CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12661 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 58| Thing | Type | Platform | Date |
|---|---|---|---|
| FLIR AX8 1.46.16 - Remote Command Injection CVE-2022-37061 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2022-08-19 |
| SolarView Compact 6.00 - Command Injection CVE-2023-23333 · Exploit-DB, Metasploit exploit modules | remote | Linux,PHP,Unix / hardware | 2023-05-15 |
| Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass CVE-2019-1937 · Exploit-DB, Metasploit exploit modules | webapps | Unix / hardware | 2019-08-21 |
| Zyxel Multiple Firewalls OS Command Injection Vulnerability CVE-2022-30525 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux,Unix / hardware | 2022-04-28 |
| Hikvision Improper Input Validation CVE-2021-36260 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2021-09-18 |
| F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2021-03-10 |
| F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability CVE-2020-5902 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware / linux | 2020-06-30 |
| Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit) CVE-2017-15889 · Exploit-DB, Metasploit exploit modules | remote | Python / hardware | 2017-11-08 |
| DLINK DWL-2600 - Authenticated Remote Command Injection (Metasploit) CVE-2019-20499 · Exploit-DB, Metasploit exploit modules | remote | Linux,Unix / hardware | 2019-05-14 |
| Grandstream Networks UCM6200 Series SQL Injection Vulnerability CVE-2020-5722 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2020-03-23 |
| Optergy 2.3.0a - Remote Code Execution (Backdoor) CVE-2019-7276 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2019-11-05 |
| Nice Linear eMerge E3-Series OS Command Injection Vulnerability CVE-2019-7256 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / hardware | 2019-10-29 |
| Cisco RV110W/RV130(W)/RV215W Routers Management Interface - Remote Command Execution (Metasploit) CVE-2019-1663 · Exploit-DB, Metasploit exploit modules | remote | Linux / hardware | 2019-02-27 |
| Crestron Multiple Products Command Injection Vulnerability CVE-2019-3929 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux,Unix / hardware / linux | 2019-04-30 |
| Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability CVE-2019-1653 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux / hardware | 2018-09-09 |
| NETGEAR Multiple WAP Devices Command Injection Vulnerability CVE-2016-1555 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux / hardware | 2016-02-25 |
| QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities CVE-2018-0706 · Exploit-DB, Metasploit exploit modules | webapps | Linux / hardware | 2018-07-11 |
| Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC) CVE-2018-10594 · Exploit-DB, Metasploit exploit modules | dos | Windows / hardware / windows | 2018-07-02 |
| ASUS infosvr - Authentication Bypass Command Execution (Metasploit) CVE-2014-9583 · Exploit-DB, Metasploit exploit modules | remote | Unix / hardware | 2015-01-04 |
| AsusWRT LAN - Remote Code Execution (Metasploit) CVE-2018-5999 · Exploit-DB, Metasploit exploit modules | remote | Unix / hardware | 2018-01-22 |
| Linksys WVBR0-25 - User-Agent Command Execution (Metasploit) CVE-2017-17411 · Exploit-DB, Metasploit exploit modules | remote | Unix / hardware | 2017-12-13 |
| Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CVE-2017-15944 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Unix / hardware / unix | 2017-12-11 |
| HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution CVE-2017-2741 · Exploit-DB, Metasploit exploit modules | remote | Unix / hardware / unix | 2017-04-05 |
| NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Unix / hardware | 2016-12-20 |
| NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Unix / cgi / hardware | 2017-02-25 |
Facets
Platform 49396 of 99440 claims
hardware2181
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19488
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6049
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10