CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 60m agofresh within 24h
66,222things
8,840named by two sources or more
1,093conflicts
7sources

Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12662 · Red Hat 19864 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
PropertyCISA Known Exploited VulnerabilitiesRed HatNVDGitHub advisoriesMetasploit exploit modulesExploit-DBWrite-ups
Cvssnot saidcvss3_scorecve.metrics.cvssMetricV31[].cvssData.baseScorecvss.scorenot saidnot saidnot said
Exploitedconst:yesnot saidnot saidnot saidnot saidnot saidnot said
Severitynot saidseveritynot saidseveritynot saidnot saidnot said

Everything else the sources say is shown side by side, and not compared.

platform=cgi ✕platform=cgi ✕

EverythingExploited, and severearticle 10exploit 49396vulnerability 49965

Found

76–100 of 757
ThingKindSeverityCvssDate
Cgiemail 1.6 - Source Code Disclosure
· Exploit-DB
exploit 1 ——2016-10-18
AVTECH IP Camera / NVR / DVR Devices - Multiple Vulnerabilities
· Exploit-DB
exploit 1 ——2016-10-11
Witbe - Remote Code Execution
· Exploit-DB
exploit 1 ——2016-10-05
Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion
CVE-2016-6435 · Exploit-DB
exploit 1 ——2016-10-05
Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution
CVE-2016-6433 · Exploit-DB, Metasploit exploit modules
exploit 3 ——2016-10-05
Tenda ADSL2/2+ Modem 963281TAN - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
PLANET VDR-300NU ADSL Router - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
Inteno EG101R1 VoIP Router - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
COMTREND ADSL Router CT-5367 C01_R12 / CT-5624 C01_R03 - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
PIKATEL 96338WS_ 96338L-2M-8M - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
Exper EWM-01 ADSL/MODEM - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
ASUS DSL-X11 ADSL Router - DNS Change
· Exploit-DB
exploit 1 ——2016-09-13
PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure
· Exploit-DB
exploit 1 ——2016-08-29
Intellinet IP Camera INT-L100M20N - Unauthorized Admin Credential Change
· Exploit-DB
exploit 1 ——2016-08-29
Honeywell IP-Camera HICC-1100PT - Local File Disclosure
· Exploit-DB
exploit 1 ——2016-08-22
JVC IP-Camera VN-T216VPRU - Local File Disclosure
· Exploit-DB
exploit 1 ——2016-08-22
Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure
· Exploit-DB
exploit 1 ——2016-08-22
MESSOA IP Cameras (Multiple Models) - Password Change
· Exploit-DB
exploit 1 ——2016-08-19
SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download
· Exploit-DB
exploit 1 ——2016-08-19
TOPSEC Firewalls - 'ELIGIBLECANDIDATE' Remote Code Execution
· Exploit-DB
exploit 1 ——2016-08-19
MESSOA IP-Camera NIC990 - Authentication Bypass / Configuration Download
· Exploit-DB
exploit 1 ——2016-08-19
TOPSEC Firewalls - 'ELIGIBLECONTESTANT' Remote Code Execution
· Exploit-DB
exploit 1 ——2016-08-19
ZYCOO IP Phone System - Remote Command Execution
· Exploit-DB
exploit 1 ——2016-08-19
C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR - Credentials Disclosure / Authentication Bypass
· Exploit-DB
exploit 1 ——2016-08-19
TOSHIBA IP-Camera IK-WP41A - Authentication Bypass / Configuration Download
· Exploit-DB
exploit 1 ——2016-08-19

Facets

Kind 99371 of 99371 claims

exploit49396

Severity 26429 of 99371 claims

high7251
medium13452
low3904

Exploited 1733 of 99371 claims

yes1733

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

vulnerability · current1733

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

vulnerability · current22764

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

vulnerability · current19454

GitHub advisories high

The ecosystem packages no distribution ships.

vulnerability · failing6014

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

exploit · current2698

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

exploit · current46698

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.

article · current10