The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-125174: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a NULL pointer dereference vulnerability in ff_hap_set_chunk_count()…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125173: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125104: FFmpeg: FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in ape_decode_frame() in libavcodec/apedec.c that fails…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125073: FFmpeg: FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125072: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame() in…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125071: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/jvdec.c that allows attackers to…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125070: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqi_decode_frame() in libavcodec/eatqi.c,…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125069: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125068: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decode_frame()…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125067: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vble_decode_frame() in libavcodec/vble.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125066: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak (CLJR) decoder in…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125065: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tgv_decode_inter() in libavcodec/eatgv.c that…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125064: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726_decode_frame() in libavcodec/g726.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125063: Red Hat Red Hat Ansible Automation Platform 2: A flaw was found in the rrule validation of schedules in automation controller4.3 MediumN/AN/ANov 9, 2026
CVE-2026-84503: Red Hat: A flaw was found in ansible-core's ansible.builtin.git module6.7 MediumN/AN/ANov 9, 2026
CVE-2026-123797: supertokens supertokens-core: SuperTokens Core is an open source authentication server7.5 HighN/AN/ANov 9, 2026
CVE-2026-60117: KasemJaffer receive_sharing_intent: The Android implementation of the Flutter/Dart receive_sharing_intent package, versions 1.4.1 through 1.9.0, contains a…6.2 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-123796: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 9, 2026
CVE-2026-123373: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 9, 2026
CVE-2026-123270: Redpanda Data Connect: Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated…N/AN/AN/ANov 9, 2026
CVE-2026-123372: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 9, 2026
CVE-2026-123371: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 9, 2026
CVE-2026-123370: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A5.1 MediumN/ANov 9, 2026
CVE-2026-123369: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A5.3 MediumN/ANov 9, 2026
CVE-2026-119756: arendst Tasmota: Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in…9.8 Critical9.3 CriticalN/ANov 9, 2026
176-200 of 427771
‹›