CVS prints it's output to stderr for some reason. Here's how to find locally modified files.

cvs up 2>1|grep ^M