CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12674 · Red Hat 19828 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 1,449| Thing | Type | Platform | Date |
|---|---|---|---|
| JitBit HelpDesk < 9.0.2 - Authentication Bypass · Exploit-DB | webapps | asp | 2017-09-22 |
| Digileave 1.2 - Cross-Site Request Forgery (Update Admin) · Exploit-DB | webapps | asp | 2017-09-18 |
| Digirez 3.4 - Cross-Site Request Forgery (Update Admin) · Exploit-DB | webapps | asp | 2017-09-18 |
| DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin) · Exploit-DB | webapps | asp | 2017-09-18 |
| ICAffiliateTracking 1.1 - Authentication Bypass · Exploit-DB | webapps | asp | 2017-09-13 |
| Sitefinity CMS 9.2 - Cross-Site Scripting · Exploit-DB | webapps | asp | 2017-08-31 |
| Kronos Telestaff < 2.92EU29 - SQL Injection · Exploit-DB | webapps | asp | 2017-06-05 |
| Cisco EPC 3925 - Multiple Vulnerabilities · Exploit-DB | webapps | asp | 2016-09-15 |
| Cisco EPC 3928 - Multiple Vulnerabilities CVE-2016-1337 · Exploit-DB | webapps | asp | 2016-06-07 |
| Cisco EPC 3928 - Multiple Vulnerabilities CVE-2016-1336 · Exploit-DB | webapps | asp | 2016-06-07 |
| Cisco EPC 3928 - Multiple Vulnerabilities CVE-2016-1328 · Exploit-DB | webapps | asp | 2016-06-07 |
| Cisco EPC 3928 - Multiple Vulnerabilities CVE-2015-6402 · Exploit-DB | webapps | asp | 2016-06-07 |
| Cisco EPC 3928 - Multiple Vulnerabilities CVE-2015-6401 · Exploit-DB | webapps | asp | 2016-06-07 |
| Notilus Travel Solution Software 2012 R3 - SQL Injection · Exploit-DB | webapps | asp | 2016-06-06 |
| AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection · Exploit-DB | webapps | asp | 2016-05-24 |
| DotNetNuke 07.04.00 - Administration Authentication Bypass CVE-2015-2794 · Exploit-DB | webapps | asp | 2016-05-06 |
| Thru Managed File Transfer Portal 9.0.2 - SQL Injection · Exploit-DB | webapps | asp | 2016-02-22 |
| WhatsUp Gold 16.3 - Remote Code Execution CVE-2015-8261 · Exploit-DB | webapps | asp | 2016-01-13 |
| Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2) CVE-2015-6922 · Exploit-DB, Metasploit exploit modules | remote | Windows / asp / windows | 2015-09-23 |
| Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2) CVE-2015-6589 · Exploit-DB | webapps | asp | 2015-09-28 |
| Vifi Radio 1.0 - Cross-Site Request Forgery · Exploit-DB | webapps | asp | 2015-08-20 |
| Orchard CMS 1.7.3/1.8.2/1.9.0 - Persistent Cross-Site Scripting CVE-2015-5520 · Exploit-DB | webapps | asp | 2015-07-08 |
| C2Box 4.0.0(r19171) - Cross-Site Request Forgery CVE-2015-4460 · Exploit-DB | webapps | asp | 2015-06-30 |
| HttpCombiner ASP.NET - Remote File Disclosure · Exploit-DB | webapps | asp | 2014-10-07 |
| Epicor Enterprise 7.4 - Multiple Vulnerabilities CVE-2014-4312 · Exploit-DB | webapps | asp | 2014-10-02 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22765
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19632
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6144
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10