Vulnerability databases - mozilla/mozilla-depends GitHub Wiki

VulDB

  • https://vuldb.com/?doc.api
  • Looks complete
  • Great API, great search results, great stats
  • Search is limited to 50 "credits" per day. One credit is consumed per search, and per result field. At that rate, we'd require about 2000 credits per initial scan run, and around 500 credits per update run given an efficient stateful incremental caching logic (tons of work).
  • Paid plans start at 200$ per month, giving us 200 credit per day, rendering the service unusable for our intended purposes. https://vuldb.com/?pay

Circl.lu

  • https://cve.circl.lu/api/
  • CVE database with REST API and JSON responses
  • Looks fairly complete
  • Search is limited to vendor and product. You can't search for CVEs affecting a specific version.