CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 1h agofresh within 24h

freeSign in 20878 claims are newer than 30 days and need a subscription

65,943things

8,553named by two sources or more

1,057conflicts

7sources

Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12654 · Red Hat 19885 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.

Compared · what is held against what, and from which column of each source

Property	CISA Known Exploited Vulnerabilities	Red Hat	NVD	GitHub advisories	Metasploit exploit modules	Exploit-DB	Write-ups
Cvss	not said	`cvss3_score`	`cve.metrics.cvssMetricV31[].cvssData.baseScore`	`cvss.score`	not said	not said	not said
Exploited	`const:yes`	not said	not said	not said	not said	not said	not said
Severity	not said	`severity`	not said	`severity`	not said	not said	not said

Everything else the sources say is shown side by side, and not compared.

platform=linux ✕platform=linux ✕

Everything Exploited, and severe article 10exploit 49396vulnerability 49311

Found

1–25 of 2,981

Thing	Type	Platform	Date
Emacs Extension Persistence · Metasploit exploit modules	—	Linux	2026-01-28
phpSysInfo 3.4.5 - IP Allowlist Bypass CVE-2026-55584 · Exploit-DB	remote	linux	2026-08-17
HUSTOJ Admin users can zip-slip problem_import_qduoj.php, planting PHP files in webroot for RCE CVE-2026-24479 · Metasploit exploit modules, Exploit-DB	webapps	Linux / multiple	2026-01-26
hydra: Hydra: Remote Code Execution via NTLM Authentication Stack Buffer Overflow CVE-2026-56766 · Red Hat, Exploit-DB	remote	linux	2026-06-25
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23. CVE-2025-66039 · NVD, Metasploit exploit modules	—	Linux	2025-12-09
FreePBX endpoint SQLi to RCE CVE-2025-61675 · Metasploit exploit modules	—	Linux	2025-12-11
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-46300 · Red Hat, Exploit-DB, Metasploit exploit modules	local	Linux,Unix / linux	2026-05-13
kernel: "Dirty Frag" RxRPC variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43500 · Red Hat, Exploit-DB, Metasploit exploit modules	local	Linux,Unix / linux	2026-05-08
kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43284 · Red Hat, Exploit-DB, Metasploit exploit modules	local	Linux,Unix / linux	2026-05-07
Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB	webapps	Linux / multiple	2025-08-28
Realtek rtl819x - Local Privilege CVE-2026-36355 · Exploit-DB	local	linux	2026-05-27
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB	local	Linux / linux	2025-06-30
MeiG Smart FORGE_SLT711 - OS Command Injection CVE-2026-36356 · Exploit-DB	hardware	linux	2026-05-27
Skyvern SSTI Remote Code Execution CVE-2025-49619 · Metasploit exploit modules, Exploit-DB	webapps	Linux / multiple	2025-06-07
GestioIP 3.5.7 Remote Command Execution CVE-2024-48760 · Metasploit exploit modules, Exploit-DB	remote	Linux / multiple	2025-01-14
Linux Kernel 6.8 - Local Privilege Escalation · Exploit-DB	local	linux	2026-05-26
Netis Router Exploit Chain Reactor (CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457). CVE-2024-48455 · Metasploit exploit modules	—	Linux	2024-12-27
Netis Router Exploit Chain Reactor (CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457). CVE-2024-48456 · Metasploit exploit modules	—	Linux	2024-12-27
Netis Router Exploit Chain Reactor (CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457). CVE-2024-48457 · Metasploit exploit modules	—	Linux	2024-12-27
kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() CVE-2026-23231 · Red Hat, Exploit-DB	local	linux	2026-03-04
Ubuntu needrestart Privilege Escalation CVE-2024-48990 · Metasploit exploit modules	—	Linux	2024-11-19
kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. CVE-2025-40271 · Red Hat, Exploit-DB	local	linux	2025-12-06
Ivanti Connect Secure Authenticated Remote Code Execution via OpenSSL CRLF Injection CVE-2024-37404 · Metasploit exploit modules	—	Linux	2024-10-08
GNU InetUtils Argument Injection Vulnerability CVE-2026-24061 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules	local	Linux,Unix / linux	2026-01-21
Moodle Remote Code Execution (CVE-2024-43425) CVE-2024-43425 · Metasploit exploit modules, Exploit-DB	webapps	Linux / multiple	2024-08-27

Facets

Type 46698 of 98717 claims

Platform 49396 of 98717 claims

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

GitHub advisories high

The ecosystem packages no distribution ships.

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.