The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-125098: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125097: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw_decode() in libavcodec/rawdec.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125096: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in libavcodec/tiertexseqv.c that allows…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125095: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c,…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125041: Red Hat: A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer5.5 MediumN/AN/ANov 9, 2026
CVE-2026-125040: Red Hat: A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base6.5 MediumN/AN/ANov 9, 2026
CVE-2026-124001: nasa-jpl ION-DTN: NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR)…8.1 High9.2 CriticalN/ANov 9, 2026
CVE-2026-124000: nasa-jpl ION-DTN: NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message…5.3 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-123999: nasa-jpl ION-DTN: NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon (nm_mgr)…7.5 High8.7 HighN/ANov 9, 2026
CVE-2026-123804: supertokens supertokens-core: SuperTokens Core is an open source authentication server6.8 MediumN/AN/ANov 9, 2026
CVE-2026-123803: supertokens supertokens-core: SuperTokens Core is an open source authentication server8.1 HighN/AN/ANov 9, 2026
CVE-2026-123802: supertokens supertokens-core: SuperTokens Core is an open source authentication server8.1 HighN/AN/ANov 9, 2026
CVE-2026-123801: supertokens supertokens-core: SuperTokens Core is an open source authentication server7.4 HighN/AN/ANov 9, 2026
CVE-2026-123800: supertokens supertokens-core: SuperTokens Core is an open source authentication server9.9 CriticalN/AN/ANov 9, 2026
CVE-2026-123799: supertokens supertokens-core: SuperTokens Core is an open source authentication server7.4 HighN/AN/ANov 9, 2026
CVE-2026-123798: supertokens supertokens-core: SuperTokens Core is an open source authentication server8.1 HighN/AN/ANov 9, 2026
CVE-2026-121769: axew3.com WP w3all phpBB: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP…8.5 HighN/AN/ANov 9, 2026
CVE-2026-121573: Melapress WP Activity Log: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-120834: Tobias WP2LEADS: Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects…7.3 HighN/AN/ANov 9, 2026
CVE-2026-119079: Red Hat: decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112323: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112322: Red Hat: clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112321: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112320: Red Hat: The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112319: Red Hat: The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote…6.5 MediumN/AN/ANov 9, 2026
151-175 of 427771
‹›