CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12677 · Red Hat 19828 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 876| Thing | Type | Platform | Date |
|---|---|---|---|
| Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2025-53770 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2025-07-08 |
| Sitecore CVE-2025-27218 BinaryFormatter Deserialization Exploit CVE-2025-27218 · Metasploit exploit modules, Exploit-DB | webapps | Windows / multiple | 2025-01-06 |
| Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CVE-2024-4358 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | webapps | Windows / multiple | 2024-06-04 |
| Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2024-23692 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | webapps | Windows / typescript | 2024-05-25 |
| Ivanti Avalanche MDM Buffer Overflow CVE-2023-32560 · Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2023-08-14 |
| Greenshot .NET Deserialization Fileformat Exploit CVE-2023-34634 · Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2023-07-26 |
| Fortinet Multiple Products Authentication Bypass Vulnerability CVE-2022-40684 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Linux,Unix / multiple / windows | 2022-10-10 |
| Dell dbutil Driver Insufficient Access Control Vulnerability CVE-2021-21551 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2021-05-04 |
| Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-26855 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2021-03-02 |
| Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-27065 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | webapps | Windows / windows | 2021-03-02 |
| FortiLogger Arbitrary File Upload Exploit CVE-2021-3378 · Metasploit exploit modules, Exploit-DB | webapps | Windows / multiple | 2021-02-26 |
| Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability CVE-2020-1147 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | webapps | Windows / aspx | 2020-07-14 |
| Plesk/myLittleAdmin ViewState .NET Deserialization CVE-2020-13166 · Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2020-05-15 |
| Microsoft SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | dos | Windows / windows | 2020-03-12 |
| Zoho ManageEngine Desktop Central File Upload Vulnerability CVE-2020-10189 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / multiple | 2020-03-05 |
| Microsoft .NET Framework Remote Code Execution Vulnerability CVE-2020-0646 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2020-03-02 |
| Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation CVE-2019-3999 · Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2020-02-25 |
| Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation CVE-2020-5752 · Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2020-02-25 |
| Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CVE-2020-0618 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2020-02-11 |
| Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability CVE-2020-0688 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2020-02-11 |
| CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow CVE-2020-8012 · Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2020-02-05 |
| Ricoh Driver Privilege Escalation CVE-2019-19363 · Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2020-01-22 |
| Microsoft Win32k Privilege Escalation Vulnerability CVE-2019-1458 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | local | Windows / windows | 2019-12-10 |
| Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability CVE-2019-18935 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | webapps | Windows / aspx | 2019-12-09 |
| Anviz CrossChex Buffer Overflow CVE-2019-12518 · Metasploit exploit modules, Exploit-DB | remote | Windows / windows | 2019-11-28 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22765
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19646
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6155
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10