The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120755: The HDF Group Szip Filter: HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.cN/A4.7 MediumN/ANov 3, 2026
CVE-2026-120754: The HDF Group Scale-Offset Filter: HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in…N/A1.9 LowN/ANov 3, 2026
CVE-2026-119215: team-alembic ash_authentication: Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authentication allows a user with an…N/A7.6 HighN/ANov 3, 2026
CVE-2026-118505: team-alembic ash_authentication: Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ash_authentication allows an…N/A6.3 MediumN/ANov 3, 2026
CVE-2026-118487: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates a `RecordParser`…7.5 HighN/AN/ANov 3, 2026
CVE-2026-114582: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-113733: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.102.2 Low2.1 LowN/ANov 3, 2026
CVE-2026-113593: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.193.1 Low2.3 LowN/ANov 3, 2026
CVE-2026-111362: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-111211: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-108147: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-119673: MongoDB Database Tools: MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for…2.8 Low1.0 LowN/ANov 3, 2026
CVE-2026-119672: MongoDB Database Tools: MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when…4.8 Medium5.9 MediumN/ANov 3, 2026
CVE-2026-119675: MongoDB Database Tools: MongoDB Database Tools mongorestore inconsistently handles the system.buckets8.6 High5.2 MediumN/ANov 3, 2026
CVE-2026-121260: Ziroom ZHOME A0101: A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 2020041514059.1 Critical8.5 HighN/ANov 3, 2026
CVE-2026-119741: RsyncProject rsync: rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c…7.5 High8.7 HighN/ANov 3, 2026
CVE-2026-43603: AMD: A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-40661: AMD AMD Compressionator SDK: An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to…N/A5.2 MediumN/ANov 3, 2026
CVE-2026-40660: AMD AMD Compressionator SDK: A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local…N/A5.2 MediumN/ANov 3, 2026
CVE-2026-40659: AMD AMD Compressionator SDK: An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…N/A5.1 MediumN/ANov 3, 2026
CVE-2026-40652: AMD AMD Compressionator SDK: An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…N/A5.2 MediumN/ANov 3, 2026
CVE-2026-121513: D3TN GmbH µD3TN: Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS7.5 HighN/AN/ANov 3, 2026
CVE-2026-121512: D3TN GmbH µD3TN: Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS7.5 HighN/AN/ANov 3, 2026
CVE-2026-121511: D3TN GmbH µD3TN: Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS7.1 HighN/AN/ANov 3, 2026
CVE-2026-121510: D3TN GmbH µD3TN: Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated…7.5 HighN/AN/ANov 3, 2026
76-100 of 528356
‹›