CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 6h agofresh within 24h
66,157things
8,747named by two sources or more
1,072conflicts
7sources

Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
PropertyCISA Known Exploited VulnerabilitiesRed HatNVDGitHub advisoriesMetasploit exploit modulesExploit-DBWrite-ups
Cvssnot saidcvss3_scorecve.metrics.cvssMetricV31[].cvssData.baseScorecvss.scorenot saidnot saidnot said
Exploitedconst:yesnot saidnot saidnot saidnot saidnot saidnot said
Severitynot saidseveritynot saidseveritynot saidnot saidnot said

Everything else the sources say is shown side by side, and not compared.

kind=exploit ✕platform=cgi ✕kind=exploit ✕

EverythingExploited, and severearticle 10exploit 49396vulnerability 49746

Found

51–75 of 757
ThingKindSeverityCvssDate
IPFire < 2.19 Update Core 110 - Remote Code Execution (Metasploit)
· Exploit-DB
exploit 1 ——2017-07-24
Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)
· Exploit-DB
exploit 1 ——2017-07-19
Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)
· Exploit-DB
exploit 1 ——2017-07-19
Citrix Multiple Products Remote Code Execution Vulnerability
CVE-2017-6316 · CISA Known Exploited Vulnerabilities, Exploit-DB
vulnerability 1 exploit 2 ——2017-07-19
Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection
CVE-2016-9682 · Exploit-DB
exploit 1 ——2017-07-19
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
CVE-2017-6334 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules
vulnerability 1 exploit 4 ——2017-02-25
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8841 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8840 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8839 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8838 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8837 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8836 · Exploit-DB
exploit 1 ——2017-06-06
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure
CVE-2017-8835 · Exploit-DB
exploit 1 ——2017-06-06
QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection
CVE-2017-6361 · Exploit-DB
exploit 1 ——2017-04-07
QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection
CVE-2017-6360 · Exploit-DB
exploit 1 ——2017-04-07
QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection
CVE-2017-6359 · Exploit-DB
exploit 1 ——2017-04-07
NETGEAR Multiple Routers Remote Code Execution Vulnerability
CVE-2016-6277 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules
vulnerability 1 exploit 3 ——2016-12-06
dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting
CVE-2017-6529 · Exploit-DB
exploit 1 ——2017-03-10
dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting
CVE-2017-6528 · Exploit-DB
exploit 1 ——2017-03-10
dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting
CVE-2017-6527 · Exploit-DB
exploit 1 ——2017-03-10
dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting
CVE-2017-6526 · Exploit-DB, Metasploit exploit modules
exploit 2 ——2017-03-08
Radisys MRF - Command Injection
CVE-2016-10043 · Exploit-DB
exploit 1 ——2017-01-27
Netgear WNR2000v5 - Remote Code Execution
CVE-2016-10176 · Exploit-DB
exploit 1 ——2016-12-21
Netgear WNR2000v5 - Remote Code Execution
CVE-2016-10175 · Exploit-DB
exploit 1 ——2016-12-21
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
CVE-2016-10174 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules
vulnerability 1 exploit 3 ——2016-12-20

Facets

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

vulnerability · current1731

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

vulnerability · current22719

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

vulnerability · current19380

GitHub advisories high

The ecosystem packages no distribution ships.

vulnerability · failing5916

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

exploit · current2698

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

exploit · current46698

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.

article · current10