An organization, "mitre" maintains a list of publicly disclosed vulnerabilities and assigns each vulnerability a unique ID, which is the "CVE" number.
The PoC is a "proof of concept" that explains how it could be exploited practically.
So this is mapping both those things.