CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 60| Thing | Type | Platform | Date |
|---|---|---|---|
| Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | webapps | Linux / multiple | 2025-08-28 |
| Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2025-06-30 |
| GNU InetUtils Argument Injection Vulnerability CVE-2026-24061 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2026-01-21 |
| GNU C Library Buffer Overflow Vulnerability CVE-2023-4911 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2023-10-03 |
| CWP Control Web Panel OS Command Injection Vulnerability CVE-2022-44877 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / linux / php | 2023-01-05 |
| Linux Kernel Privilege Escalation Vulnerability CVE-2022-0847 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2022-02-20 |
| Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2022-01-25 |
| ExifTool Remote Code Execution Vulnerability CVE-2021-22204 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | local | Unix / linux | 2021-05-24 |
| Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-24706 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux,Unix,Windows / linux | 2022-01-21 |
| Linux Kernel Heap Out-of-Bounds Write Vulnerability CVE-2021-22555 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2021-07-07 |
| Linux Kernel Improper Privilege Management Vulnerability CVE-2019-13272 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | local | Linux / linux | 2019-07-04 |
| Sonatype Nexus Repository Remote Code Execution Vulnerability CVE-2020-10199 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Linux / java / linux | 2020-03-31 |
| Red Hat Polkit Incorrect Authorization Vulnerability CVE-2021-3560 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | local | Linux,Unix / linux | 2021-06-03 |
| Exim Mail Transfer Agent (MTA) Improper Input Validation CVE-2019-10149 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Linux / linux | 2019-06-05 |
| Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference CVE-2019-9670 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Linux / linux | 2019-03-13 |
| Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability CVE-2019-9621 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Linux / jsp / linux | 2019-03-13 |
| Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability CVE-2019-1653 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Linux / hardware | 2018-09-09 |
| Cisco Small Business Routers Improper Input Validation Vulnerability CVE-2019-1652 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | webapps | Linux / hardware | 2018-09-09 |
| Oracle Business Intelligence Enterprise Edition Path Transversal CVE-2020-14864 · CISA Known Exploited Vulnerabilities, Exploit-DB | webapps | linux | 2020-10-28 |
| F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability CVE-2020-5902 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware / linux | 2020-06-30 |
| Unraid Authentication Bypass Vulnerability CVE-2020-5849 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | linux | 2020-04-20 |
| Unraid Remote Code Execution Vulnerability CVE-2020-5847 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | PHP / linux | 2020-02-10 |
| PHPMailer Command Injection Vulnerability CVE-2016-10033 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Linux / PHP / linux / php | 2016-12-25 |
| Jenkins Remote Code Execution Vulnerability CVE-2017-1000353 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | dos | Linux / java | 2017-04-26 |
| ThinkPHP Remote Code Execution Vulnerability CVE-2019-9082 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | linux | 2019-03-04 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10