Exploit Observer

Yes. Exploit Observer is free and anonymous — no account and no API key required, rate-limited to 2 requests per minute per IP. An API key raises the limit. The data is identical either way; the key changes throughput, not content.

NVD returns one record for one CVE. Exploit Observer returns the whole cluster: the CVE, its GHSA advisory, vendor bulletins, national-registry entries such as CNNVD or BDU, and any public exploit or proof-of-concept code — resolved to a single VEDAS identifier, in one request.

You can also query by cpe:2.3: URI, pkg: purl or free text, not just by identifier.

A cluster id. One real-world vulnerability usually collects many identifiers across registries — a CVE number, a GHSA advisory, an Exploit-DB entry, a CNNVD record. VEDAS groups all of them under one id so you can look up any single alias and get the complete picture, including an exploit maturity score for the cluster.

It indexes and links public exploit material — Exploit-DB entries, Metasploit modules, GitHub proof-of-concept repositories, Packet Storm and security-research write-ups. Results are references to already-public material, grouped by cluster.

Yes. The API accepts cpe:2.3: URIs and pkg: purls, which is what dependency and inventory tooling already produces. The puncia CLI wraps it for scripting, and the API documentation covers direct HTTP access.

Continuously updated as sources publish. Because clustering spans many registries, a vulnerability often appears via a national database or a public proof-of-concept before a corresponding CVE record is fully populated.