CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 2,868| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| phpSysInfo 3.4.5 - IP Allowlist Bypass CVE-2026-55584 · Exploit-DB | exploit 1 | — | — | 2026-08-17 |
| HUSTOJ Admin users can zip-slip problem_import_qduoj.php, planting PHP files in webroot for RCE CVE-2026-24479 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2026-01-26 |
| hydra: Hydra: Remote Code Execution via NTLM Authentication Stack Buffer Overflow CVE-2026-56766 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 7.5 | 2026-06-25 |
| kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-46300 · Red Hat, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | high | 7.8 | 2026-05-13 |
| kernel: "Dirty Frag" RxRPC variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43500 · Red Hat, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 3 | high | 7.8 | 2026-05-08 |
| kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43284 · Red Hat, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 3 | high | 7.8 | 2026-05-07 |
| Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | — | 9.8 | 2025-08-28 |
| Realtek rtl819x - Local Privilege CVE-2026-36355 · Exploit-DB | exploit 1 | — | — | 2026-05-27 |
| Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability CVE-2025-32463 · CISA Known Exploited Vulnerabilities, Red Hat, Metasploit exploit modules, Exploit-DB | vulnerability 2 exploit 2 | high | 7.8 | 2025-06-30 |
| MeiG Smart FORGE_SLT711 - OS Command Injection CVE-2026-36356 · Exploit-DB | exploit 1 | — | — | 2026-05-27 |
| Skyvern SSTI Remote Code Execution CVE-2025-49619 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2025-06-07 |
| GestioIP 3.5.7 Remote Command Execution CVE-2024-48760 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2025-01-14 |
| Linux Kernel 6.8 - Local Privilege Escalation · Exploit-DB | exploit 1 | — | — | 2026-05-26 |
| kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() CVE-2026-23231 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | medium | 7.5 | 2026-03-04 |
| kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. CVE-2025-40271 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | medium | 7 | 2025-12-06 |
| GNU InetUtils Argument Injection Vulnerability CVE-2026-24061 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules | vulnerability 2 exploit 2 | — | 9.8 | 2026-01-21 |
| Moodle Remote Code Execution (CVE-2024-43425) CVE-2024-43425 · Metasploit exploit modules, Exploit-DB | exploit 2 | — | — | 2024-08-27 |
| abrt: Command-injection in ABRT leading to local privilege escalation CVE-2025-12744 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 8.8 | 2025-12-03 |
| ZSH 5.9 - RCE · Exploit-DB | exploit 1 | — | — | 2026-04-09 |
| GNU C Library Buffer Overflow Vulnerability CVE-2023-4911 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | vulnerability 1 exploit 2 | — | — | 2023-10-03 |
| redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability CVE-2025-32023 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 8.8 | 2025-07-07 |
| pam-config: LPE from unprivileged to allow_active in PAM CVE-2025-6018 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 7.8 | 2025-06-17 |
| sudo: LPE via host option CVE-2025-32462 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 7 | 2025-06-30 |
| OneTrust SDK 6.33.0 - Denial Of Service (DoS) CVE-2024-57708 · Exploit-DB | exploit 1 | — | — | 2025-06-26 |
| tar-fs: link following and path traversal via maliciously crafted tar file CVE-2024-12905 · Red Hat, Exploit-DB | vulnerability 1 exploit 1 | high | 7.5 | 2025-03-27 |
Facets
Source 99154 of 99154 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22719
zetlyn/cve-nvd19380
zetlyn/cve-ghsa5916
zetlyn/cve-kev1733
Exploited 1733 of 99154 claims
yes1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22719
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19380
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5916
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10