CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 170| Thing | Type | Platform | Date |
|---|---|---|---|
| Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability CVE-2017-0143 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2017-03-14 |
| Microsoft SMBv1 Remote Code Execution Vulnerability CVE-2017-0144 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | remote | Windows / windows / windows_x86-64 | 2017-03-14 |
| Microsoft SMBv1 Remote Code Execution Vulnerability CVE-2017-0145 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2017-03-14 |
| Microsoft Windows SMB Remote Code Execution Vulnerability CVE-2017-0146 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2017-03-14 |
| Microsoft Windows SMBv1 Information Disclosure Vulnerability CVE-2017-0147 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | dos | Windows / windows | 2017-03-14 |
| Microsoft SMBv1 Server Remote Code Execution Vulnerability CVE-2017-0148 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | remote | Windows / windows / windows_x86-64 | 2017-03-14 |
| Microsoft Windows - 'nt!NtQueryAttributesFile' Kernel Stack Memory Disclosure CVE-2018-0969 · Exploit-DB · matched kernel | dos | windows | 2018-04-16 |
| Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation CVE-2008-3158 · Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2008-06-26 |
| Microsoft Windows - 'nt!NtQueryFullAttributesFile' Kernel Stack Memory Disclosure CVE-2018-0975 · Exploit-DB · matched kernel | dos | windows | 2018-04-16 |
| Microsoft Windows POP/MOV SS Local Privilege Elevation Vulnerability CVE-2018-8897 · Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2018-05-08 |
| Microsoft Windows - 'nt!NtQueryVolumeInformationFile' Kernel Stack Memory Disclosure CVE-2018-0970 · Exploit-DB · matched kernel | dos | windows | 2018-04-16 |
| Microsoft Win32k Privilege Escalation Vulnerability CVE-2018-8120 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | local | Windows / windows | 2018-05-09 |
| Microsoft Windows - 'win32k!ClientPrinterThunk' Kernel Stack Memory Disclosure · Exploit-DB · matched kernel | dos | windows | 2017-06-22 |
| Ancillary Function Driver (AFD) for WinSock Elevation of Privilege CVE-2023-21768 · Metasploit exploit modules · matched kernel | — | Windows | 2023-01-10 |
| Microsoft Windows - 'win32k!NtGdiEnumFonts' Kernel Pool Memory Disclosure CVE-2017-8490 · Exploit-DB · matched kernel | dos | windows | 2017-06-21 |
| Microsoft Win32k Privilege Escalation Vulnerability CVE-2020-1054 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2020-02-20 |
| Microsoft Windows - 'win32k!NtGdiExtGetObjectW' Kernel Stack Memory Disclosure CVE-2017-8470 · Exploit-DB · matched kernel | dos | windows | 2017-06-22 |
| Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability CVE-2010-3962 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB · matched kernel | dos | Windows / windows | 2010-11-03 |
| Microsoft Windows - 'win32k!NtGdiGetOutlineTextMetricsInternalW' Kernel Pool Memory Disclosure CVE-2017-8484 · Exploit-DB · matched kernel | dos | windows | 2017-06-21 |
| MS13-005 HWND_BROADCAST Low to Medium Integrity Privilege Escalation CVE-2013-0008 · Metasploit exploit modules, Exploit-DB · matched kernel | dos | Windows / windows | 2012-11-27 |
| Microsoft Windows - 'win32k!NtGdiGetOutlineTextMetricsInternalW' Kernel Stack Memory Disclosure CVE-2017-8471 · Exploit-DB · matched kernel | dos | windows | 2017-06-22 |
| CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP CVE-2020-17136 · Metasploit exploit modules · matched kernel | — | Windows | 2020-03-10 |
| Microsoft Windows - 'win32k!NtGdiGetRealizationInfo' Kernel Stack Memory Disclosure CVE-2017-8473 · Exploit-DB · matched kernel | dos | windows | 2017-06-22 |
| Microsoft Windows Win32k Privilege Escalation Vulnerability CVE-2021-40449 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules · matched kernel | — | Windows | 2021-10-12 |
| Microsoft Windows - 'win32k!NtGdiGetTextMetricsW' Kernel Stack Memory Disclosure CVE-2017-8472 · Exploit-DB · matched kernel | dos | windows | 2017-06-22 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10