CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
51–75 of 757| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| IPFire < 2.19 Update Core 110 - Remote Code Execution (Metasploit) · Exploit-DB | exploit 1 | — | — | 2017-07-24 |
| Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit) · Exploit-DB | exploit 1 | — | — | 2017-07-19 |
| Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit) · Exploit-DB | exploit 1 | — | — | 2017-07-19 |
| Citrix Multiple Products Remote Code Execution Vulnerability CVE-2017-6316 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2017-07-19 |
| Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection CVE-2016-9682 · Exploit-DB | exploit 1 | — | — | 2017-07-19 |
| NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 4 | — | — | 2017-02-25 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8841 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8840 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8839 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8838 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8837 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8836 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclosure CVE-2017-8835 · Exploit-DB | exploit 1 | — | — | 2017-06-06 |
| QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection CVE-2017-6361 · Exploit-DB | exploit 1 | — | — | 2017-04-07 |
| QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection CVE-2017-6360 · Exploit-DB | exploit 1 | — | — | 2017-04-07 |
| QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection CVE-2017-6359 · Exploit-DB | exploit 1 | — | — | 2017-04-07 |
| NETGEAR Multiple Routers Remote Code Execution Vulnerability CVE-2016-6277 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 3 | — | — | 2016-12-06 |
| dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting CVE-2017-6529 · Exploit-DB | exploit 1 | — | — | 2017-03-10 |
| dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting CVE-2017-6528 · Exploit-DB | exploit 1 | — | — | 2017-03-10 |
| dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting CVE-2017-6527 · Exploit-DB | exploit 1 | — | — | 2017-03-10 |
| dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting CVE-2017-6526 · Exploit-DB, Metasploit exploit modules | exploit 2 | — | — | 2017-03-08 |
| Radisys MRF - Command Injection CVE-2016-10043 · Exploit-DB | exploit 1 | — | — | 2017-01-27 |
| Netgear WNR2000v5 - Remote Code Execution CVE-2016-10176 · Exploit-DB | exploit 1 | — | — | 2016-12-21 |
| Netgear WNR2000v5 - Remote Code Execution CVE-2016-10175 · Exploit-DB | exploit 1 | — | — | 2016-12-21 |
| NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 3 | — | — | 2016-12-20 |
Facets
Source 99152 of 99152 claims
Exploited 1731 of 99152 claims
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
GitHub advisories high
The ecosystem packages no distribution ships.
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.