cveDB

cveDB keeps the vulnerability data you look up every day close at hand. On the Mac, cveDB builds and maintains a local copy of the NVD CVE catalog (about 400,000 records), the CISA Known Exploited Vulnerabilities list and FIRST EPSS exploit-prediction scores. A built-in sync engine refreshes them in the background from the official public feeds. Everything is stored in one SQLite database inside the app's container, so searches answer instantly and work with no network at all. Browse the database by what matters: actively exploited (KEV) entries with their remediation due dates, critical and high CVSS scores, the most likely to be exploited by EPSS percentile, and what changed recently. Full-text search covers identifiers, descriptions, products and vendors. Every record shows its CVSS v2, v3.1 and v4.0 metrics and vectors, CWE weaknesses, affected products (CPE) and references, and opens the NVD or vendor page in one click. Save the searches you repeat. A menu bar panel keeps the newest exploited and critical entries one click away. cveDB is built for people who automate: the same database is readable by your own scripts, and the app includes a Model Context Protocol (MCP) server and a local HTTP API so AI agents and tools on your Mac can ask it questions directly. The Agent access pane shows exactly how to connect. On iPhone and iPad, cveDB is a lookup tool. Search any CVE identifier or keyword and the app queries the official NVD API 2.0, CISA KEV catalog and FIRST EPSS API directly from your device, then shows the same severity, exploitation and scoring detail as the Mac. Browse the current KEV list, critical entries, recent publications and the top EPSS scores. Add your own NVD API key in Settings for a higher request rate (it stays in your Keychain). Privacy: cveDB has no account, no analytics and no tracking. The Mac app talks only to the public NVD, CISA and FIRST feeds. The iOS app talks only to those same feeds. Nothing about your searches leaves your device. Data sources: National Vulnerability Database (NIST), CISA Known Exploited Vulnerabilities Catalog, FIRST Exploit Prediction Scoring System. cveDB is not affiliated with NIST, CISA or FIRST.