CVE Scanner CLI for Windows
<h2>Terminal CVE lookup and dependency audits for security teams</h2>
- Free
- 4.9
- 1
- V 1.2.0
<h2>Terminal CVE lookup and dependency audits for security teams</h2>
Try CVE Scanner CLI by DebaA17, a command-line utility for searching and analyzing Common Vulnerabilities and Exposures across public feeds. The tool performs fast CVE lookups and formats CVSS scores and severity levels into readable terminal panels for quick triage. It pulls data from multiple public vulnerability sources and displays color-coded tables. Security researchers, developers, and DevSecOps professionals get a scriptable, terminal-native method to check vulnerabilities during development or incident response.
It consolidates multiple public vulnerability feeds into one terminal report
CVE Scanner CLI queries the National Vulnerability Database, OSV.dev, and cve.circl.lu and merges results into a single output. Key capabilities include automated CVE ID lookup with database fallback, keyword searching of NVD entries, and dependency auditing that scans manifest files such as requirements.txt. Advanced filtering by year, minimum CVSS score, and severity lets analysts narrow results before exporting or inspecting details.
It stays lightweight and fits scripted workflows
Designed for quick lookups, the tool is packaged for Winget on Windows and can run from a local Python 3.7+ environment or inside Docker. The developer notes the utility is optimised for minimal resource consumption compared with GUI scanners, which makes it suitable for background queries, CI pipeline steps, or chained command-line workflows that feed results into other tools.
It renders vulnerability data into navigable, color-coded terminal dashboards
The tool uses the rich library to present entries in color-coded panels and paginated tables, and it provides an interactive menu for selecting CVEs to view full details. An --open flag launches the official CVE page in the default browser when needed, helping analysts move from terminal summary to authoritative sources without manually copying identifiers.
It targets technical users but eases common tasks with interactive controls
Built for security analysts, penetration testers, and developers, the app supports both quick one-off queries and dependency audits for projects. The interactive UI reduces the initial command-line friction, however advanced filtering, manifest scanning, and integration into automated pipelines require familiarity with CLI conventions and package manager installation on each platform.
Reliable command-line choice for technical teams, with a single practical caveat
CVE Scanner CLI is a practical option for security-focused teams who need fast, scriptable CVE lookups and dependency audits from the terminal. Its strengths are unified feeds, readable terminal dashboards, and package-manager distribution across platforms. The main caveat is that advanced auditing and filtering assume command-line experience, so less technical users may need time to adapt before using it in production workflows.
Pros
- Aggregates NVD, OSV.dev and cve.circl.lu into single queries
- Dependency auditing scans manifest files like requirements.txt
- Color-coded tables and panels using the rich library
- Available via Winget, Homebrew, Snap, Docker, or Python install
Cons
- Advanced filtering and audits require command-line familiarity
- Coverage depends on the external vulnerability feeds it queries
- Requires Python 3.7+ or container runtime for local installs
- No graphical interface for non-terminal workflows
CVE Scanner CLI for PC
- Free
- 4.9
- 1
- V 1.2.0