CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 1h agofresh within 24h
66,398things
9,037named by two sources or more
1,118conflicts
7sources

Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12677 · Red Hat 19828 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
PropertyCISA Known Exploited VulnerabilitiesRed HatNVDGitHub advisoriesMetasploit exploit modulesExploit-DBWrite-ups
Cvssnot saidcvss3_scorecve.metrics.cvssMetricV31[].cvssData.baseScorecvss.scorenot saidnot saidnot said
Exploitedconst:yesnot saidnot saidnot saidnot saidnot saidnot said
Severitynot saidseveritynot saidseveritynot saidnot saidnot said

Everything else the sources say is shown side by side, and not compared.

severity=critical ✕severity=critical ✕

EverythingExploited, and severearticle 10exploit 49396vulnerability 50339

Found

1–12 of 12
ThingKindSeverityCvssDate
kernel: Linux kernel: macb Ethernet driver memory corruption leads to denial of service.
CVE-2023-54257 · Red Hat · matched kernel
vulnerability 1 critical9.82025-12-30
A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by...
CVE-2026-13043 · GitHub advisories, NVD · matched kernel
vulnerability 2 critical—2026-10-01
kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
CVE-2026-43037 · Red Hat · matched kernel
vulnerability 1 critical8.82026-05-01
Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION`...
CVE-2026-102710 · GitHub advisories, NVD · matched kernel
vulnerability 2 critical—2026-09-29
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix...
CVE-2026-100075 · GitHub advisories, NVD · matched kernel
vulnerability 3 critical9.82026-09-25
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer...
CVE-2026-97413 · GitHub advisories, NVD · matched kernel
vulnerability 3 critical9.82026-09-24
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero...
CVE-2026-93207 · GitHub advisories, NVD · matched kernel
vulnerability 3 critical9.82026-09-24
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply...
CVE-2026-93228 · GitHub advisories, NVD · matched kernel
vulnerability 3 critical9.12026-09-24
@xhmikosr/decompress: Path traversal via symlink chain
CVE-2026-101894 · GitHub advisories, NVD · matched kernel
vulnerability 2 critical9.12026-09-28
SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking
CVE-2026-69085 · GitHub advisories · matched kernel
vulnerability 1 critical102026-10-01
Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain
· GitHub advisories
vulnerability 1 critical102026-10-02
Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF
· GitHub advisories
vulnerability 1 critical102026-10-02

Facets

Kind 99745 of 99745 claims

exploit49396

Severity 26591 of 99745 claims

Exploited 1733 of 99745 claims

yes1733

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

vulnerability · current1733

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

vulnerability · current22765

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

vulnerability · current19666

GitHub advisories high

The ecosystem packages no distribution ships.

vulnerability · failing6175

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

exploit · current2698

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

exploit · current46698

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.

article · current10