the default. Free sample: <code>CVE-2024-3400</code>.<h4 class=\"sub\">Levels</h4><div class=\"tblwrap\"><table class=\"tbl t3 tnum\"><thead><tr><th>level</th><th>credits</th><th>returns</th></tr></thead><tbody><tr><td class=\"mono\">brief</td><td class=\"mono num\">1</td><td>Card: affected, cvss_score, doc_id, epss, kev, one_liner, one_liner_zh, published…</td></tr><tr><td class=\"mono\">detail <span class=\"dim\">(default)</span></td><td class=\"mono num\">2</td><td>Every structured field (card plus the source abstract and detail fields)</td></tr></tbody></table></div>","zh":"三档深浅，不传就是 <code>detail</code>。免费样例：<code>CVE-2024-3400</code>。<h4 class=\"sub\">三档</h4><div class=\"tblwrap\"><table class=\"tbl t3 tnum\"><thead><tr><th>深浅</th><th>credits</th><th>返回</th></tr></thead><tbody><tr><td class=\"mono\">brief</td><td class=\"mono num\">1</td><td>卡片：affected、cvss_score、doc_id、epss、kev、one_liner、one_liner_zh、published…</td></tr><tr><td class=\"mono\">detail <span class=\"dim\">（默认）</span></td><td class=\"mono num\">2</td><td>全部结构化字段（卡片 + 原文摘要 / 明细字段）</td></tr></tbody></table></div>"},"params":[{"name":"doc_id","type":"string","required":true,"in":"path","example":"CVE-2024-3400","desc":{"en":"Document id (doc_id).","zh":"文档 id（doc_id）。"}},{"name":"level","type":"enum","options":["brief","detail"],"default":"detail","desc":{"en":"How deep to read.","zh":"读多深。"}},{"name":"format","type":"enum","options":["json","md","html"],"default":"json","desc":{"en":"Response shape.","zh":"响应形态。"}}],"example":"{ \"domain\": \"cve\", \"id\": \"CVE-2024-3400\", \"level\": \"detail\", \"view\": \"detail\", \"data\": { … } | \"text\": \"…\", \"token_count\": 1834, \"meta\": { … } }","notes":[{"html":{"en":"The older <code>GET /v1/cve/doc/{id}?view=…</code> still works.","zh":"旧写法 <code>GET /v1/cve/doc/{id}?view=…</code> 仍然可用。"}}]},{"id":"cve-read-batch","domain":"cve","method":"POST","path":"/v1/cve/read","auth":"token","status":"live","title":{"en":"Read many","zh":"批量读"},"summary":{"en":"Up to 50 ids, one level. Missing ids come back with <code>error: \"not_found\"</code> and are not charged.","zh":"最多 50 个 id，同一档。查不到的 id 返回 <code>error: \"not_found\"</code>，不扣费。"},"params":[{"name":"ids","type":"array","list":true,"required":true,"in":"body","example":"CVE-2024-3400","desc":{"en":"Document ids.","zh":"文档 id 列表。"}},{"name":"level","type":"enum","options":["brief","detail"],"default":"detail","in":"body","desc":{"en":"Level for every id.","zh":"所有 id 共用的档。"}}],"example":"{ \"domain\": \"cve\", \"level\": \"detail\", \"docs\": [ { \"id\": \"…\", \"data\": { … } }, { \"id\": \"…\", \"error\": \"not_found\" } ], \"meta\": { … } }"},{"id":"cve-facets","domain":"cve","method":"GET","path":"/v1/cve/facets","auth":"none","status":"live","title":{"en":"Facets","zh":"Facets"},"summary":{"en":"Legal values for a filter field, so an agent never guesses; precomputed fields carry counts, declared enums come without. Free, no key.","zh":"某个过滤字段的合法值，agent 不用猜；预聚合字段带计数，声明的枚举没有。免费、不需要 key。"},"params":[{"name":"field","type":"enum","options":["severity","vuln_class"],"required":true,"example":"severity","desc":{"en":"Filter field with facets.","zh":"有 facets 的过滤字段。"}},{"name":"limit","type":"integer","default":"50","advanced":true,"desc":{"en":"Max values.","zh":"最多返回多少个值。"}}],"example":"{ \"domain\": \"cve\", \"field\": \"…\", \"values\": [ { \"value\": \"…\", \"count\": 3120 } ], \"meta\": { … } }"},{"id":"cve-ask","domain":"cve","method":"POST","path":"/v1/cve/ask","auth":"registered","status":"live","stream":true,"agentic":true,"title":{"en":"Ask","zh":"问"},"summary":{"en":"Agentic Q&A over this domain: with no vector layer, the model turns the question into structured filters plus bilingual full-text search, reads the hits and answers with [cve:<doc_id> <title>] citations; /stream is NDJSON with real token deltas. <code>effort</code> low / medium / high = 50 / 100 / 200 credits. Append <code>/stream</code> for NDJSON; the first event is always <code>billing</code>. A failure before the first <code>answer_delta</code> is refunded.","zh":"本域的 agentic 问答：没有向量层，模型把问题翻成结构化筛选 + 中英分词全文检索，读详情后作答，引用写成 [cve:<doc_id> <标题>]；/stream 为 NDJSON，answer_delta 是边生成边发的真实片段。<code>effort</code> low / medium / high 对应 50 / 100 / 200 credits。加 <code>/stream</code> 走 NDJSON，第一个事件一定是 <code>billing</code>。首个 <code>answer_delta</code> 之前失败会退款。"},"params":[{"name":"query","type":"string","required":true,"in":"body","example":"log4j","desc":{"en":"1–2000 characters. Be specific; ask for numbers if you want numbers.","zh":"1–2000 字符。问得具体；要数字就直接问数字。"}},{"name":"effort","type":"enum","options":["low","medium","high"],"default":"low","in":"body","desc":{"en":"Reading rounds, and the price: 50 / 100 / 200 credits. Your plan caps it.","zh":"检索轮数，也决定价格：50 / 100 / 200 credits。套餐限制最高档。"}},{"name":"verbose","type":"bool","default":"false","in":"body","desc":{"en":"Include the tool-call trace (tool_call / tool_result / thinking events when streaming).","zh":"返回工具调用轨迹（流式时多 tool_call / tool_result / thinking 事件）。"}},{"name":"top_k","type":"integer","default":"10","in":"body","advanced":true,"desc":{"en":"Speculative prefetch size.","zh":"预取候选数。"}},{"name":"stream_answer","type":"bool","default":"true","in":"body","advanced":true,"desc":{"en":"Streaming only: false emits one answer event instead of deltas.","zh":"仅流式：false 时只发一个 answer 事件。"}},{"name":"max_rounds","type":"integer","in":"body","advanced":true,"desc":{"en":"0–8, overrides the effort preset.","zh":"0–8，覆盖 effort 预设。"}},{"name":"force_answer_after","type":"number","in":"body","advanced":true,"desc":{"en":"Seconds; hard cutover into the answer phase.","zh":"秒；强制切入作答阶段。"}},{"name":"max_answer_tokens","type":"integer","default":"4096","in":"body","advanced":true,"desc":{"en":"Hitting it sets answer_truncated.","zh":"触顶时置 answer_truncated。"}},{"name":"language","type":"string","in":"body","advanced":true,"desc":{"en":"Answer language; defaults to the query’s.","zh":"回答语言，默认跟随 query。"}}],"example":"{ \"answer\": \"… [CVE-2024-3400] …\", \"sources\": [ … ], \"stats\": { \"rounds\": 1, \"elapsed_s\": 6.2, \"answer_truncated\": false }, \"coverage\"?: { … }, \"meta\": { \"credits\": { \"charged\": 50, … } } }","notes":[{"html":{"en":"<b>Citations are real</b> — every id in <code>answer</code> exists in this domain (format <code>[CVE-2024-3400]</code>). <b><code>sources</code> is the retrieval set</b>, not the citation list. <b><code>answer_truncated</code> means incomplete.</b>","zh":"<b>引用是真的</b>——<code>answer</code> 里的每个 id 都存在于本垂域（格式 <code>[CVE-2024-3400]</code>）。<b><code>sources</code> 是召回集</b>，不是引用列表。<b><code>answer_truncated</code> 表示不完整。</b>"}}]}]</script> <script type="application/json" data-pg-strings>{"title":"Playground","hint":"Follows the section you are reading","token":"API token","tokenHint":"fa_live_… key · optional for free samples · stored in this browser only","tokenReq":"API key required (fa_live_…)","send":"Send request","stream":"Stream","response":"Response","events":"Events","answer":"Answer","sources":"Sources","cited":"cited","retrieved":"retrieved","stats":"Stats","coming":"This domain is still building. The request shape is final; sending is disabled until it is live.","open":"Playground","close":"Close","tokens":"tokens","chars":"characters","truncated":"answer truncated","code":"Code","openTab":"Open in a new tab","report":"This one is wrong — report it","quotaHit":"Daily quota used up ({used} / {limit}, resets {reset}). It is a quota, not a rate limit, so retrying will not help: write to {mail} about {grant}.","rateHit":"Over your rpm. Retry in {n} s.","lang":"en","apiBase":"https://api.1stauthor.com","codeBase":"https://api.1stauthor.com","keys":"/dashboard/keys/","fb":"/feedback/","contact":"tommy@chien.io"}</script> </aside> <button class="btn btn-primary pg-fab" data-pg-open type="button">Playground</button> <script type="module" src="/_astro/DocsShell.astro_astro_type_script_index_0_lang.cOZozF12.js"></script> </main> <script type="module" src="/_astro/Base.astro_astro_type_script_index_0_lang.B9qjIrvh.js"></script> </body> </html>