An organization, "mitre" maintains a list of publicly disclosed vulnerabilities and assigns each vulnerability a unique ID, which is the "CVE" number. The PoC is a "proof of concept" that explains how it could be exploited practically.

So this is mapping both those things.