The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-48504: AMD: Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a…N/A6.8 MediumN/ANov 10, 2026
CVE-2025-29941: AMD: Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could…N/A6.0 MediumN/ANov 10, 2026
CVE-2025-0008: AMD: Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU),…N/A8.4 HighN/ANov 10, 2026
CVE-2024-36309: AMD: Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-96437: Not Failing SecurelyN/A8.2 HighN/ANov 10, 2026
CVE-2026-92558: Improper Encoding or Escaping of OutputN/A6.3 MediumN/ANov 10, 2026
CVE-2026-92545: Use of Cache Containing Sensitive InformationN/A8.7 HighN/ANov 10, 2026
CVE-2026-92443: Use of Cache Containing Sensitive InformationN/A8.2 HighN/ANov 10, 2026
CVE-2026-92442: Use of Cache Containing Sensitive InformationN/A8.3 HighN/ANov 10, 2026
CVE-2026-92441: Improper Neutralization of CRLF SequencesN/A7.8 HighN/ANov 10, 2026
CVE-2026-92439: Improper AuthenticationN/A7.8 HighN/ANov 10, 2026
CVE-2026-91000: Missing Authentication for Critical FunctionN/A8.4 HighN/ANov 10, 2026
CVE-2026-90834: NULL Pointer Dereference5.5 MediumN/AN/ANov 10, 2026
CVE-2026-90833: Out-of-bounds Write7.8 HighN/AN/ANov 10, 2026
CVE-2026-90832: Out-of-bounds Read4.3 MediumN/AN/ANov 10, 2026
CVE-2026-89324: Improper Authentication9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-87042: Uncontrolled Resource Consumption6.5 MediumN/AN/ANov 10, 2026
CVE-2026-82391: Out-of-bounds Write9.1 CriticalN/AN/ANov 10, 2026
CVE-2026-77685: zephyrproject zephyr: The RFCOMM multiplexer control-channel handler in subsys/bluetooth/host/classic/rfcomm.c computed the echo length for a…8.3 HighN/AN/ANov 10, 2026
CVE-2026-67177: Chargemap: Chargemap contains a stored cross site scripting vulnerability5.4 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-67176: Chargemap: Chargemap contains an open redirect vulnerability in the authentication login endpoint5.4 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-67175: Chargemap: Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a…4.6 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-40670: AMD: Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-40669: AMD: An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor…N/A4.0 MediumN/ANov 10, 2026
CVE-2026-40668: AMD: Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious…N/A4.6 MediumN/ANov 10, 2026
1151-1175 of 425740