The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-125255: FFmpeg: FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125253: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow in cbs_vp9_split_fragment() in libavcodec/cbs_vp9.c that wraps the…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-124987: mikefarah yq: A vulnerability has been found in mikefarah yq up to 4.53.36.3 Medium2.1 LowN/ANov 9, 2026
CVE-2026-124834: n/a iomad: A security vulnerability has been detected in iomad up to 4.5.15/5.0.11/5.1.8/5.2.43.7 Low6.3 MediumN/ANov 9, 2026
CVE-2026-124077: Apache Software Foundation Apache Commons Codec: The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry namesN/AN/AN/ANov 9, 2026
CVE-2026-123805: sipsorcery-org sipsorcery: SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET7.5 HighN/AN/ANov 9, 2026
CVE-2026-119078: Apache Software Foundation Apache Commons Codec: Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously…N/AN/AN/ANov 9, 2026
CVE-2026-84410: Canonical apport: In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain…N/A7.3 HighN/ANov 9, 2026
CVE-2026-86692: Canonical apport: In apport before 2.37.0, a path traversal vulnerability allows an attacker who can supply a crafted crash report to…N/A5.7 MediumN/ANov 9, 2026
CVE-2026-70555: rConfig: rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to…6.5 Medium7.1 HighN/ANov 9, 2026
CVE-2026-12977: Red Hat: A flaw was found in the deployment-operation family of WildFly Core8.8 HighN/AN/ANov 9, 2026
CVE-2026-125251: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc_frame() function in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125250: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gif_image_write_image() in libavcodec/gif.c…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125249: FFmpeg: FFmpeg 7.1 through 9.0.2 contains an integer overflow in ff_vk_decode_add_slice() in libavcodec/vulkan_decode.c that…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125248: FFmpeg: FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c that undersizes the…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125247: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in dng_decode_tiles() that allows attackers to leak…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125244: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125243: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125241: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125239: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125236: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in alloc_frame() in libavcodec/vvc/refs.c that leaks SPS and…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125235: FFmpeg: FFmpeg through 9.0.2 contains a heap overflow vulnerability in libavcodec/qsvenc.c that allows attackers to corrupt…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125233: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec/dvbsubenc.c that…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125229: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125228: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in put_vector() in…5.3 Medium5.8 MediumN/ANov 9, 2026
276-300 of 427771
‹›