Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Network
  3. CVE search
Your files stay on your device

CVE search

Look up CVE ids against NVD, CVE.org, EPSS and the CISA KEV catalogue, every value labeled with its source and freshness.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Four authorities, one labeled answer

Each id is asked to NVD, CVE.org, FIRST EPSS, and the CISA KEV catalogue. Every value on the result names the source that supplied it, and a source that could not be read reads Unavailable rather than quietly disappearing.

This runs in your browser against four free public sources; there is no server cache in between. Answers you have already fetched stay in this tab for 12 hours (6 for the KEV catalogue) and a failed re-read falls back to the last good copy, labeled Stale with its fetch date, for up to 14 days. NVD's keyless allowance is five requests per 30 seconds, so the tool paces itself and a big batch takes a few minutes. CISA's catalogue sends no cross-origin header, so many browsers refuse the download; when that happens the KEV row reads Unavailable and the tool claims no KEV verdict at all, rather than inferring one from NVD's embedded exploited tags. Scores from different authorities can disagree; each row keeps its own label. This is a lookup, not a scanner: nothing here tests your systems, and the KEV remediation text is quoted as CISA wrote it.

Identifiers

Up to 20 per run, one per line or comma separated
More settings▾
Daily exploitation probability per id; adds one request per id
One catalogue download per run (about 2 MB), searched locally; needed for any KEV verdict

Turning a source off marks its rows Not requested, and the result says so instead of guessing what it would have said.

What leaves your browser

When you press Search, your ids go as HTTPS GETs to NVD, CVE.org, FIRST (EPSS), and CISA (KEV). KEV is one catalogue download per run. This page leaves your browser only when you press the button; never on load, never in the background. Nothing is sent anywhere else. Google Analytics still measures the visit to this page, and it never receives what you run through this tool.

Runs on this device. Nothing is uploaded.

More network tools

  • CloudTrail analyzer
  • RDAP lookup
  • What is my IP
All network tools

Was this tool useful?