{
 "page": "https://tools.openkrill.app/compare/cve-lookup-tools",
 "checked": "2026-10-13",
 "tests": [
  {
   "label": "cve",
   "question": "Is this CVE in CISA KEV, and what is its CVSS base score?",
   "inputs": [
    {
     "input": "CVE-2021-44228",
     "truth": "KEV yes (added 2021-12-10); CVSS 3.1 base 10.0 (NVD)",
     "sources": [
      "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "https://nvd.nist.gov/vuln/detail/CVE-2021-44228"
     ]
    },
    {
     "input": "CVE-2024-3400",
     "truth": "KEV yes (added 2024-04-12); CVSS 3.1 base 10.0 (NVD and Palo Alto Networks)",
     "sources": [
      "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "https://nvd.nist.gov/vuln/detail/CVE-2024-3400"
     ]
    },
    {
     "input": "CVE-2024-6387",
     "truth": "KEV no; CVSS 3.1 base 8.1 (NVD and Red Hat)",
     "sources": [
      "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "https://nvd.nist.gov/vuln/detail/CVE-2024-6387"
     ]
    },
    {
     "input": "CVE-2023-22894",
     "truth": "KEV yes, added 2026-10-08 (an old CVE added last week); CVSS 3.1 base 4.9 from NVD, 7.2 from CISA-ADP",
     "sources": [
      "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "https://nvd.nist.gov/vuln/detail/CVE-2023-22894"
     ]
    },
    {
     "input": "CVE-2026-88779",
     "truth": "KEV yes (added 2026-10-04); CVSS 3.1 base 7.5 from NVD, CVSS 4.0 base 8.7 from Citrix (CNA)",
     "sources": [
      "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-88779"
     ]
    }
   ],
   "scoring": "A score counts when it equals a CVSS base score that the NVD record lists for the CVSS version the tool names (NVD's own score or a CNA or CISA-ADP score shown in the record). KEV must match the CISA feed of 2026-10-08 (catalogVersion 2026.10.08)."
  }
 ],
 "results": [
  {
   "name": "Snyk Open Source",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "needs an account",
     "inScope": null
    }
   ]
  },
  {
   "name": "cve-mcp (badchars)",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "local install only",
     "inScope": null
    }
   ]
  },
  {
   "name": "CVE MCP Server (mukul975)",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "local install only",
     "inScope": null
    }
   ]
  },
  {
   "name": "Vulnerability Intelligence MCP (thinkchainai)",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "local install only",
     "inScope": null
    }
   ]
  },
  {
   "name": "cve-mcp-server (K4PXD)",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "local install only",
     "inScope": null
    }
   ]
  },
  {
   "name": "CVE Prioritizer",
   "ours": false,
   "tests": [
    {
     "tested": false,
     "correct": null,
     "answered": null,
     "medianMs": null,
     "how": null,
     "notes": "local install only",
     "inScope": null
    }
   ]
  },
  {
   "name": "OpenCVE",
   "ours": false,
   "tests": [
    {
     "tested": true,
     "correct": 5,
     "answered": 5,
     "medianMs": 1616,
     "inScope": null,
     "how": "web page fetch https://app.opencve.io/cve/<id>, no sign-in",
     "notes": "All 5 right; on CVE-2023-22894 its headline score is the CISA-ADP 7.2, not the NVD 4.9."
    }
   ]
  },
  {
   "name": "CVE Risk Check",
   "ours": true,
   "tests": [
    {
     "tested": true,
     "correct": 4,
     "answered": 4,
     "medianMs": 8792,
     "inScope": null,
     "how": "remote MCP tools/call check_cve at https://cve.openkrill.app/mcp",
     "notes": "All 4 answers were right, with the new KEV add for CVE-2023-22894; the CVE-2024-3400 call returned nothing after 19 s."
    }
   ]
  }
 ]
}