CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12662 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
76–100 of 314| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Linux Kernel 2.4 - 'uselib()' Local Privilege Escalation (2) CVE-2004-1235 · Exploit-DB · matched kernel | exploit 3 | — | — | 2005-01-07 |
| Linux Kernel 2.6 - Console Keymap Local Command Injection CVE-2005-3257 · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-10-17 |
| Linux Kernel 2.6.18 - 'move_pages()' Information Leak CVE-2010-0415 · Exploit-DB · matched kernel | exploit 1 | — | — | 2010-02-08 |
| Linux Kernel 6.2 - Userspace Processes To Enable Mitigation CVE-2023-1998 · Exploit-DB · matched kernel | exploit 1 | — | — | 2023-04-20 |
| Linux Kernel < 2.4.20 - Module Loader Privilege Escalation CVE-2003-0127 · Exploit-DB · matched kernel | exploit 4 | — | — | 2003-03-17 |
| Linux kernel < 4.10.15 - Race Condition Privilege Escalation CVE-2017-10661 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-12-15 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2004-0641 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2002-1463 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-1104 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-0751 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-0328 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-0288 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-0163 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-2001-0162 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections. CVE-2000-0916 · NVD, Exploit-DB · matched kernel | vulnerability 1 exploit 1 | — | — | 1999-09-27 |
| Linux Kernel 2.2 - Predictable TCP Initial Sequence Number CVE-1999-0077 · Exploit-DB · matched kernel | exploit 1 | — | — | 1999-09-27 |
| Linux Kernel - 'SCTP_GET_ASSOC_STATS()' Stack Buffer Overflow (PoC) CVE-2013-1828 · Exploit-DB · matched kernel | exploit 1 | — | — | 2013-03-13 |
| Linux Kernel 2.4.20 - 'decode_fh' Denial of Service CVE-2003-0619 · Exploit-DB · matched kernel | exploit 1 | — | — | 2003-07-29 |
| Linux Kernel 2.6.3 - 'setsockopt' Local Denial of Service CVE-2004-0424 · Exploit-DB · matched kernel | exploit 1 | — | — | 2004-04-21 |
| Linux Kernel 2.6.36 IGMP - Remote Denial of Service CVE-2012-0207 · Exploit-DB · matched kernel | exploit 1 | — | — | 2012-01-17 |
| Linux Kernel 2.6.x - IPv6 Local Denial of Service CVE-2005-2973 · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-10-20 |
| Linux Kernel 2.6.x - KSM Local Denial of Service CVE-2011-2183 · Exploit-DB · matched kernel | exploit 1 | — | — | 2011-06-02 |
| Linux Kernel 2.6.x - SCSI ProcFS Denial of Service CVE-2005-2800 · Exploit-DB · matched kernel | exploit 1 | — | — | 2005-09-09 |
| Linux Kernel 3.1.8 - KVM Local Denial of Service CVE-2012-0045 · Exploit-DB · matched kernel | exploit 1 | — | — | 2011-12-29 |
| Linux Kernel 3.10.0 (CentOS 7) - Denial of Service CVE-2017-5972 · Exploit-DB · matched kernel | exploit 1 | — | — | 2017-02-12 |
Facets
Source 99371 of 99371 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22764
zetlyn/cve-nvd19454
zetlyn/cve-ghsa6014
zetlyn/cve-kev1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19454
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6014
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10