CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12661 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
26–47 of 47| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Dasan GPON Routers Command Injection Vulnerability CVE-2018-10562 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-05-03 |
| Dasan GPON Routers Authentication Bypass Vulnerability CVE-2018-10561 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-05-03 |
| Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability CVE-2018-0171 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-03-29 |
| MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CVE-2018-7445 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-03-15 |
| Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability CVE-2017-6736 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-01-05 |
| Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CVE-2017-15944 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 3 | — | — | 2017-12-11 |
| Cisco IOS and IOS XE Remote Code Execution Vulnerability CVE-2017-3881 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2017-04-12 |
| Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2017-6884 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 8.8 | 2017-04-02 |
| NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | — | — | 2016-12-20 |
| Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability CVE-2016-6415 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2017-03-17 |
| Apple iOS Webkit Memory Corruption Vulnerability CVE-2016-4657 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2017-03-12 |
| NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 4 | — | — | 2017-02-25 |
| NETGEAR DGN2200 Remote Code Execution Vulnerability CVE-2017-6077 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2017-02-18 |
| NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CVE-2017-5521 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2017-01-30 |
| GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-6271 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 14 | — | — | 2014-09-24 |
| Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability CVE-2016-6367 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2016-08-19 |
| Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability CVE-2016-6366 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2016-08-18 |
| GNU Bash OS Command Injection Vulnerability CVE-2014-6278 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2014-10-06 |
| D-Link DIR-645 Router Remote Code Execution Vulnerability CVE-2015-2051 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | — | — | 2015-02-13 |
| D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability CVE-2013-5223 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2015-05-11 |
| GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CVE-2014-7169 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2015-03-26 |
| Cisco IOS Cross-Site Request Forgery Vulnerability CVE-2008-4128 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 8.1 | 2008-09-17 |
Facets
Source 99440 of 99440 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22764
zetlyn/cve-nvd19488
zetlyn/cve-ghsa6049
zetlyn/cve-kev1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19488
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6049
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10