Search Examples: Basic & Advanced
Use word1 word2 word3 etc, in your normal search. Full search using title, description,
vendors, products, versions, references, credits, CWE, CAPEC, etc.
Use keywords exploits:yes and/or patches:yes to find vulnerabilities with exploits/patches:
Use keywords: vendor:xxx product:yyy version:zzz or a combination of them. Curent beta version partialy supports version:[<,<=,>,>=]
Note that this will only retrive results if they appear in CPEs entries.
Refine by adding relevant words: vendor:xxx product:yyy word1 word2
vendor:xxx product:yyy version:zzz, the terms must be in a CPE. CPE assignment to new vulnerabilities
can take time. To find the latest vulnerabilities, also search for vendors/products without keywords to avoid missing recent and relevant vulnerabilities.
When searching using abbreviations, they are expanded ensuring that you don't miss any vulnerabilities even if different vulnerability descriptions use different words.
Refine by adding relevant wordss: word1 word2 abbreviation:
Use: cvss:[<,<=,>,>=] to filter vulnerabilities by CVSS score:
Use commit:xxxxxxxxxxxx or in most cases is just enough to use the hash:
Example 1: commit:5447f9708d9e
Example 2: 5447f9708d9e
Example 3: 5447f9708d9e4c17a647b16a9cb29e9e02820bd9
Search for specific versions vendor:Linux product:"Linux Kernel" version:xxx
vendor:xxx product:yyy version:zzz, the terms must be in a CPE. NotCVE is assigning CPEs to Linux Kernel vulnerabilities. NotCVE provides the Linux Kernel CPEs that MITRE and NVD lack.