The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Red Hat: CVE-2026-112401: pillow: pillow: Denial of Service via crafted GIF commentsN/A6.9 Medium0%Oct 19, 2026
Red Hat: CVE-2026-112400: pillow: pillow: Denial of Service via memory exhaustion from crafted GIF imageN/A8.7 High0%Oct 19, 2026
Red Hat: CVE-2026-112399: pillow: pillow: Denial of service via crafted APNG imageN/A8.7 High0%Oct 19, 2026
Red Hat: CVE-2026-112397: pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width imagesN/A8.7 High0%Oct 19, 2026
Red Hat: CVE-2026-112396: pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding5.9 MediumN/A0%Oct 19, 2026
Red Hat: CVE-2026-112392: pillow: pillow: Denial of Service via zero-size images in rank filtersN/A8.2 High0%Oct 19, 2026
CVE-2026-112360: Netis EAP930: A security vulnerability has been detected in Netis EAP930 1.250905.1154548.0 High7.4 High0%Oct 19, 2026
CVE-2026-112358: TiBillet Lespass: A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc128607405374.1 Medium2.1 Low0%Oct 19, 2026
Red Hat: CVE-2026-112258: gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels7.8 HighN/A0%Oct 19, 2026
CVE-2026-105815: TP-Link Systems Inc. Tapo C210 v3.6: TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS…N/A7.1 High0%Oct 19, 2026
CVE-2026-105814: TP-Link Systems Inc. Tapo C210 v3.6: TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON APIN/A5.3 Medium0%Oct 19, 2026
CVE-2024-54657: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54656: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54655: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54654: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54653: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54652: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54651: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54650: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54649: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54648: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54647: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54646: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54645: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2024-54644: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
3001-3025 of 418797
‹›