CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23131 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12667 · Red Hat 19884 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 1,449| Thing | Type | Platform | Date |
|---|---|---|---|
| InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal · Exploit-DB | webapps | asp | 2023-04-14 |
| ENTAB ERP 1.0 - Username PII leak CVE-2022-30076 · Exploit-DB | webapps | asp | 2023-04-08 |
| Snitz Forum v1.0 - Blind SQL Injection · Exploit-DB | webapps | asp | 2023-04-07 |
| EQ Enterprise management system v2.2.0 - SQL Injection CVE-2022-45297 · Exploit-DB | webapps | asp | 2023-03-31 |
| Password Manager for IIS v2.0 - XSS CVE-2022-36664 · Exploit-DB | webapps | asp | 2023-03-25 |
| wkhtmltopdf 0.12.6 - Server Side Request Forgery CVE-2022-35583 · Exploit-DB | webapps | asp | 2023-03-23 |
| Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated) · Exploit-DB | webapps | asp | 2021-10-25 |
| HelloWeb 2.0 - Arbitrary File Download · Exploit-DB | webapps | asp | 2020-07-10 |
| Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin) · Exploit-DB | webapps | asp | 2020-03-16 |
| OLK Web Store 2020 - Cross-Site Request Forgery · Exploit-DB | webapps | asp | 2020-01-24 |
| Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting CVE-2019-19368 · Exploit-DB | webapps | asp | 2019-12-18 |
| Crystal Live HTTP Server 6.01 - Directory Traversal · Exploit-DB | webapps | asp | 2019-11-18 |
| Web Wiz Forums 12.01 - 'PF' SQL Injection · Exploit-DB | webapps | asp | 2019-08-16 |
| microASP (Portal+) CMS - 'pagina.phtml?explode_tree' SQL Injection · Exploit-DB | webapps | asp | 2019-05-06 |
| Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow CVE-2018-19524 · Exploit-DB | dos | asp | 2019-02-12 |
| Advantech WebAccess SCADA 8.3.2 - Remote Code Execution CVE-2018-15707 · Exploit-DB | webapps | asp | 2018-11-05 |
| Advantech WebAccess SCADA 8.3.2 - Remote Code Execution CVE-2018-15705 · Exploit-DB | webapps | asp | 2018-11-05 |
| IssueTrak 7.0 - SQL Injection · Exploit-DB | webapps | asp | 2018-05-29 |
| ASP.NET jVideo Kit - 'query' SQL Injection · Exploit-DB | webapps | asp | 2018-05-24 |
| totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery CVE-2018-6563 · Exploit-DB | webapps | asp | 2018-05-16 |
| Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change · Exploit-DB | webapps | asp | 2018-03-30 |
| Tenda W316R Wireless Router 5.07.50 - Remote DNS Change · Exploit-DB | webapps | asp | 2018-03-30 |
| Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change · Exploit-DB | webapps | asp | 2018-03-30 |
| Tenda W3002R/A302/w309r Wireless Router v5.07.64_en - Remote DNS Change (PoC) · Exploit-DB | webapps | asp | 2018-03-30 |
| EPIC MyChart - X-Path Injection CVE-2016-6272 · Exploit-DB | webapps | asp | 2018-02-16 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10