CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12677 · Red Hat 19828 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 149| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2010-0806 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2010-03-09 |
| Microsoft Internet Explorer Use-After-Free Vulnerability CVE-2010-0249 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2010-01-14 |
| Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CVE-2009-3459 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 4 | — | — | 2009-10-08 |
| Microsoft Windows Buffer Overflow Vulnerability CVE-2008-4250 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 7 | — | — | 2008-10-23 |
| Microsoft Windows Protection Mechanism Failure Vulnerability CVE-2026-32202 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2026-04-28 |
| Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability CVE-2008-0015 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2009-07-05 |
| Microsoft Windows Race Condition Vulnerability CVE-2025-62215 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-11-12 |
| Microsoft Windows SMB Client Improper Access Control Vulnerability CVE-2025-33073 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-06-15 |
| Mozilla Multiple Products Remote Code Execution Vulnerability CVE-2010-3765 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 5 | — | — | 2010-10-25 |
| Microsoft Windows Out-of-Bounds Write Vulnerability CVE-2013-3918 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2013-11-08 |
| Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability CVE-2010-3962 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 4 | — | — | 2010-11-03 |
| Microsoft Internet Explorer Resource Management Errors Vulnerability CVE-2013-3893 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2013-09-17 |
| Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2025-53770 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-07-20 |
| Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability CVE-2025-47812 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2014-06-19 |
| Microsoft Windows Scripting Engine Type Confusion Vulnerability CVE-2025-30397 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-05-13 |
| Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability CVE-2025-24054 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 3 | — | — | 2025-04-17 |
| Google Chromium Mojo Sandbox Escape Vulnerability CVE-2025-2783 · CISA Known Exploited Vulnerabilities, Red Hat, Exploit-DB | vulnerability 2 exploit 1 | — | — | 2025-03-25 |
| Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability CVE-2025-26633 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 7 | 2025-03-11 |
| Adobe ColdFusion Deserialization Vulnerability CVE-2017-3066 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2018-02-07 |
| Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-9276 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2018-06-25 |
| Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21333 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2025-01-14 |
| Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability CVE-2024-49138 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2024-12-10 |
| Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CVE-2020-0618 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2020-02-11 |
| Adobe Flash Player Integer Underflow Vulnerablity CVE-2014-0497 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules, Exploit-DB | vulnerability 1 exploit 2 | — | — | 2014-02-05 |
| Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability CVE-2024-38193 · CISA Known Exploited Vulnerabilities, Exploit-DB | vulnerability 1 exploit 1 | — | — | 2024-08-13 |
Facets
Source 99745 of 99745 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22765
zetlyn/cve-nvd19666
zetlyn/cve-ghsa6175
zetlyn/cve-kev1733
Exploited 1733 of 99745 claims
yes1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22765
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19666
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6175
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10