Vex (Vulnerability Explorer) — a fast, clean web interface for searching CVEs via the NIST NVD API v2.0.
Navigate from vendor → product → version to find the exact CPE you need, then instantly see all associated vulnerabilities with CVSS scores, severity ratings, and full details.
Open index.html directly in a browser, or serve it with any static web server (Apache, Nginx, etc.).
The NVD API allows 5 requests / 30 s (details). Responses are cached for 5 minutes to make the most of that budget.
NVD API keys raise the limit to 50 requests / 30 s, but they cannot be used here: the NVD server rejects the CORS preflight triggered by the apiKey header, so keyed requests never work from browser-side JavaScript.
All vulnerability data is sourced in real time from the NIST National Vulnerability Database.