CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12654 · Red Hat 19885 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 227| Thing | Type | Platform | Date |
|---|---|---|---|
| Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules | webapps | Linux / multiple | 2025-08-28 |
| IBM Langflow Code Injection Vulnerability CVE-2026-9198 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Python / multiple | 2026-07-17 |
| Ghost_CMS 6.19.0 - Remote Code Execution CVE-2026-29053 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2026-03-02 |
| WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload CVE-2026-3891 · Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2026-03-12 |
| Widget Factory Joomla Content Editor Improper Access Control Vulnerability CVE-2026-48907 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2026-06-05 |
| Langflow Code Injection Vulnerability CVE-2026-33017 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Python / multiple | 2026-03-20 |
| MCPJam Inspector - Remote Code Execution CVE-2026-23744 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / multiple | 2026-01-16 |
| WordPress Bricks Builder Theme - RCE CVE-2024-25600 · Exploit-DB, Metasploit exploit modules | webapps | Linux,PHP,Unix,Windows / multiple | 2024-02-19 |
| WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI CVE-2026-4257 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2026-03-30 |
| HUSTOJ Zip-Slip v26.01.24 - RCE CVE-2026-24479 · Exploit-DB, Metasploit exploit modules | webapps | Linux / multiple | 2026-01-26 |
| Craft CMS Code Injection Vulnerability CVE-2025-32432 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules | webapps | Linux,PHP / multiple | 2025-04-14 |
| Meta React Server Components Remote Code Execution Vulnerability CVE-2025-55182 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2025-12-03 |
| Fortinet FortiWeb Path Traversal Vulnerability CVE-2025-64446 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / multiple | 2025-11-14 |
| WordPress Backup Migration 1.3.7 - Remote Command Execution CVE-2023-6553 · Exploit-DB, Metasploit exploit modules | webapps | Linux,PHP,Unix,Windows / multiple | 2023-12-11 |
| motionEye 0.43.1b4 - RCE CVE-2025-60787 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix / multiple | 2025-09-09 |
| FreeBSD rtsold 15.x - Remote Code Execution via DNSSL CVE-2025-14558 · Exploit-DB, Metasploit exploit modules | webapps | Unix / multiple | 2025-12-16 |
| Flowise 3.0.4 - Remote Code Execution (RCE) CVE-2025-59528 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2025-09-13 |
| XWiki Platform Eval Injection Vulnerability CVE-2025-24893 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2025-02-20 |
| StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload CVE-2025-7441 · Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2025-08-04 |
| Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability CVE-2025-4427 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Python / multiple | 2025-05-13 |
| JetBrains TeamCity Authentication Bypass Vulnerability CVE-2024-27198 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Java,Linux,Unix,Windows / multiple | 2024-03-04 |
| Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE CVE-2025-34077 · Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2021-10-08 |
| Simple File List WordPress Plugin 4.2.2 - File Upload to RCE CVE-2020-36847 · Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2020-04-27 |
| Langflow Missing Authentication Vulnerability CVE-2025-3248 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | remote | Python / multiple | 2025-04-09 |
| PivotX 3.0.0 RC3 - Remote Code Execution (RCE) CVE-2025-52367 · Exploit-DB, Metasploit exploit modules | webapps | PHP / multiple | 2025-07-10 |
Facets
Platform 49396 of 98717 claims
multiple3483
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10