CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12662 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
51–75 of 314| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Linux Kernel - 'AF_PACKET' Use-After-Free (2) CVE-2017-15649 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-10-17 |
| Android Stagefright MP4 tx3g Integer Overflow CVE-2015-3864 · Metasploit exploit modules, Exploit-DB · matched kernel | exploit 4 | — | — | 2015-08-13 |
| Linux Kernel - 'group_info' refcounter Overflow Memory Corruption CVE-2014-2851 · Exploit-DB · matched kernel | exploit 1 | — | — | 2014-04-18 |
| Linux Kernel - io_submit L2TP sendmsg Integer Overflow · Exploit-DB · matched kernel | exploit 1 | — | — | 2016-02-26 |
| Linux Kernel - TCP Related Read Use-After-Free CVE-2016-6828 · Exploit-DB · matched kernel | exploit 1 | — | — | 2016-08-18 |
| Linux Kernel 2.0 Sendmail - Denial of Service · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-05-28 |
| Linux Kernel 2.0.33 - IP Fragment Overlap CVE-1999-1018 · Exploit-DB · matched kernel | exploit 1 | — | — | 1998-04-17 |
| PaX 2.6 Kernel Patch - Denial of Service CVE-2004-1983 · Exploit-DB · matched kernel | exploit 1 | — | — | 2004-05-03 |
| Linux Kernel 2.2.x - 'sysctl()' Memory Reading CVE-2001-0316 · Exploit-DB · matched kernel | exploit 1 | — | — | 2001-02-09 |
| Linux Kernel 2.6.x - Cryptoloop Information Disclosure CVE-2004-2135 · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-05-26 |
| Linux Kernel 2.6.x - Ptrace Privilege Escalation CVE-2007-4573 · Exploit-DB · matched kernel | exploit 2 | — | — | 2007-09-21 |
| Linux Kernel 4.4 - 'rtnetlink' Stack Memory Disclosure CVE-2016-4486 · Exploit-DB · matched kernel | exploit 1 | — | — | 2018-12-19 |
| Linux Kernel 2.2 - TCP/IP Spoof IP · Exploit-DB · matched kernel | exploit 1 | — | — | 2001-01-02 |
| Linux Kernel 2.0 - TCP Port Denial of Service CVE-1999-0451 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-01-19 |
| Linux Kernel 2.2 - 'mmap()' Local Denial of Service CVE-2002-1380 · Exploit-DB · matched kernel | exploit 1 | — | — | 2002-12-17 |
| Linux Kernel 2.6.10 - Local Denial of Service · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-03-29 |
| Linux Kernel 2.6.x - 'ISO9660' Denial of Service CVE-2006-5757 · Exploit-DB · matched kernel | exploit 1 | — | — | 2006-11-05 |
| Linux Kernel < 4.13.1 - BlueTooth Buffer Overflow (PoC) CVE-2017-1000251 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-09-21 |
| Linux Kernel < 4.14.rc3 - Local Denial of Service CVE-2017-14489 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-10-02 |
| Linux Kernel < 4.17-rc1 - 'AF_LLC' Double Free · Exploit-DB · matched kernel | exploit 1 | — | — | 2018-04-30 |
| Linux Kernel < 4.5.1 - Off-By-One (PoC) CVE-2016-6187 · Exploit-DB · matched kernel | exploit 1 | — | — | 2016-10-16 |
| Linux Kernel PPC64/IA64 (AIO) - Local Denial of Service CVE-2005-0916 · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-04-04 |
| Linux Kernel (Ubuntu 17.04) - 'XFRM' Local Privilege Escalation CVE-2017-16939 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-11-23 |
| Linux Kernel - 'ecryptfs' '/proc/$pid/environ' Local Privilege Escalation CVE-2016-1583 · Exploit-DB · matched kernel | exploit 1 | — | — | 2016-06-21 |
| Linux Kernel 2.0.37 - Segment Limit Privilege Escalation CVE-1999-1166 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-07-13 |
Facets
Source 99371 of 99371 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22764
zetlyn/cve-nvd19454
zetlyn/cve-ghsa6014
zetlyn/cve-kev1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19454
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6014
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10