Skip to content
GET /v1/vulns

Known CVEs detected on a host

Try it live

10 free calls per day — no sign-up, no API key. Goes through the oanor gateway.

Custom headers (optional)
api.oanor.com/internetdb-api

It works. Grab an API key and use it in your project.

Get an API key

Code snippets

curl "https://api.oanor.com/internetdb-api/v1/vulns" \
  -H "x-oanor-key: oanor_test_..."
await fetch("https://api.oanor.com/internetdb-api/v1/vulns", {
  headers: { "x-oanor-key": "oanor_test_..." }
});
$ch = curl_init("https://api.oanor.com/internetdb-api/v1/vulns");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);
import requests
requests.get(
    "https://api.oanor.com/internetdb-api/v1/vulns",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "ip": "8.8.8.8",
        "note": "No known CVEs observed by Shodan for this host (absence of evidence is not evidence of absence).",
        "vulns": [],
        "open_ports": [
            53,
            443
        ],
        "vuln_count": 0,
        "vulnerable": false,
        "queried_host": null
    },
    "meta": {
        "timestamp": "2026-06-01T16:22:46.630Z",
        "request_id": "75adb8f0-23d5-47eb-8127-da2703707d2b"
    },
    "status": "ok",
    "message": "Vulnerabilities retrieved",
    "success": true
}