The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2010-20125: DedeCMS: DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated…7.5 High8.7 High1%Oct 30, 2026
CVE-2026-119717: Code InjectionN/A9.2 Critical1%Oct 30, 2026
CVE-2026-119716: wbond, up9inc: pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that…9.8 Critical9.3 Critical0%Oct 30, 2026
CVE-2026-119706: InternLM lmdeploy: InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows…9.8 Critical9.3 Critical1%Oct 30, 2026
CVE-2026-104067: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-104066: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-104065: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-104064: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-104063: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader…6.1 Medium6.9 Medium0%Oct 30, 2026
CVE-2026-104062: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-104061: Scribus: Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the…7.8 High8.5 High0%Oct 30, 2026
CVE-2026-91915: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output…6.8 MediumN/A0%Oct 30, 2026
CVE-2026-91914: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability7.1 HighN/A0%Oct 30, 2026
CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.8 HighN/A3%Oct 30, 2026
CVE-2026-91912: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability7.3 HighN/A0%Oct 30, 2026
CVE-2026-86715: Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP: Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc7.1 HighN/A0%Oct 30, 2026
CVE-2026-49116: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 30, 2026
CVE-2026-49115: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 30, 2026
CVE-2026-119602: kyz libmspack: libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that…3.7 Low6.3 Medium0%Oct 30, 2026
CVE-2026-119601: sshock AFFLIB: AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to…6.1 Medium6.9 Medium0%Oct 30, 2026
CVE-2026-119600: simsong tcpflow: tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read…4.8 Medium6.3 Medium0%Oct 30, 2026
CVE-2026-119599: looplj AxonHub: AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign…4.3 Medium5.3 Medium0%Oct 30, 2026
CVE-2026-119598: iluobei miaomiaowu: Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs…4.3 Medium5.3 Medium0%Oct 30, 2026
CVE-2026-119597: AIDotNet OpenDeepWiki: OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical0%Oct 30, 2026
CVE-2026-119596: HDInnovations UNIT3D: UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows…4.3 Medium5.3 Medium0%Oct 30, 2026
1026-1050 of 574114
‹›