CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 9,872| Thing | Type | Platform | Date |
|---|---|---|---|
| Next.js Unauthenticated RCE on Windows Servers CVE-2026-75604 · Metasploit exploit modules | — | Windows | 2026-08-26 |
| Ecava_ntegraXor IGX_16.0.701.10 - RCE · Exploit-DB | remote | windows | 2026-10-01 |
| Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability CVE-2025-59287 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2025-10-14 |
| PCMan 2.0.7 - Buffer Overflow CVE-2025-4871 · Exploit-DB | remote | windows | 2026-08-18 |
| Commvault Command-Line Argument Injection to Traversal Remote Code Execution CVE-2025-57790 · Metasploit exploit modules | — | Windows | 2025-08-19 |
| Commvault Command-Line Argument Injection to Traversal Remote Code Execution CVE-2025-57791 · Metasploit exploit modules | — | Windows | 2025-08-19 |
| Commvault Command-Line Argument Injection to Traversal Remote Code Execution CVE-2025-57788 · Metasploit exploit modules | — | Windows | 2025-08-19 |
| NanaZip 6.5 - DoS CVE-2026-55780 · Exploit-DB | dos | windows | 2026-08-17 |
| Microsoft SharePoint Code Injection Vulnerability CVE-2025-49704 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2025-07-08 |
| Microsoft SharePoint Improper Authentication Vulnerability CVE-2025-49706 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2025-07-08 |
| Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2025-53770 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2025-07-08 |
| Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell) CVE-2025-53771 · Metasploit exploit modules | — | Windows | 2025-07-08 |
| ProtonVPN v4.4.1 - Unquoted Service Path · Exploit-DB | local | windows | 2026-07-07 |
| Sitecore XP CVE-2025-34510 Post-Authentication Remote Code Execution CVE-2025-34510 · Metasploit exploit modules | — | Windows | 2025-06-17 |
| MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation CVE-2026-36213 · Exploit-DB | local | windows | 2026-07-06 |
| Sitecore XP CVE-2025-34511 Post-Authentication File Upload CVE-2025-34511 · Metasploit exploit modules | — | Windows | 2025-06-17 |
| Windows Defender (MsMpEng.exe) - Race Condition · Exploit-DB | local | windows | 2026-07-06 |
| Microsoft Windows External Control of File Name or Path Vulnerability CVE-2025-33053 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2025-06-10 |
| Notepad++ 8.9.6 - Arbitrary Code Execution CVE-2026-48778 · Exploit-DB | remote | windows | 2026-05-30 |
| Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution · Metasploit exploit modules | — | Windows | 2025-05-30 |
| Microsoft Windows Protection Mechanism Failure Vulnerability CVE-2026-32202 · CISA Known Exploited Vulnerabilities, Exploit-DB | remote | windows | 2026-04-28 |
| Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Windows | 2024-08-12 |
| Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path · Exploit-DB | local | windows | 2026-05-21 |
| Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability CVE-2025-30406 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Windows | 2025-04-03 |
| Windows Snipping Tool - NTLMv2 Hash Hijack CVE-2026-33829 · Exploit-DB | local | windows | 2026-05-15 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10