cvequery 1.0.7

CVE research CLI — query Shodan's CVE database with advanced filtering and export.

CVEQuery

Powerfull CVE research tool for security researchers and bug bounty hunters. Query Shodan's CVE database with advanced filtering and export capabilities.

Quick Start

# Install
pipx install cvequery

# Single CVE lookup
cvequery -c CVE-2021-44228

# Product vulnerability search
cvequery --product-cve nginx --severity critical

# KEV (Known Exploited Vulnerabilities) only
cvequery --is-kev --limit-cves 10

Core Commands

CVE Lookup

# Single CVE
cvequery -c CVE-2021-44228

# Multiple CVEs (parallel processing)
cvequery -mc "CVE-2021-44228,CVE-2023-44487"

# Detailed view (no truncation)
cvequery -c CVE-2021-44228 -d

Product Research

# Find vulnerabilities in specific products
cvequery --product-cve nginx
cvequery --product-cve "windows_10" -lcv 10

## Find Find vulnerabilities in windows builds
cvequery --product-cve "windows_11_25h2" -s high

# Filter by severity
cvequery --product-cve django --severity critical,high

Advanced Filtering

# KEV vulnerabilities only
cvequery --is-kev --limit-cves 20

# Date range filtering
cvequery --product-cve log4j --start-date 2021-01-01 --end-date 2021-12-31

# Sort by exploitation probability
cvequery --product-cve nginx --sort-by-epss

Output Formats

Display Options

# Compact format (one line per CVE)
cvequery --product-cve apache --format compact

# Summary format (statistical analysis)
cvequery --product-cve apache --format summary

# Custom fields only
cvequery -c CVE-2021-44228 --fields cve_id,cvss,epss,kev

# Exclude specific fields
cvequery -c CVE-2021-44228 --fields-exclude summary,references

Export Formats

# JSON for automation
cvequery --product-cve nginx --json results.json

# CSV for analysis
cvequery --is-kev --csv kev_report.csv

# STIX for threat intelligence
cvequery -c CVE-2021-44228 --stix intel.json

Installation

# Recommended
pipx install cvequery

# Alternative
pip install cvequery

Key Features

• KEV Integration - Focus on actively exploited vulnerabilities
• EPSS Scoring - Exploitation probability assessment
• Parallel Processing - Fast multiple CVE lookups
• Rich Filtering - Severity, date range, product-based
• Export Options - JSON, CSV, YAML, XML, STIX 2.1
• Field Customization - Show/hide specific data fields

Documentation

• Installation Guide
• Usage Guide

Contributing

Take a look at the Contributing Page.

📬 Contact

License

MIT License