CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12661 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 114| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 8.1 | 2026-09-22 |
| MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CVE-2026-86060 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 9.8 | 2026-09-05 |
| Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 4 | — | — | 2015-11-23 |
| IBM Langflow Code Injection Vulnerability CVE-2026-9198 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2026-07-17 |
| Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2026-0770 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2026-05-29 |
| Joomlack Page Builder Improper Access Control Vulnerability CVE-2026-56290 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2026-07-07 |
| Widget Factory Joomla Content Editor Improper Access Control Vulnerability CVE-2026-48907 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2026-06-05 |
| Marimo Remote Code Execution Vulnerability CVE-2026-39987 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2026-04-23 |
| Langflow Code Injection Vulnerability CVE-2026-33017 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2026-03-20 |
| Craft CMS Code Injection Vulnerability CVE-2025-32432 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | — | 10 | 2025-04-14 |
| RoundCube Webmail Deserialization of Untrusted Data Vulnerability CVE-2025-49113 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | critical | 9.9 | 2025-06-02 |
| Google Chromium CSS Use-After-Free Vulnerability CVE-2026-2441 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB | vulnerability 2 exploit 1 | high | 8.8 | 2026-02-13 |
| Meta React Server Components Remote Code Execution Vulnerability CVE-2025-55182 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | critical | 10 | 2025-12-03 |
| Fortinet FortiWeb Path Traversal Vulnerability CVE-2025-64446 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2025-11-14 |
| XWiki Platform Eval Injection Vulnerability CVE-2025-24893 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2025-02-20 |
| Grafana Path Traversal Vulnerability CVE-2021-43798 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2021-12-09 |
| Mozilla Multiple Products Remote Code Execution Vulnerability CVE-2010-3765 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 5 | — | — | 2010-10-25 |
| Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | — | 9.8 | 2025-08-28 |
| Fortinet FortiWeb SQL Injection Vulnerability CVE-2025-25257 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-07-18 |
| Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability CVE-2025-47812 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2014-06-19 |
| Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CVE-2025-5777 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-07-10 |
| Rails Ruby on Rails Path Traversal Vulnerability CVE-2019-5418 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2019-03-21 |
| Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability CVE-2025-4427 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2025-05-13 |
| Langflow Missing Authentication Vulnerability CVE-2025-3248 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2025-04-09 |
| CrushFTP Authentication Bypass Vulnerability CVE-2025-31161 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-04-07 |
Facets
Source 99440 of 99440 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22764
zetlyn/cve-nvd19488
zetlyn/cve-ghsa6049
zetlyn/cve-kev1733
Exploited 1733 of 99440 claims
yes1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19488
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6049
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10