CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 26| Thing | Type | Platform | Date |
|---|---|---|---|
| IPFire 2.25 - Remote Code Execution (Authenticated) CVE-2021-33393 · Exploit-DB, Metasploit exploit modules | webapps | Python / cgi | 2021-05-17 |
| Webmin 1.900 - Remote Command Execution (Metasploit) CVE-2019-9624 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi | 2019-01-17 |
| Cambium ePMP1000 - 'get_chart' Shell via Command Injection (Metasploit) CVE-2017-5255 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi | 2015-11-28 |
| NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Unix / cgi / hardware | 2017-02-25 |
| NETGEAR Multiple Routers Remote Code Execution Vulnerability CVE-2016-6277 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux / cgi | 2016-12-06 |
| dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting CVE-2017-6526 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / cgi | 2017-03-08 |
| NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Unix / cgi / hardware | 2016-12-20 |
| Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution CVE-2016-6433 · Exploit-DB, Metasploit exploit modules | remote | Linux / cgi / linux | 2016-10-05 |
| GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-6271 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | local | Linux / Linux,Unix / OSX / Unix / cgi / hardware / linux | 2014-09-24 |
| AirOS 6.x - Arbitrary File Upload CVE-2015-9266 · Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2016-02-13 |
| Endian Firewall < 3.0.0 - OS Command Injection (Metasploit) CVE-2015-5082 · Exploit-DB, Metasploit exploit modules | remote | Linux / cgi / linux | 2015-06-28 |
| HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit) CVE-2009-3999 · Exploit-DB, Metasploit exploit modules | remote | Windows / cgi | 2011-10-19 |
| CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit) CVE-2011-1653 · Exploit-DB, Metasploit exploit modules | webapps | Windows / cgi | 2011-04-13 |
| HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit) CVE-2009-3849 · Exploit-DB, Metasploit exploit modules | remote | Windows / cgi | 2009-12-09 |
| Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability CVE-2007-3010 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2007-09-09 |
| Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit) CVE-2009-2288 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi / unix | 2009-05-22 |
| DD-WRT HTTPd Daemon/Service - Arbitrary Command Execution (Metasploit) CVE-2009-2765 · Exploit-DB, Metasploit exploit modules | remote | Unix / cgi / linux | 2009-07-20 |
| QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit) CVE-2003-0050 · Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2003-02-24 |
| AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit) CVE-2006-2237 · Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2006-05-04 |
| The Matt Wright Guestbook.pl - Arbitrary Command Execution (Metasploit) CVE-1999-1053 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / cgi | 1999-11-05 |
| HP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Buffer Overflow (Metasploit) CVE-2008-0067 · Exploit-DB, Metasploit exploit modules | remote | Windows / cgi | 2009-01-07 |
| Barracuda - IMG.pl Remote Command Execution (Metasploit) CVE-2005-2847 · Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2005-09-01 |
| AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit) CVE-2005-0116 · Exploit-DB, Metasploit exploit modules | webapps | Unix / cgi | 2005-01-15 |
| Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Remote Buffer Overflow (Metasploit) CVE-2005-2799 · Exploit-DB, Metasploit exploit modules | remote | Linux / Linux,Unix / cgi / hardware | 2005-09-13 |
| TWiki 20030201 - 'search.pm' Remote Command Execution CVE-2004-1037 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / cgi / php | 2004-10-01 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10