漏洞情报与CVE优先级排序 API

API ID 13270

查找任何CVE或软件依赖项并获得P1-P5补丁优先级判定结合CVSS(NVD)主动被利用状态(CISA KEV)和利用概率(FIRST EPSS)包括对PyPI npm Go Maven等的OSV依赖扫描仅供信息优先级评估

937 ms 平均响应

API 文档

端点

请求
查找单个CVE并获取CVSS(NVD)、主动利用状态(CISA KEV)、利用概率(FIRST EPSS)和P1-P5优先级判决在一个响应中
Endpoint ID: 27344
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27344/cve+lookup+and+priority+verdict
输入参数

CVE查询和优先级裁定 — 端点功能

对象 描述
id 必需 Required. The CVE identifier to look up, e.g. CVE-2021-44228.

剩余免费测试请求:3 / 3。


输入参数

id
API 示例响应
JSON
{
    "id": "CVE-2021-44228",
    "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
    "published": "2021-12-10T10:15:09.143",
    "last_modified": "2026-06-17T04:12:05.460",
    "status": "Analyzed",
    "cwe": [
        "CWE-20",
        "CWE-400",
        "CWE-502",
        "CWE-917"
    ],
    "products": [
        "siemens:6bk1602-0aa12-0tp0_firmware",
        "siemens:6bk1602-0aa12-0tp0",
        "siemens:6bk1602-0aa22-0tp0_firmware",
        "siemens:6bk1602-0aa22-0tp0",
        "siemens:6bk1602-0aa32-0tp0_firmware",
        "siemens:6bk1602-0aa32-0tp0",
        "siemens:6bk1602-0aa42-0tp0_firmware",
        "siemens:6bk1602-0aa42-0tp0",
        "siemens:6bk1602-0aa52-0tp0_firmware",
        "siemens:6bk1602-0aa52-0tp0",
        "apache:log4j",
        "siemens:sppa-t3000_ses3000_firmware",
        "siemens:sppa-t3000_ses3000",
        "siemens:capital",
        "siemens:comos",
        "siemens:desigo_cc_advanced_reports",
        "siemens:desigo_cc_info_center",
        "siemens:e-car_operation_center",
        "siemens:energy_engage",
        "siemens:energyip"
    ],
    "references": [
        "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
        "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html",
        "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html",
        "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
        "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html",
        "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html",
        "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html",
        "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html",
        "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html",
        "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html",
        "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html",
        "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html"
    ],
    "cvss": 10,
    "severity": "CRITICAL",
    "cvss_version": "3.1",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "epss": 0.99999,
    "epss_percentile": 1,
    "kev": true,
    "kev_details": {
        "date_added": "2021-12-10",
        "due_date": "2021-12-24",
        "ransomware": true,
        "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available."
    },
    "priority": {
        "tier": "P1",
        "label": "Patch now",
        "reason": "actively exploited in known ransomware campaigns; exploit probability 100%."
    },
    "sources": {
        "nvd": "cache",
        "kev_released": "2026-07-16",
        "epss_date": "2026-07-21"
    }
}
CVE查询和优先级裁定 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27344/cve+lookup+and+priority+verdict?id=CVE-2021-44228' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
通过关键字、CPE或严重性搜索CVE(实时NVD),每个都附带KEV、EPSS和优先判决。至少提供q、严重性或cpe中的一个
Endpoint ID: 27345
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27345/search+cves
输入参数

搜索CVE — 端点功能

对象 描述
q 可选 Optional. Keyword search over CVE text.
severity 可选 Optional. Filter by LOW, MEDIUM, HIGH or CRITICAL.
cpe 可选 Optional. Exact CPE name, e.g. cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
limit 可选 Optional. Max results, up to 100.
weaponized 可选 Boolean filtering weaponized vulnerabilities.

剩余免费测试请求:3 / 3。


输入参数

q
severity
cpe
limit
weaponized
API 示例响应
JSON
{
    "total": 7,
    "count": 3,
    "weaponized": true,
    "results": [
        {
            "id": "CVE-2017-5645",
            "description": "In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.",
            "published": "2017-04-17T21:59:00.373",
            "last_modified": "2026-06-17T01:20:55.043",
            "status": "Modified",
            "cwe": [
                "CWE-502"
            ],
            "products": [
                "apache:log4j",
                "netapp:oncommand_api_services",
                "netapp:oncommand_insight",
                "netapp:oncommand_workflow_automation",
                "netapp:service_level_manager",
                "netapp:snapcenter",
                "netapp:storage_automation_store",
                "redhat:fuse",
                "redhat:enterprise_linux",
                "redhat:enterprise_linux_desktop",
                "redhat:enterprise_linux_server",
                "redhat:enterprise_linux_server_aus",
                "redhat:enterprise_linux_server_eus",
                "redhat:enterprise_linux_server_tus",
                "redhat:enterprise_linux_workstation",
                "oracle:api_gateway",
                "oracle:application_testing_suite",
                "oracle:autovue_vuelink_integration",
                "oracle:banking_platform",
                "oracle:bi_publisher"
            ],
            "references": [
                "http://www.openwall.com/lists/oss-security/2019/12/19/2",
                "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
                "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
                "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                "http://www.securityfocus.com/bid/97702",
                "http://www.securitytracker.com/id/1040200",
                "http://www.securitytracker.com/id/1041294",
                "https://access.redhat.com/errata/RHSA-2017:1417",
                "https://access.redhat.com/errata/RHSA-2017:1801",
                "https://access.redhat.com/errata/RHSA-2017:1802",
                "https://access.redhat.com/errata/RHSA-2017:2423"
            ],
            "exploit_available": false,
            "exploit_refs": [],
            "has_patch": true,
            "has_mitigation": false,
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.8904,
            "epss_percentile": 0.99765,
            "kev": false,
            "exploitation": {
                "weaponized": true,
                "metasploit": false,
                "nuclei": true,
                "exploit_db": false,
                "public_exploit": true,
                "kev": false
            },
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "A working public exploit exists (Metasploit/Nuclei/Exploit-DB); exploit probability 89%.",
                "score": 73
            }
        },
        {
            "id": "CVE-2021-44228",
            "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
            "published": "2021-12-10T10:15:09.143",
            "last_modified": "2026-06-17T04:12:05.460",
            "status": "Analyzed",
            "cwe": [
                "CWE-20",
                "CWE-400",
                "CWE-502",
                "CWE-917"
            ],
            "products": [
                "siemens:6bk1602-0aa12-0tp0_firmware",
                "siemens:6bk1602-0aa12-0tp0",
                "siemens:6bk1602-0aa22-0tp0_firmware",
                "siemens:6bk1602-0aa22-0tp0",
                "siemens:6bk1602-0aa32-0tp0_firmware",
                "siemens:6bk1602-0aa32-0tp0",
                "siemens:6bk1602-0aa42-0tp0_firmware",
                "siemens:6bk1602-0aa42-0tp0",
                "siemens:6bk1602-0aa52-0tp0_firmware",
                "siemens:6bk1602-0aa52-0tp0",
                "apache:log4j",
                "siemens:sppa-t3000_ses3000_firmware",
                "siemens:sppa-t3000_ses3000",
                "siemens:capital",
                "siemens:comos",
                "siemens:desigo_cc_advanced_reports",
                "siemens:desigo_cc_info_center",
                "siemens:e-car_operation_center",
                "siemens:energy_engage",
                "siemens:energyip"
            ],
            "references": [
                "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html",
                "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html",
                "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html",
                "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html",
                "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html",
                "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html",
                "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html",
                "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html",
                "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html"
            ],
            "exploit_available": true,
            "exploit_refs": [
                "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html",
                "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html",
                "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html",
                "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html"
            ],
            "has_patch": true,
            "has_mitigation": true,
            "cvss": 10,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "epss": 0.99999,
            "epss_percentile": 1,
            "kev": true,
            "exploitation": {
                "weaponized": true,
                "metasploit": true,
                "nuclei": true,
                "exploit_db": true,
                "public_exploit": true,
                "kev": true,
                "exploitdb_ids": [
                    "51183",
                    "50592",
                    "50590"
                ]
            },
            "kev_details": {
                "date_added": "2021-12-10",
                "due_date": "2021-12-24",
                "ransomware": true,
                "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available."
            },
            "priority": {
                "tier": "P1",
                "label": "Patch now",
                "reason": "actively exploited in known ransomware campaigns; exploit probability 100%.",
                "score": 100
            }
        },
        {
            "id": "CVE-2021-45046"
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
搜索CVE — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27345/search+cves?q=log4j&severity=CRITICAL&limit=20&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
返回在回溯窗口内发布的 CVE,每个都附有相同的 CVSS、KEV 和 EPSS 优先级判决。适用于监控数据源
Endpoint ID: 27346
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27346/recently+published+cves
输入参数

最近发布的CVE — 端点功能

对象 描述
days 可选 Optional. Look-back window in days, up to 120 (default 7).
severity 可选 Optional. Filter by LOW, MEDIUM, HIGH or CRITICAL.
limit 可选 Optional. Max results, up to 100.
weaponized 可选 Boolean filtering weaponized vulnerabilities.

剩余免费测试请求:3 / 3。


输入参数

days
severity
limit
weaponized
API 示例响应
JSON
{
    "days": 7,
    "total": 38,
    "count": 1,
    "weaponized": true,
    "results": [
        {
            "id": "CVE-2026-44596",
            "description": "Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.",
            "published": "2026-07-16T17:16:55.880",
            "last_modified": "2026-07-17T18:44:26.383",
            "status": "Analyzed",
            "cwe": [
                "CWE-307"
            ],
            "products": [
                "spaceapplications:yamcs"
            ],
            "references": [
                "https://github.com/yamcs/yamcs/commit/309218c651680f79df11a8d0f8628f7033f98a83",
                "https://github.com/yamcs/yamcs/commit/64392df531fbcbc65f19ee5724c4c23d289f49fc",
                "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7",
                "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4"
            ],
            "exploit_available": true,
            "exploit_refs": [
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4"
            ],
            "has_patch": true,
            "has_mitigation": false,
            "cvss": 6.5,
            "severity": "MEDIUM",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "epss": 0.0177,
            "epss_percentile": 0.75706,
            "kev": false,
            "exploitation": {
                "weaponized": true,
                "metasploit": false,
                "nuclei": false,
                "exploit_db": true,
                "public_exploit": true,
                "kev": false,
                "exploitdb_ids": [
                    "52605"
                ]
            },
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "A working public exploit exists (Metasploit/Nuclei/Exploit-DB); exploit probability 2%.",
                "score": 39
            }
        }
    ]
}
最近发布的CVE — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27346/recently+published+cves?days=7&severity=CRITICAL&limit=1&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
通过OSV返回影响软件包的已知漏洞(可选特定版本),每个都与EPSS和KEV交叉丰富,并附有优先级判断,以及修复它的版本
Endpoint ID: 27347
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27347/package+and+dependency+vulnerabilities
输入参数

包和依赖性漏洞 — 端点功能

对象 描述
ecosystem 必需 PyPI, npm, Go, Maven, RubyGems, crates.io, NuGet or Packagist.
name 必需 The package name.
version 可选 Optional. Version to check; omit for all known vulnerabilities.

剩余免费测试请求:3 / 3。


输入参数

ecosystem
name
version
API 示例响应
JSON
{
    "ecosystem": "PyPI",
    "package": "django",
    "version": "3.0",
    "vulnerable": true,
    "vuln_count": 31,
    "highest_priority": "P2",
    "vulnerabilities": [
        {
            "id": "GHSA-frmv-pr5f-9mcr",
            "cve": "CVE-2025-64459",
            "aliases": [
                "BIT-django-2025-64459",
                "CVE-2025-64459",
                "PYSEC-2025-108"
            ],
            "summary": "Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.",
            "published": "2025-11-05T15:31:07Z",
            "modified": "2026-06-05T14:45:52.053173828Z",
            "fixed_versions": [
                "4.2.26",
                "5.1.14",
                "5.2.8"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2025-64459",
                "https://github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85",
                "https://github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4",
                "https://github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b",
                "https://github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241",
                "https://docs.djangoproject.com/en/dev/releases/security",
                "https://github.com/django/django",
                "https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed"
            ],
            "cvss": 9.1,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "epss": 0.19396,
            "epss_percentile": 0.9706,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.1); exploit probability 19%."
            }
        },
        {
            "id": "GHSA-hmr4-m2h5-33qx",
            "cve": "CVE-2020-7471",
            "aliases": [
                "BIT-django-2020-7471",
                "CVE-2020-7471",
                "PYSEC-2020-35"
            ],
            "summary": "SQL injection in Django",
            "published": "2020-02-11T21:03:20Z",
            "modified": "2025-02-21T06:12:43.981276Z",
            "fixed_versions": [
                "1.11.28",
                "2.2.10",
                "3.0.3"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2020-7471",
                "https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd",
                "https://github.com/django/django/commit/505826b469b16ab36693360da9e11fd13213421b",
                "https://github.com/django/django/commit/c67a368c16e4680b324b4f385398d638db4d8147",
                "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136",
                "https://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://www.djangoproject.com/weblog/2020/feb/03/security-releases",
                "https://www.debian.org/security/2020/dsa-4629"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.65336,
            "epss_percentile": 0.99173,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "High exploit probability (65%) though not yet on KEV."
            }
        },
        {
            "id": "GHSA-vfq6-hq5r-27r6",
            "cve": "CVE-2019-19844",
            "aliases": [
                "CVE-2019-19844",
                "PYSEC-2019-16"
            ],
            "summary": "Django Potential account hijack via password reset form",
            "published": "2020-01-16T22:35:12Z",
            "modified": "2024-09-20T15:24:05.816291Z",
            "fixed_versions": [
                "1.11.27",
                "2.2.9",
                "3.0.1"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2019-19844",
                "https://github.com/django/django/commit/302a4ff1e8b1c798aab97673909c7a3dfda42c26",
                "https://github.com/django/django/commit/4d334bea06cac63dc1272abcec545b85136cca0e",
                "https://github.com/django/django/commit/5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70",
                "https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa2",
                "https://www.djangoproject.com/weblog/2019/dec/18/security-releases",
                "https://www.debian.org/security/2020/dsa-4598",
                "https://usn.ubuntu.com/4224-1"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.3481,
            "epss_percentile": 0.98255,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.8); exploit probability 35%."
            }
        },
        {
            "id": "GHSA-xpfp-f569-q3p2",
            "cve": "CVE-2021-35042",
            "aliases": [
                "BIT-django-2021-35042",
                "CVE-2021-35042",
                "PYSEC-2021-109"
            ],
            "summary": "SQL Injection in Django",
            "published": "2021-09-22T17:34:49Z",
            "modified": "2025-02-21T05:30:56.014475Z",
            "fixed_versions": [
                "3.1.13",
                "3.2.5"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2021-35042",
                "https://github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e9",
                "https://github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f",
                "https://github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db4",
                "https://docs.djangoproject.com/en/3.2/releases/security",
                "https://github.com/advisories/GHSA-xpfp-f569-q3p2",
                "https://github.com/django/django",
                "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-109.yaml"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.44369,
            "epss_percentile": 0.98627,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.8); exploit probability 44%."
            }
        },
        {
            "id": "PYSEC-2020-35",
            "cve": "CVE-2020-7471",
            "aliases": [
                "BIT-django-2020-7471",
                "CVE-2020-7471",
                "GHSA-hmr4-m2h5-33qx"
            ],
            "summary": null,
            "published": "2020-02-03T12:15:00Z",
            "modified": "2023-12-06T01:00:38.606116Z",
            "fixed_versions": [
                "1.11.28",
                "2.2.10",
                "3.0.3",
                "eb31d845323618d688ad429479c6dda973056136"
            ],
            "references": [
                "https://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://docs.djangoproject.com/en/3.0/releases/security/",
                "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI",
                "https://www.djangoproject.com/weblog/2020/feb/03/security-releases/",
                "http://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136",
                "https://usn.ubuntu.com/4264-1/",
                "https://seclists.org/bugtraq/2020/Feb/30"
            ],
            "cvss": null,
            "severity": null,
            "cvss_version": null,
            "vector": null,
            "epss": 0.65336,
            "epss_percentile": 0.99173,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "High exploit probability (65%) though not yet on KEV."
            }
        },
        {
            "id": "GHSA-3gh2-xw74-jmcw",
            "cve": "CVE-2020-9402",
            "aliases": [
                "BIT-django-2020-9402",
                "CVE-2020-9402",
                "PYSEC-2020-36"
            ],
            "summary": "SQL injection in Django",
            "published": "2020-06-05T14:52:07Z",
            "modified": "2026-07-09T16:56:16.012032693Z",
            "fixed_versions": [
                "1.11.29",
                "2.2.11",
                "3.0.4"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2020-9402",
                "https://github.com/django/django/commit/6695d29b1c1ce979725816295a26ecc64ae0e927",
                "https://www.djangoproject.com/weblog/2020/mar/04/security-releases",
                "https://www.debian.org/security/2020/dsa-4705",
                "https://usn.ubuntu.com/4296-1"
            ]
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
包和依赖性漏洞 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27347/package+and+dependency+vulnerabilities?ecosystem=PyPI&name=django&version=3.0' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
返回一个单一的OSV咨询(GitHub安全咨询 PYSEC或CVE)具有相同的EPSS和KEV丰富性及优先级裁定
Endpoint ID: 27348
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27348/osv+and+ghsa+advisory+by+id
输入参数

OSV和GHSA Advisory由id — 端点功能

对象 描述
id 必需 Required. OSV id such as GHSA, PYSEC, or a CVE.

剩余免费测试请求:3 / 3。


输入参数

id
API 示例响应
JSON
{
    "id": "GHSA-jfh8-c2jp-5v3q",
    "cve": "CVE-2021-44228",
    "aliases": [
        "CVE-2021-44228"
    ],
    "summary": "Remote code injection in Log4j",
    "published": "2021-12-10T00:40:56Z",
    "modified": "2025-10-22T19:37:02.616807Z",
    "fixed_versions": [],
    "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
        "https://github.com/apache/logging-log4j2/pull/608",
        "https://github.com/github/advisory-database/pull/5501",
        "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf",
        "https://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html",
        "https://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html",
        "https://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html",
        "https://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html"
    ],
    "cvss": 10,
    "severity": "CRITICAL",
    "cvss_version": "3.1",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H",
    "epss": 0.99999,
    "epss_percentile": 1,
    "kev": true,
    "kev_details": {
        "date_added": "2021-12-10",
        "due_date": "2021-12-24",
        "ransomware": true,
        "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available."
    },
    "priority": {
        "tier": "P1",
        "label": "Patch now",
        "reason": "actively exploited in known ransomware campaigns; exploit probability 100%."
    }
}
OSV和GHSA Advisory由id — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27348/osv+and+ghsa+advisory+by+id?id=GHSA-jfh8-c2jp-5v3q' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
从CISA已知被利用漏洞目录中返回条目,EPSS增强,带有可选的供应商、产品或勒索软件过滤器
Endpoint ID: 27349
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27349/cisa+kev+catalog
输入参数

CISA KEV 目录 — 端点功能

对象 描述
vendor 可选 Optional. Filter by vendor, e.g. Microsoft.
product 可选 Optional. Filter by product.
ransomware 可选 Optional. Set true to return only entries used in known ransomware campaigns.
limit 可选 Optional. Max results, up to 500.

剩余免费测试请求:3 / 3。


输入参数

vendor
product
ransomware
limit
API 示例响应
JSON
{
    "count": 50,
    "released": "2026-07-16",
    "total_kev": 1647,
    "results": [
        {
            "cve": "CVE-2026-35273",
            "vendor": "Oracle",
            "product": " PeopleSoft Enterprise PeopleTools",
            "name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability",
            "date_added": "2026-06-12",
            "due_date": "2026-06-15",
            "ransomware": true,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.",
            "epss": 0.9233,
            "epss_percentile": 0.99812
        },
        {
            "cve": "CVE-2026-50751",
            "vendor": "Check Point",
            "product": "Security Gateway",
            "name": "Check Point Security Gateway Improper Authentication Vulnerability",
            "date_added": "2026-06-08",
            "due_date": "2026-06-11",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
            "epss": 0.70099,
            "epss_percentile": 0.99307
        },
        {
            "cve": "CVE-2026-48027",
            "vendor": "Nx",
            "product": "Nx Console",
            "name": "Nx Console Embedded Malicious Code Vulnerability",
            "date_added": "2026-05-27",
            "due_date": "2026-06-10",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.",
            "epss": 0.0185,
            "epss_percentile": 0.76784
        },
        {
            "cve": "CVE-2026-45321",
            "vendor": "TanStack",
            "product": "TanStack",
            "name": "TanStack Unspecified Vulnerability",
            "date_added": "2026-05-27",
            "due_date": "2026-06-10",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.",
            "epss": 0.02342,
            "epss_percentile": 0.81773
        },
        {
            "cve": "CVE-2026-41940",
            "vendor": "WebPros",
            "product": "cPanel & WHM and WP2 (WordPress Squared)",
            "name": "WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability",
            "date_added": "2026-04-30",
            "due_date": "2026-05-03",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.",
            "epss": 0.981,
            "epss_percentile": 0.99907
        },
        {
            "cve": "CVE-2024-1708",
            "vendor": "ConnectWise",
            "product": "ScreenConnect",
            "name": "ConnectWise ScreenConnect Path Traversal Vulnerability",
            "date_added": "2026-04-28",
            "due_date": "2026-05-12",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.",
            "epss": 0.87624,
            "epss_percentile": 0.99742
        },
        {
            "cve": "CVE-2024-57728",
            "vendor": "SimpleHelp ",
            "product": "SimpleHelp",
            "name": "SimpleHelp Path Traversal Vulnerability",
            "date_added": "2026-04-24",
            "due_date": "2026-05-08",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.",
            "epss": 0.06982,
            "epss_percentile": 0.93433
        },
        {
            "cve": "CVE-2024-57726",
            "vendor": "SimpleHelp ",
            "product": "SimpleHelp",
            "name": "SimpleHelp Missing Authorization Vulnerability",
            "date_added": "2026-04-24",
            "due_date": "2026-05-08",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.",
            "epss": 0.08632,
            "epss_percentile": 0.94514
        },
        {
            "cve": "CVE-2026-33825",
            "vendor": "Microsoft",
            "product": "Defender",
            "name": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability",
            "date_added": "2026-04-22",
            "due_date": "2026-05-06",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.",
            "epss": 0.06749,
            "epss_percentile": 0.93237
        },
        {
            "cve": "CVE-2023-27351",
            "vendor": "PaperCut",
            "product": "NG/MF",
            "name": "PaperCut NG/MF Improper Authentication Vulnerability",
            "date_added": "2026-04-20",
            "due_date": "2026-05-04",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.",
            "epss": 0.77388,
            "epss_percentile": 0.99508
        },
        {
            "cve": "CVE-2024-27199",
            "vendor": "JetBrains",
            "product": "TeamCity",
            "name": "JetBrains TeamCity Relative Path Traversal Vulnerability",
            "date_added": "2026-04-20",
            "due_date": "2026-05-04",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
CISA KEV 目录 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27349/cisa+kev+catalog?ransomware=true&limit=50' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
返回单个CVE的第一个EPSS利用概率分数和百分位数
Endpoint ID: 27350
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27350/epss+exploit-probability+score
输入参数

EPSS利用概率评分 — 端点功能

对象 描述
id 必需 The CVE identifier.

剩余免费测试请求:3 / 3。


输入参数

id
API 示例响应
JSON
{
    "id": "CVE-2021-44228",
    "epss": 0.99999,
    "epss_percentile": 1,
    "score_date": "2026-07-21"
}
EPSS利用概率评分 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27350/epss+exploit-probability+score?id=CVE-2021-44228' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
在一次调用中丰富和优先处理多达100个CVE 返回结果按0-100的修复优先级评分排序并附有每个级别的摘要 适合用于分析扫描器输出或CVE信息流
Endpoint ID: 27354
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27354/rank+a+list+of+cves+fix-first
输入参数

优先修复CVEs列表排序 — 端点功能

对象 描述
ids 必需 Comma-separated CVE ids, up to 100. Results come back sorted by the fix-first score (highest first).
weaponized 可选 Boolean to filter weaponized vulnerabilities.

剩余免费测试请求:3 / 3。


输入参数

ids
weaponized
API 示例响应
JSON
{
    "requested": 3,
    "resolved": 3,
    "highest_priority": "P1",
    "by_tier": {
        "P1": 2,
        "P2": 1
    },
    "results": [
        {
            "id": "CVE-2021-44228",
            "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
            "published": "2021-12-10T10:15:09.143",
            "last_modified": "2026-06-17T04:12:05.460",
            "status": "Analyzed",
            "cwe": [
                "CWE-20",
                "CWE-400",
                "CWE-502",
                "CWE-917"
            ],
            "products": [
                "siemens:6bk1602-0aa12-0tp0_firmware",
                "siemens:6bk1602-0aa12-0tp0",
                "siemens:6bk1602-0aa22-0tp0_firmware",
                "siemens:6bk1602-0aa22-0tp0",
                "siemens:6bk1602-0aa32-0tp0_firmware",
                "siemens:6bk1602-0aa32-0tp0",
                "siemens:6bk1602-0aa42-0tp0_firmware",
                "siemens:6bk1602-0aa42-0tp0",
                "siemens:6bk1602-0aa52-0tp0_firmware",
                "siemens:6bk1602-0aa52-0tp0",
                "apache:log4j",
                "siemens:sppa-t3000_ses3000_firmware",
                "siemens:sppa-t3000_ses3000",
                "siemens:capital",
                "siemens:comos",
                "siemens:desigo_cc_advanced_reports",
                "siemens:desigo_cc_info_center",
                "siemens:e-car_operation_center",
                "siemens:energy_engage",
                "siemens:energyip"
            ],
            "references": [
                "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html",
                "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html",
                "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html",
                "http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html",
                "http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html",
                "http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html",
                "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html",
                "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html",
                "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html"
            ],
            "exploit_available": true,
            "exploit_refs": [
                "http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html",
                "http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html",
                "http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html",
                "http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html",
                "http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html"
            ],
            "has_patch": true,
            "has_mitigation": true,
            "cvss": 10,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "cvss_source": "NVD",
            "epss": 0.99999,
            "epss_percentile": 1,
            "kev": true,
            "exploitation": {
                "weaponized": true,
                "metasploit": true,
                "nuclei": true,
                "exploit_db": true,
                "public_exploit": true,
                "kev": true,
                "exploitdb_ids": [
                    "51183",
                    "50592",
                    "50590"
                ]
            },
            "kev_details": {
                "date_added": "2021-12-10",
                "due_date": "2021-12-24",
                "ransomware": true,
                "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available."
            },
            "priority": {
                "tier": "P1",
                "label": "Patch now",
                "reason": "actively exploited in known ransomware campaigns; exploit probability 100%.",
                "score": 100
            }
        },
        {
            "id": "CVE-2014-0160",
            "description": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.",
            "published": "2014-04-07T22:55:03.893",
            "last_modified": "2026-06-17T00:02:24.467",
            "status": "Analyzed",
            "cwe": [
                "CWE-125"
            ],
            "products": [
                "openssl:openssl",
                "filezilla-project:filezilla_server",
                "siemens:application_processing_engine_firmware",
                "siemens:application_processing_engine",
                "siemens:cp_1543-1_firmware",
                "siemens:cp_1543-1",
                "siemens:simatic_s7-1500_firmware",
                "siemens:simatic_s7-1500",
                "siemens:simatic_s7-1500t_firmware",
                "siemens:simatic_s7-1500t",
                "siemens:elan-8.2",
                "siemens:wincc_open_architecture",
                "intellian:v100_firmware",
                "intellian:v100",
                "intellian:v60_firmware",
                "intellian:v60",
                "mitel:micollab",
                "mitel:mivoice",
                "opensuse:opensuse",
                "canonical:ubuntu_linux"
            ],
            "references": [
                "http://advisories.mageia.org/MGASA-2014-0165.html",
                "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/",
                "http://cogentdatahub.com/ReleaseNotes.html",
                "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01",
                "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3",
                "http://heartbleed.com/",
                "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html",
                "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html",
                "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html",
                "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html",
                "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html",
                "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html"
            ],
            "exploit_available": true,
            "exploit_refs": [
                "http://www.exploit-db.com/exploits/32745",
                "http://www.exploit-db.com/exploits/32764",
                "https://gist.github.com/chapmajs/10473815",
                "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html",
                "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd",
                "http://www.exploit-db.com/exploits/32745"
            ],
            "has_patch": true,
            "has_mitigation": false,
            "cvss": 7.5,
            "severity": "HIGH",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "cvss_source": "NVD",
            "epss": 0.99999,
            "epss_percentile": 0.99997,
            "kev": true,
            "exploitation": {
                "weaponized": true
            }
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
优先修复CVEs列表排序 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27354/rank+a+list+of+cves+fix-first?ids=CVE-2021-44228,CVE-2019-19844,CVE-2014-0160&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
请求
在回顾窗口内新添加到 CISA KEV 目录的 CVE 最新的在前 经过 EPSS 增强的每日刚刚开始被积极利用的信息流
Endpoint ID: 27355
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27355/newly+exploited+cves+kev+feed
输入参数

新发现的CVE KEV数据源 — 端点功能

对象 描述
days 可选 Look-back window in days.
limit 可选 Max results ( up to 500)

剩余免费测试请求:3 / 3。


输入参数

days
limit
API 示例响应
JSON
{
    "days": 7,
    "cutoff": "2026-07-14",
    "count": 9,
    "results": [
        {
            "cve": "CVE-2026-58644",
            "vendor": "Microsoft",
            "product": "SharePoint",
            "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.",
            "epss": 0.01465,
            "epss_percentile": 0.70792
        },
        {
            "cve": "CVE-2026-25089",
            "vendor": "Fortinet",
            "product": "FortiSandbox",
            "name": "Fortinet FortiSandbox OS Command Injection Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.",
            "epss": 0.36135,
            "epss_percentile": 0.98311
        },
        {
            "cve": "CVE-2026-39808",
            "vendor": "Fortinet",
            "product": "FortiSandbox",
            "name": "Fortinet FortiSandbox OS Command Injection Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.",
            "epss": 0.84158,
            "epss_percentile": 0.99668
        },
        {
            "cve": "CVE-2026-46817",
            "vendor": "Oracle",
            "product": "E-Business Suite",
            "name": "Oracle E-Business Suite Improper Privilege Management Vulnerability",
            "date_added": "2026-07-15",
            "due_date": "2026-07-18",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.",
            "epss": 0.01045,
            "epss_percentile": 0.60378
        },
        {
            "cve": "CVE-2023-4346",
            "vendor": "KNX Association",
            "product": "KNX Protocol Connection Authorization Option 1",
            "name": "KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability",
            "date_added": "2026-07-15",
            "due_date": "2026-07-29",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device. ",
            "epss": 0.00855,
            "epss_percentile": 0.54365
        },
        {
            "cve": "CVE-2026-56155",
            "vendor": "Microsoft",
            "product": "Active Directory Federation Services",
            "name": "Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ",
            "date_added": "2026-07-14",
            "due_date": "2026-07-28",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.",
            "epss": 0.00379,
            "epss_percentile": 0.30287
        },
        {
            "cve": "CVE-2026-56164",
            "vendor": "Microsoft",
            "product": "SharePoint Server",
            "name": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability",
            "date_added": "2026-07-14",
            "due_date": "2026-07-17",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.",
            "epss": 0.05601,
            "epss_percentile": 0.92056
        },
        {
            "cve": "CVE-2026-15409",
            "vendor": "SonicWall",
            "product": "SMA1000 Appliances",
            "name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability",
            "date_added": "2026-07-14",
            "due_date": "2026-07-17",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
新发现的CVE KEV数据源 — 代码片段

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27355/newly+exploited+cves+kev+feed?days=7&limit=100' --header 'Authorization: Bearer YOUR_API_KEY' 


    

API 访问密钥和身份验证

注册后,每个开发者都会被分配一个个人 API 访问密钥,这是一个唯一的字母和数字组合,用于访问我们的 API 端点。要使用 漏洞情报与CVE优先级排序 API 进行身份验证,只需在 Authorization 标头中包含您的 bearer token。

标头
标头 描述
授权 必需 应为 Bearer access_key. 订阅后,请查看上方的"您的 API 访问密钥"。

无长期承诺。随时升级、降级或取消。 免费试用包括最多 50 个请求。

(年度计费可节省 2 个月 🎉)

🚀 企业版套餐

起价
$ 10,000/年


  • 自定义数量
  • 自定义速率限制
  • 专业客户支持
  • 实时 API 监控
zeiss-logo amazon-logo zoom-logo decathlon-logo

领先企业的信赖之选

概览

查找任何CVE或软件依赖项,并获取P1-P5补丁优先级判定,结合CVSS(NVD)、主动利用状态(CISA KEV)和利用概率(FIRST EPSS)。包括对PyPI、npm、Go、Maven等的OSV依赖扫描。仅用于信息优先级排序

漏洞情报与CVE优先级排序 API FAQs

每个端点返回有关CVE的详细信息,包括描述、发布日期、CVSS分数、利用概率和优先级判决。例如,CVE查询端点提供特定CVE的全面视图,而软件包漏洞端点列出了已知的软件包漏洞

关键字段包括"id"(CVE 标识符)、"description"(漏洞详情)、"published"(发布日期)、"status"(分析状态)、"cwe"(常见弱点枚举)和"priority"(P1-P5 判决)这些字段有助于评估漏洞的严重性和相关性

参数因端点而异 对于CVE搜索端点,您可以使用“q”(关键字)、“severity”(严重性级别)或“cpe”(通用平台枚举) 包漏洞端点允许指定“package”(软件包)和“version”(版本)以缩小结果

响应数据采用 JSON 格式结构,顶级字段指示结果的总数以及包含单个 CVE 条目的“结果”数组。每个条目包括详细属性,如“描述”、“发布日期”和“修复版本”

该API从多个可信来源聚合数据,包括国家漏洞数据库(NVD)、CISA的已知利用漏洞(KEV)目录和FIRST的漏洞预测评分系统(EPSS)这确保了全面和可靠的漏洞信息

典型的用例包括漏洞管理 风险评估 和补丁工作优先级的确定 安全团队可以使用API识别软件依赖中的关键漏洞并作出明智的修复决策

用户可以分析返回的数据,根据严重性和可利用性优先考虑漏洞。例如,通过关注EPSS分数高的P1-P2漏洞,组织可以有效分配资源以减轻风险

数据准确性通过来自权威来源的定期更新和自动一致性检查来保持 API整合多个数据集交叉引用信息以确保用户获得最准确和最新的漏洞数据

一般常见问题

Zyla API Hub 就像一个大型 API 商店,您可以在一个地方找到数千个 API。我们还为所有 API 提供专门支持和实时监控。注册后,您可以选择要使用的 API。请记住,每个 API 都需要自己的订阅。但如果您订阅多个 API,您将为所有这些 API 使用相同的密钥,使事情变得更简单。
价格以 USD(美元)、EUR(欧元)、CAD(加元)、AUD(澳元)和 GBP(英镑)列出。我们接受所有主要的借记卡和信用卡。我们的支付系统使用最新的安全技术,由 Stripe 提供支持,Stripe 是世界上最可靠的支付公司之一。如果您在使用卡片付款时遇到任何问题,请通过 [email protected]

此外,如果您已经以这些货币中的任何一种(USD、EUR、CAD、AUD、GBP)拥有有效订阅,该货币将保留用于后续订阅。只要您没有任何有效订阅,您可以随时更改货币。
定价页面上显示的本地货币基于您 IP 地址的国家/地区,仅供参考。实际价格以 USD(美元)为单位。当您付款时,即使您在我们的网站上看到以本地货币显示的等值金额,您的卡片对账单上也会以美元显示费用。这意味着您不能直接使用本地货币付款。
有时,银行可能会因其欺诈保护设置而拒绝收费。我们建议您首先联系您的银行,检查他们是否阻止了我们的收费。此外,您可以访问账单门户并更改关联的卡片以进行付款。如果这些方法不起作用并且您需要进一步帮助,请通过 [email protected]
价格由月度或年度订阅决定,具体取决于所选计划。
API 调用根据成功请求从您的计划中扣除。每个计划都包含您每月可以进行的特定数量的调用。只有成功的调用(由状态 200 响应指示)才会计入您的总数。这确保失败或不完整的请求不会影响您的月度配额。
Zyla API Hub 采用月度订阅系统。您的计费周期将从您购买付费计划的那一天开始,并在下个月的同一日期续订。因此,如果您想避免未来的费用,请提前取消订阅。
要升级您当前的订阅计划,只需转到 API 的定价页面并选择您要升级到的计划。升级将立即生效,让您立即享受新计划的功能。请注意,您之前计划中的任何剩余调用都不会转移到新计划,因此在升级时请注意这一点。您将被收取新计划的全部金额。
要检查您本月剩余多少 API 调用,请参考响应标头中的 "X-Zyla-API-Calls-Monthly-Remaining" 字段。例如,如果您的计划允许每月 1,000 个请求,而您已使用 100 个,则响应标头中的此字段将显示 900 个剩余调用。
要查看您的计划允许的最大 API 请求数,请检查 "X-Zyla-RateLimit-Limit" 响应标头。例如,如果您的计划包括每月 1,000 个请求,此标头将显示 1,000。
"X-Zyla-RateLimit-Reset" 标头显示您的速率限制重置之前的秒数。这告诉您何时您的请求计数将重新开始。例如,如果它显示 3,600,则意味着还有 3,600 秒直到限制重置。
是的,您可以随时通过访问您的账户并在账单页面上选择取消选项来取消您的计划。请注意,升级、降级和取消会立即生效。此外,取消后,您将不再有权访问该服务,即使您的配额中还有剩余调用。
为了让您有机会在没有任何承诺的情况下体验我们的 API,我们提供 7 天免费试用,允许您免费进行最多 50 次 API 调用。此试用只能使用一次,因此我们建议将其应用于您最感兴趣的 API。虽然我们的大多数 API 都提供免费试用,但有些可能不提供。试用在 7 天后或您进行了 50 次请求后结束,以先发生者为准。如果您在试用期间达到 50 次请求限制,您需要"开始您的付费计划"以继续发出请求。您可以在个人资料中的订阅 -> 选择您订阅的 API -> 定价标签下找到"开始您的付费计划"按钮。或者,如果您在第 7 天之前不取消订阅,您的免费试用将结束,您的计划将自动计费,授予您访问计划中指定的所有 API 调用的权限。请记住这一点以避免不必要的费用。
7 天后,您将被收取试用期间订阅的计划的全额费用。因此,在试用期结束前取消很重要。因忘记及时取消而提出的退款请求不被接受。
当您订阅 API 免费试用时,您可以进行最多 50 次 API 调用。如果您希望超出此限制进行额外的 API 调用,API 将提示您执行"开始您的付费计划"。您可以在个人资料中的订阅 -> 选择您订阅的 API -> 定价标签下找到"开始您的付费计划"按钮。
付款订单在每月 20 日至 30 日之间处理。如果您在 20 日之前提交请求,您的付款将在此时间范围内处理。
您可以通过我们的聊天渠道联系我们以获得即时帮助。我们始终在线,时间为上午 8 点至下午 5 点(EST)。如果您在该时间之后联系我们,我们将尽快回复您。此外,您可以通过 [email protected]

相关 API


您可能还喜欢