CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12662 · Red Hat 19864 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
76–100 of 2,981| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Boa Web Server v0.94.14 - Authentication Bypass · Exploit-DB | exploit 1 | — | — | 2023-03-30 |
| Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability CVE-2022-20699 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | vulnerability 1 exploit 1 | — | — | 2022-02-02 |
| Airspan AirSpot 5410 version 0.3.4.1 - Remote Code Execution (RCE) CVE-2022-36267 · Exploit-DB | exploit 1 | — | — | 2022-09-20 |
| Zyxel Unauthenticated LAN Remote Code Execution CVE-2023-28769 · Metasploit exploit modules | exploit 1 | — | — | 2022-02-01 |
| uftpd 2.10 - Directory Traversal (Authenticated) CVE-2020-20277 · Exploit-DB | exploit 1 | — | — | 2022-08-02 |
| vmwgfx Driver File Descriptor Handling Priv Esc CVE-2022-22942 · Metasploit exploit modules | exploit 1 | — | — | 2022-01-28 |
| Webmin 1.996 - Remote Code Execution (RCE) (Authenticated) CVE-2022-36446 · Exploit-DB, Metasploit exploit modules | exploit 2 | — | — | 2022-07-26 |
| Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2022-01-25 |
| ExifTool Remote Code Execution Vulnerability CVE-2021-22204 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | — | — | 2021-05-24 |
| SonicWall SMA 100 Series Authenticated Command Injection CVE-2021-20039 · Metasploit exploit modules | exploit 1 | — | — | 2021-12-14 |
| Apache CouchDB Insecure Default Initialization of Resource Vulnerability CVE-2022-24706 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | — | — | 2022-01-21 |
| Zimbra zmslapd arbitrary module load CVE-2022-37393 · Metasploit exploit modules | exploit 1 | — | — | 2021-10-27 |
| Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI) CVE-2021-46417 · Exploit-DB | exploit 1 | — | — | 2022-04-11 |
| VMware vCenter vScalation Priv Esc CVE-2021-22015 · Metasploit exploit modules | exploit 1 | — | — | 2021-09-21 |
| binutils 2.37 - Objdump Segmentation Fault CVE-2021-43149 · Exploit-DB | exploit 1 | — | — | 2022-04-07 |
| Linux Kernel Heap Out-of-Bounds Write Vulnerability CVE-2021-22555 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2021-07-07 |
| Webmin 1.984 - Remote Code Execution (Authenticated) CVE-2022-0824 · Exploit-DB, Metasploit exploit modules | exploit 2 | — | — | 2022-02-26 |
| elFinder Archive Command Injection CVE-2021-32682 · Metasploit exploit modules | exploit 1 | — | — | 2021-06-13 |
| Linux eBPF ALU32 32-bit Invalid Bounds Tracking LPE CVE-2021-3490 · Metasploit exploit modules | exploit 1 | — | — | 2021-05-11 |
| Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated) · Exploit-DB | exploit 1 | — | — | 2022-02-28 |
| Linux Kernel Privilege Escalation Vulnerability CVE-2021-3493 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | vulnerability 1 exploit 1 | — | — | 2021-04-12 |
| aaPanel 6.8.21 - Directory Traversal (Authenticated) · Exploit-DB | exploit 1 | — | — | 2022-02-23 |
| VMware Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | vulnerability 2 exploit 1 | — | 7.5 | 2021-03-30 |
| VMware vRealize Operations (vROps) Manager SSRF RCE CVE-2021-21983 · Metasploit exploit modules | exploit 1 | — | — | 2021-03-30 |
| IGEL OS Secure VNC/Terminal Command Injection RCE CVE-2025-34082 · Metasploit exploit modules | exploit 1 | — | — | 2021-02-25 |
Facets
Source 99371 of 99371 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22764
zetlyn/cve-nvd19454
zetlyn/cve-ghsa6014
zetlyn/cve-kev1733
Exploited 1733 of 99371 claims
yes1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22764
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19454
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6014
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10