The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Red Hat: CVE-2026-114501: pillow: Pillow: Information disclosure via improper memory alignment during Arrow exportN/A6.3 Medium0%Oct 21, 2026
CVE-2026-114384: itsourcecode Online Cake Ordering System: A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114383: TOTOLINK EX200: A weakness has been identified in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
CVE-2026-114382: TOTOLINK EX200: A security flaw has been discovered in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
CVE-2026-114381: itsourcecode Online Cake Ordering System: A vulnerability was determined in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-112921: Exposure of Data Element to Wrong SessionN/AN/A0%Oct 21, 2026
Red Hat: CVE-2026-96778: pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflowN/A7.7 High0%Oct 21, 2026
Red Hat: CVE-2026-96644: pillow: Pillow: Denial of Service via out-of-bounds read in metafile parserN/A7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96643: pillow: pillow: Denial of Service via repeated EXIF headersN/A7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96642: pillow: Pillow: Denial of Service via negative archive member size in TarION/A7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96641: pillow: pillow: Denial of Service via integer overflow in text-width calculation6.5 MediumN/A0%Oct 21, 2026
Red Hat: CVE-2026-96640: pillow: pillow: Denial of Service via duplicate page references in PDF filesN/A8.2 High0%Oct 21, 2026
CVE-2026-96639: python-pillow Pillow: Pillow is a Python imaging library9.8 CriticalN/A1%Oct 21, 2026
Red Hat: CVE-2026-96638: pillow: pillow: Denial of Service via crafted RLE BMP image6.5 MediumN/A0%Oct 21, 2026
Red Hat: CVE-2026-96637: pillow: pillow: Denial of Service via decompression bomb bypass in SPIDER imagesN/A7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96636: pillow: pillow: Denial of Service via decompression bomb check bypass in multi-frame images6.5 MediumN/A0%Oct 21, 2026
CVE-2026-82987: Viewsonic vCast: There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,…N/AN/A0%Oct 21, 2026
CVE-2026-29001: TastyIgniter: TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to…7.2 High8.6 High1%Oct 21, 2026
Red Hat: CVE-2026-114406: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns6.8 MediumN/A0%Oct 21, 2026
CVE-2026-114380: itsourcecode Online Cake Ordering System: A vulnerability was found in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114379: EKKOLearnAI ekko-studio: A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.65.4 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114378: itsourcecode Online Cake Ordering System: A vulnerability was detected in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114377: leomoon-studios wiki-go: A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.13.8 Low2.0 Low0%Oct 21, 2026
CVE-2026-114145: gitpython-developers GitPython: GitPython is a python library used to interact with Git repositories7.5 HighN/A0%Oct 21, 2026
CVE-2026-114144: BinaryMuse toml-node: toml-node is a TOML parser for Node.js and the browser7.5 HighN/A0%Oct 21, 2026
1101-1125 of 530113
‹›