diff --git a/docs/guides/advanced_search.md b/docs/guides/advanced_search.md index 2dac4d2..5eccbab 100644 --- a/docs/guides/advanced_search.md +++ b/docs/guides/advanced_search.md @@ -55,6 +55,8 @@ The currently supported fields are: - **project** – Search using the vendors and products subscribed in a project. - **kev** – Search based on the KEV catalog. Accepts `true` or `false`. - **epss** – Search based on EPSS score. Accepts a percentage (e.g., `epss:80`) or a decimal between 0 and 1 (e.g., `epss:'0.8'`). +- **created** - Search by CVE creation date. +- **updated** - Search by CVE last modification date. !!! important Each field supports specific operators to refine your queries effectively: @@ -63,6 +65,7 @@ The currently supported fields are: - `:` performs a partial (LIKE) search. - `=` performs an exact match search. - Metrics fields (**cvss20**, **cvss30**, **cvss31**, **cvss40**, **epss**) support the following comparison operators: `>`, `>=`, `<`, `<=`, `=`. + - Date fields (**created**, **updated**) also support comparison operators (`>`, `>=`, `<`, `<=`, `=`). They accept a specific date in `YYYY-MM-DD` format or a relative date (e.g., `7d` for 7 days, `1m` for 1 month, or `1y` for 1 year). - **vendor**, **product**, **userTag** and **kev** fields only support the `:` operator. By using fields and operators, you can fine-tune your searches to quickly find relevant CVEs based on your needs. @@ -121,6 +124,18 @@ To search all CVEs related to the vendors and products subscribed to in a projec project:my-project AND epss>=80 ``` +To search for all CVEs created in the last 7 days and updated in the last 1 day: + +``` +created<=7d AND updated<=1d +``` + +To search for all Apache CVEs created in October 2025: + +``` +vendor:apache AND created>=2025-10-01 AND created<=2025-10-31 +``` + !!! tip Using the `project` field is convenient, as it automatically expands to include all the vendors and products your project is subscribed to.