VARIoT IoT vulnerabilities and exploits databases API
Access the API
Access to the API is limited for not registerd users to 100 requests per day.
You can access the API without restrictions after registering with your email here.
API Key
To access the API without restrictions you must pass your token in the "Authorization" field of the requests's header:
curl -X GET 'https://www.variotdbs.pl/api/vulns/' -H 'Authorization: Token yourAuthorizationTokenGoesHere'
API endpoints
API has four endpoints:
- /api/vuln/<id>/?jsonld=false
- /api/vulns/?jsonld=false&since=1970-01-01&before=2099-01-01
- /api/exploit/<id>/?jsonld=false
- /api/exploits/?jsonld=false&since=1970-01-01&before=2099-01-01
vuln endpoint
vuln endpoint is used to retrive details of the single vulnerability. Query param can be omitted to get data in the JSON format./api/vuln/<id>/?jsonld=false
- <id>
- ID of the vulnerability to download. ID can be CVE or VARIoT identifier. Format of the VARIoT identifier is:
VAR-YEARMONTH-ENUMERATOR
e.g VAR-202103-0001 - jsonld
-
Switch to choose data output format. Default is
jsonld=false
jsonld=true
- result will be returned in JSON-LD format
jsonld=false
- result will be returned in JSON format
vulns endpoint
vulns endpoint is used to retrive details of many vulnerabilities matching criteria in the query. Query params can be omitted to obtain all the vulnerabilities in the JSON format./api/vulns/?jsonld=false&since=1970-01-01&before=2099-12-31
- jsonld
-
Switch to choose data output format. Default is
jsonld=false
jsonld=true
- result will be returned in JSON-LD format
jsonld=false
- result will be returned in JSON format
- since
-
Retrive vulnerabilities updated since the specified date (YEAR-MONTH-DAYT24H:MINUTES:SECONDS+TIMEZONE). For example:
since=1970-01-01T23:59:00+01:00
- before
-
Retrive vulnerabilities updated before the specified date. For example:
before=2099-12-31T23:59:00+01:00
exploit endpoint
exploit endpoint is used to retrive details of the single exploit. Query param can be omitted to get data in the JSON format./api/exploit/<id>/?jsonld=false
- <id>
- ID of the exploit to download. ID can be EXPLOIT-DB or VARIoT identifier. Format of the VARIoT identifier is:
VAR-E-YEARMONTH-ENUMERATOR
e.g VAR-E-202103-0001 - jsonld
-
Switch to choose data output format. Default is
jsonld=false
jsonld=true
- result will be returned in JSON-LD format
jsonld=false
- result will be returned in JSON format
exploits endpoint
exploits endpoint is used to retrive details of many exploits matching criteria in the query. Query params can be omitted to obtain all the exploits in the JSON format./api/exploits/?jsonld=false&since=1970-01-01&before=2099-12-31
- jsonld
-
Switch to choose data output format. Default is
jsonld=false
jsonld=true
- result will be returned in JSON-LD format
jsonld=false
- result will be returned in JSON format
- since
-
Retrive exploits updated since the specified date (YEAR-MONTH-DAYT24H:MINUTES:SECONDS+TIMEZONE). For example:
since=1970-01-01T23:59:00+01:00
- before
-
Retrive exploits updated before the specified date. For example:
before=2099-12-31T23:59:00+01:00
Example of the output
{
"count":17000,
"next":"https://www.variotdbs.pl/api/vulns/?jsonld=false&limit=100&offset=100",
"previous":null,
"results":[{…}]
}
- count
- Number of entries matching the query criteria
- next
- URL to retrive next portion of data
- previous
- URL to retrive previous portion of data
- results
- List of JSON documents with data