CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 757| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS) CVE-2023-26692 · Exploit-DB | exploit 1 | — | — | 2023-04-08 |
| Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI CVE-2020-11798 · Exploit-DB | exploit 1 | — | — | 2023-04-06 |
| LISTSERV 17 - Reflected Cross Site Scripting (XSS) CVE-2022-39195 · Exploit-DB | exploit 1 | — | — | 2023-03-30 |
| LISTSERV 17 - Insecure Direct Object Reference (IDOR) CVE-2022-40319 · Exploit-DB | exploit 1 | — | — | 2023-03-30 |
| Movable Type 7 r.5002 - XMLRPC API OS Command Injection (Metasploit) CVE-2021-20837 · Exploit-DB | exploit 1 | — | — | 2021-10-29 |
| IPCop 2.1.9 - Remote Code Execution (RCE) (Authenticated) · Exploit-DB | exploit 1 | — | — | 2021-08-10 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25162 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25161 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25160 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25159 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25158 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25157 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25156 · Exploit-DB | exploit 1 | — | — | 2021-07-15 |
| Aruba Instant (IAP) - Remote Code Execution CVE-2021-25155 · Exploit-DB | exploit 2 | — | — | 2021-07-15 |
| CHIYU TCP/IP Converter devices - CRLF injection · Exploit-DB | exploit 1 | — | — | 2021-06-01 |
| CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS) · Exploit-DB | exploit 1 | — | — | 2021-06-01 |
| IPFire 2.25 - Remote Code Execution (Authenticated) CVE-2021-33393 · Exploit-DB, Metasploit exploit modules | exploit 2 | — | — | 2021-05-17 |
| Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection CVE-2020-24365 · Exploit-DB | exploit 1 | — | — | 2020-11-19 |
| Mailman 1.x > 2.1.23 - Cross Site Scripting (XSS) · Exploit-DB | exploit 1 | — | — | 2020-10-29 |
| Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) · Exploit-DB | exploit 1 | — | — | 2020-04-23 |
| Zen Load Balancer 3.10.1 - 'index.cgi' Directory Traversal · Exploit-DB | exploit 1 | — | — | 2020-04-10 |
| Zen Load Balancer 3.10.1 - Remote Code Execution · Exploit-DB | exploit 1 | — | — | 2020-03-30 |
| CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting CVE-2020-8839 · Exploit-DB | exploit 1 | — | — | 2020-02-11 |
| Rifatron Intelligent Digital Security System - 'animate.cgi' Stream Disclosure · Exploit-DB | exploit 1 | — | — | 2019-09-09 |
| Citrix SD-WAN and NetScaler Command Injection Vulnerability CVE-2019-12991 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2019-07-12 |
Facets
Source 99152 of 99152 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22719
zetlyn/cve-nvd19380
zetlyn/cve-ghsa5916
zetlyn/cve-kev1731
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10