CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 2,298| Thing | Type | Platform | Date |
|---|---|---|---|
| Teltonika_RutOS 00.07.06.21 - command injection · Exploit-DB | remote | hardware | 2026-10-01 |
| Linksys E1200_2.0.04 - Unauthenticated OS Command Injection CVE-2025-60689 · Exploit-DB | webapps | hardware | 2026-08-31 |
| Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component CVE-2026-51133 · NVD, Exploit-DB | webapps | hardware | 2026-08-31 |
| D-Link DNS_340L - OS Command Injection CVE-2024-10914 · Exploit-DB | remote | hardware | 2026-08-17 |
| Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell · Exploit-DB | remote | hardware | 2025-09-16 |
| ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE) CVE-2023-26602 · Exploit-DB | local | hardware | 2025-04-16 |
| Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE) CVE-2018-1207 · Exploit-DB | remote | hardware | 2025-04-16 |
| FLIR AX8 1.46.16 - Remote Command Injection CVE-2022-37061 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2022-08-19 |
| Ruckus IoT Controller 1.7.1.0 - Undocumented Backdoor Account CVE-2021-33216 · Exploit-DB | local | hardware | 2025-04-16 |
| Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection CVE-2024-7801 · Exploit-DB | remote | hardware | 2025-04-05 |
| Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection CVE-2024-9054 · Exploit-DB | remote | hardware | 2025-04-04 |
| Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS) CVE-2024-43687 · Exploit-DB | remote | hardware | 2025-04-04 |
| Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated) · Exploit-DB | remote | hardware | 2025-03-22 |
| Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config · Exploit-DB | webapps | hardware | 2024-08-24 |
| Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass · Exploit-DB | webapps | hardware | 2024-08-24 |
| Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure · Exploit-DB | webapps | hardware | 2024-08-24 |
| HughesNet HT2000W Satellite Modem - Password Reset · Exploit-DB | webapps | hardware | 2024-08-24 |
| Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass · Exploit-DB | webapps | hardware | 2024-08-24 |
| Aquatronica Control System 5.1.6 - Information Disclosure · Exploit-DB | webapps | hardware | 2024-05-31 |
| Check Point Security Gateway - Information Disclosure (Unauthenticated) · Exploit-DB | webapps | hardware | 2024-05-31 |
| Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure · Exploit-DB | webapps | hardware | 2024-05-04 |
| Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Authentication Bypass · Exploit-DB | webapps | hardware | 2024-05-04 |
| Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Authentication Bypass · Exploit-DB | webapps | hardware | 2024-05-04 |
| Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Authentication Bypass · Exploit-DB | webapps | hardware | 2024-05-04 |
| Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 - Device Config Disclosure · Exploit-DB | webapps | hardware | 2024-05-04 |
Facets
Platform 49396 of 99154 claims
hardware2181
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10