CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12675 · Red Hat 19828 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 207| Thing | Type | Platform | Date |
|---|---|---|---|
| Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-47966 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Java,Linux,Unix,Windows | 2023-01-10 |
| Microsoft Exchange Server Server-Side Request Forgery Vulnerability CVE-2022-41040 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-09-28 |
| Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2022-41082 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-09-28 |
| Microsoft Windows SMB Client Improper Access Control Vulnerability CVE-2025-33073 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | windows | 2025-06-15 |
| Microsoft Windows Scripting Engine Type Confusion Vulnerability CVE-2025-30397 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | windows | 2025-05-13 |
| Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CVE-2022-35405 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-06-24 |
| Microsoft Win32K Privilege Escalation Vulnerability CVE-2023-29336 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2023-05-09 |
| Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CVE-2022-30190 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-05-29 |
| Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability CVE-2022-28810 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-04-09 |
| Microsoft Windows User Profile Service Privilege Escalation Vulnerability CVE-2022-26904 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-03-17 |
| Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability CVE-2024-38193 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2024-08-13 |
| Microsoft Windows Print Spooler Privilege Escalation Vulnerability CVE-2022-21999 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2022-02-08 |
| Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-42321 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-11-17 |
| Ajax.NET Professional Deserialization of Untrusted Data Vulnerability CVE-2021-23758 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-12-03 |
| Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability CVE-2024-21338 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2024-03-04 |
| Sitecore XP Remote Command Execution Vulnerability CVE-2021-42237 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-11-02 |
| Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability CVE-2024-49138 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2024-12-10 |
| Microsoft Windows Win32k Privilege Escalation Vulnerability CVE-2021-40449 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-10-12 |
| Fortinet Multiple Products Authentication Bypass Vulnerability CVE-2022-40684 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux,Unix / multiple / windows | 2022-10-10 |
| Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-09-23 |
| Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability CVE-2021-44077 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-09-16 |
| Microsoft Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-1675 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-06-08 |
| Microsoft Windows Print Spooler Remote Code Execution Vulnerability CVE-2021-34527 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-06-08 |
| Dell dbutil Driver Insufficient Access Control Vulnerability CVE-2021-21551 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2021-05-04 |
| Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-34473 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2021-04-06 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22765
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19617
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6128
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10