CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 9,520| Thing | Type | Platform | Date |
|---|---|---|---|
| Microsoft Windows Race Condition Vulnerability CVE-2025-62215 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2025-11-12 |
| Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability CVE-2025-24054 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2025-04-17 |
| Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21333 · CISA Known Exploited Vulnerabilities, Exploit-DB | local | windows | 2025-01-14 |
| GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE) CVE-2025-26264 · Exploit-DB | remote | windows | 2025-08-26 |
| GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure CVE-2025-26263 · Exploit-DB | local | windows | 2025-08-26 |
| Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure CVE-2025-50154 · Exploit-DB | remote | windows | 2025-08-18 |
| Ivanti Avalanche MDM Buffer Overflow CVE-2023-32560 · Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2023-08-14 |
| Google Chromium Mojo Sandbox Escape Vulnerability CVE-2025-2783 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB | webapps | windows | 2025-03-25 |
| Microsoft Windows - Storage QoS Filter Driver Checker CVE-2025-49730 · Exploit-DB | local | windows | 2025-08-11 |
| Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure CVE-2025-49741 · Exploit-DB | remote | windows | 2025-08-03 |
| Greenshot .NET Deserialization Fileformat Exploit CVE-2023-34634 · Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2023-07-26 |
| Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE) CVE-2025-49683 · Exploit-DB | local | windows | 2025-08-03 |
| Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS) CVE-2015-6176 · Exploit-DB | remote | windows | 2025-07-22 |
| Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege CVE-2025-49677 · Exploit-DB | local | windows | 2025-07-16 |
| Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges CVE-2025-49744 · Exploit-DB | local | windows | 2025-07-16 |
| Microsoft Outlook - Remote Code Execution (RCE) CVE-2025-47171 · Exploit-DB | remote | windows | 2025-07-08 |
| Microsoft PowerPoint 2019 - Remote Code Execution (RCE) CVE-2025-47175 · Exploit-DB | remote | windows | 2025-07-08 |
| Microsoft SharePoint 2019 - NTLM Authentication CVE-2025-47166 · Exploit-DB | remote | windows | 2025-07-02 |
| Microsoft Excel 2024 Use after free - Remote Code Execution (RCE) CVE-2025-47165 · Exploit-DB | remote | windows | 2025-06-26 |
| freeSSHd 1.0.9 - Denial of Service (DoS) CVE-2024-0723 · Exploit-DB | remote | windows | 2025-06-26 |
| Microsoft Excel LTSC 2024 - Remote Code Execution (RCE) CVE-2025-47957 · Exploit-DB | local | windows | 2025-06-20 |
| Microsoft Excel Use After Free - Local Code Execution CVE-2025-27751 · Exploit-DB | local | windows | 2025-06-15 |
| WebDAV Windows 10 - Remote Code Execution (RCE) · Exploit-DB | remote | windows | 2025-06-15 |
| PCMan FTP Server 2.0.7 - Buffer Overflow CVE-2025-4255 · Exploit-DB | remote | windows | 2025-06-15 |
| Microsoft Windows SMB Client Improper Access Control Vulnerability CVE-2025-33073 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | windows | 2025-06-15 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10