CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 757| Thing | Type | Platform | Date |
|---|---|---|---|
| Citrix SD-WAN and NetScaler SQL Injection Vulnerability CVE-2019-12989 · CISA Known Exploited Vulnerabilities, Exploit-DB | webapps | cgi | 2019-07-12 |
| Master IP CAM 01 3.3.4.2103 - Remote Command Execution CVE-2019-8387 · Exploit-DB | webapps | cgi | 2019-02-18 |
| IPFire 2.21 - Cross-Site Scripting · Exploit-DB | webapps | cgi | 2019-02-11 |
| Smoothwall Express 3.1-SP4 - Cross-Site Scripting · Exploit-DB | webapps | cgi | 2019-02-11 |
| SirsiDynix e-Library 3.5.x - Cross-Site Scripting CVE-2018-20503 · Exploit-DB | webapps | cgi | 2019-01-24 |
| Webmin 1.900 - Remote Command Execution (Metasploit) CVE-2019-9624 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi | 2019-01-17 |
| AudioCode 400HD - Command Injection CVE-2018-10093 · Exploit-DB | webapps | cgi | 2019-01-14 |
| PLC Wireless Router GPN2.4P21-C-CN - Cross-Site Scripting CVE-2018-20326 · Exploit-DB | webapps | cgi | 2019-01-07 |
| Synaccess netBooter NP-02x/NP-08x 6.8 - Authentication Bypass · Exploit-DB | webapps | cgi | 2018-11-30 |
| ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection CVE-2018-11511 · Exploit-DB | webapps | cgi | 2018-08-15 |
| ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection CVE-2018-11510 · Exploit-DB | webapps | cgi | 2018-08-15 |
| ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection CVE-2018-11509 · Exploit-DB | webapps | cgi | 2018-08-15 |
| cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal · Exploit-DB | webapps | cgi | 2018-08-03 |
| Homematic CCU2 2.29.23 - Arbitrary File Write CVE-2018-7300 · Exploit-DB | webapps | cgi | 2018-03-30 |
| Homematic CCU2 2.29.23 - Remote Command Execution CVE-2018-7297 · Exploit-DB | webapps | cgi | 2018-03-30 |
| Synology DiskStation Manager (DSM) < 6.1.3-15152 - 'forget_passwd.cgi' User Enumeration CVE-2017-9554 · Exploit-DB | webapps | cgi | 2018-01-08 |
| Cambium ePMP1000 - 'get_chart' Shell via Command Injection (Metasploit) CVE-2017-5255 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi | 2015-11-28 |
| ITGuard-Manager 0.0.0.1 - Remote Code Execution · Exploit-DB | webapps | cgi | 2017-12-15 |
| Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read CVE-2017-16787 · Exploit-DB | webapps | cgi | 2017-12-13 |
| LaCie 5big Network 2.2.8 - Command Injection · Exploit-DB | remote | cgi | 2017-12-07 |
| Synology StorageManager 5.2 - Root Remote Command Execution · Exploit-DB | webapps | cgi | 2017-11-28 |
| Linksys E Series - Multiple Vulnerabilities · Exploit-DB | webapps | cgi | 2017-10-18 |
| Webmin 1.850 - Multiple Vulnerabilities CVE-2017-15646 · Exploit-DB | webapps | cgi | 2017-10-15 |
| Webmin 1.850 - Multiple Vulnerabilities CVE-2017-15645 · Exploit-DB | webapps | cgi | 2017-10-15 |
| Webmin 1.850 - Multiple Vulnerabilities CVE-2017-15644 · Exploit-DB | webapps | cgi | 2017-10-15 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10