The Design and Implementation of laffer1

Apparently, they created a REST API 2 years ago and set a date for deprecating the feed in the past.

https://csrc.nist.gov/CSRC/media/Projects/National-Vulnerability-Database/documents/web%20service%20documentation/Automation%20Support%20for%20CVE%20Retrieval.pdf

This is a bit of a problem for the security advisory app.  The design was always pretty terrible but a workaround for the nvd json feed being in YEARS.  The firewall seems to block a lot of the requests and they don't give useful error messges or even a proper error code when it doesn't work.

Here's an example of a REST call in their new API

https://services.nvd.nist.gov/rest/json/cves/1.0?modStartDate=2019-01-01T00:00:00:000%20UTC-05:00

The date format on the end is horrible. 

it seems to barf on friendly name variants too like EST.