CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12654 · Red Hat 19885 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–50 of 371| Thing | Type | Platform | Date |
|---|---|---|---|
| runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue. CVE-2024-21626 · NVD, Metasploit exploit modules | — | Linux | 2024-01-31 |
| Netis router MW5360 unauthenticated RCE. CVE-2024-22729 · Metasploit exploit modules | — | Linux | 2024-01-11 |
| OpenTSDB 2.4.1 unauthenticated command injection CVE-2023-36812 · Metasploit exploit modules | — | Linux | 2023-07-01 |
| OpenTSDB 2.4.1 unauthenticated command injection CVE-2023-25826 · Metasploit exploit modules | — | Linux | 2023-07-01 |
| OpenNMS Horizon Authenticated RCE CVE-2023-40315 · Metasploit exploit modules | — | Linux | 2023-07-01 |
| OpenNMS Horizon Authenticated RCE CVE-2023-0872 · Metasploit exploit modules | — | Linux | 2023-07-01 |
| Linux Kernel Improper Ownership Management Vulnerability CVE-2023-0386 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux | 2023-03-22 |
| VMware vRealize Log Insight Unauthenticated RCE CVE-2022-31706 · Metasploit exploit modules | — | Linux | 2023-01-24 |
| VMware vRealize Log Insight Unauthenticated RCE CVE-2022-31704 · Metasploit exploit modules | — | Linux | 2023-01-24 |
| VMware vRealize Log Insight Unauthenticated RCE CVE-2022-31711 · Metasploit exploit modules | — | Linux | 2023-01-24 |
| Sudoedit Extra Arguments Priv Esc CVE-2023-22809 · Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2023-01-18 |
| Zimbra sudo + postfix privilege escalation CVE-2022-3569 · Metasploit exploit modules | — | Linux | 2022-10-13 |
| Oracle E-Business Suite Unspecified Vulnerability CVE-2022-21587 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux | 2022-10-01 |
| Ubuntu Enlightenment Mount Priv Esc CVE-2022-37706 · Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2022-09-13 |
| Symmetricom SyncServer Unauthenticated Remote Command Execution CVE-2022-40022 · Metasploit exploit modules | — | Linux | 2022-08-31 |
| RARLAB UnRAR Directory Traversal Vulnerability CVE-2022-30333 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Linux | 2022-05-09 |
| Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CVE-2022-41352 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Linux | 2022-06-28 |
| Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CVE-2022-27925 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Linux | 2022-04-21 |
| Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CVE-2022-37042 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux | 2022-05-10 |
| io_uring Same Type Object Reuse Priv Esc CVE-2022-1043 · Metasploit exploit modules | — | Linux | 2022-03-22 |
| Linux Kernel Out-of-Bounds Write Vulnerability CVE-2022-0995 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux | 2022-03-14 |
| CWP Control Web Panel OS Command Injection Vulnerability CVE-2022-44877 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / linux / php | 2023-01-05 |
| Linux Kernel Privilege Escalation Vulnerability CVE-2022-0847 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2022-02-20 |
| Netfilter nft_set_elem_init Heap Overflow Privilege Escalation CVE-2022-34918 · Metasploit exploit modules | — | Linux | 2022-02-07 |
| Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20699 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux | 2022-02-02 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10