CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12661 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 2,298| Thing | Type | Platform | Date |
|---|---|---|---|
| Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass · Exploit-DB | remote | hardware | 2024-04-08 |
| GL-iNet MT6000 4.5.5 - Arbitrary File Download CVE-2024-27356 · Exploit-DB | remote | hardware | 2024-04-02 |
| RouterOS 6.40.5 - 6.44 and 6.48.1 - 6.49.10 - Denial of Service · Exploit-DB | dos | hardware | 2024-03-28 |
| Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure · Exploit-DB | remote | hardware | 2024-03-28 |
| HNAS SMU 14.8.7825 - Information Disclosure CVE-2023-6538 · Exploit-DB | remote | hardware | 2024-03-20 |
| TELSAT marKoni FM Transmitter 1.9.5 - Insecure Access Control Change Password · Exploit-DB | remote | hardware | 2024-03-18 |
| TELSAT marKoni FM Transmitter 1.9.5 - Root Command Injection · Exploit-DB | remote | hardware | 2024-03-18 |
| TELSAT marKoni FM Transmitter 1.9.5 - Backdoor Account Information Disclosure · Exploit-DB | remote | hardware | 2024-03-18 |
| Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE) · Exploit-DB | remote | hardware | 2024-03-14 |
| Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE) CVE-2023-3710 · Exploit-DB | remote | hardware | 2024-03-14 |
| SolarView Compact 6.00 - Command Injection CVE-2023-23333 · Exploit-DB, Metasploit exploit modules | remote | Linux,PHP,Unix / hardware | 2023-05-15 |
| Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE) CVE-2023-5702 · Exploit-DB | remote | hardware | 2024-03-14 |
| Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE) CVE-2023-5222 · Exploit-DB | remote | hardware | 2024-03-14 |
| Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE · Exploit-DB | webapps | hardware | 2024-03-12 |
| Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR · Exploit-DB | webapps | hardware | 2024-03-11 |
| TP-Link TL-WR740N - Buffer Overflow 'DOS' · Exploit-DB | webapps | hardware | 2024-03-10 |
| GLiNet - Router Authentication Bypass · Exploit-DB | webapps | hardware | 2024-03-06 |
| Solar-Log 200 PM+ 3.6.0 Build 99 - 15.10.2019 - Stored XSS · Exploit-DB | webapps | hardware | 2024-03-05 |
| TitanNit Web Control 2.01 / Atemio 7600 - Root Remote Code Execution · Exploit-DB | remote | hardware | 2024-03-03 |
| GL.iNet AR300M v3.216 Remote Code Execution - CVE-2023-46456 Exploit · Exploit-DB | remote | hardware | 2024-03-03 |
| TPC-110W - Missing Authentication for Critical Function · Exploit-DB | remote | hardware | 2024-03-03 |
| GL.iNet AR300M v4.3.7 Remote Code Execution - CVE-2023-46454 Exploit · Exploit-DB | remote | hardware | 2024-03-03 |
| R Radio Network FM Transmitter 1.07 system.cgi - Password Disclosure · Exploit-DB | remote | hardware | 2024-03-03 |
| GL.iNet AR300M v4.3.7 Arbitrary File Read - CVE-2023-46455 Exploit · Exploit-DB | remote | hardware | 2024-03-03 |
| Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated) · Exploit-DB | remote | hardware | 2024-03-03 |
Facets
Platform 49396 of 99440 claims
hardware2181
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19488
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6049
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10