A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. These vulnerabilities are utilized by our vulnerability management tool InsightVM. The exploits are all included in the Metasploit framework and utilized by our penetration testing tool, Metasploit Pro. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 241 - 260 of 164,289 in total
MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-40600)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Cross-Site Request Forgery (CSRF) (CVE-2024-40603)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-40604)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-40602)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-40605)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Information Exposure Through Log Files (CVE-2024-40598)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-40599)
Published: July 07, 2024 | Severity: 4
vulnerability
Explore
Ubuntu: (Multiple Advisories) (CVE-2024-36041): Plasma Workspace vulnerability
Published: July 05, 2024 | Severity: 4
vulnerability
Explore
Gentoo Linux: CVE-2024-36041: KDE Plasma Workspaces: Privilege Escalation
Published: July 05, 2024 | Severity: 4
vulnerability
Explore
Gentoo Linux: GLSA 202407-15: GraphicsMagick: Multiple Vulnerabilities
Published: July 05, 2024 | Severity: 4
vulnerability
Explore
Ubuntu: (Multiple Advisories) (CVE-2024-32498): Cinder vulnerability
Published: July 05, 2024 | Severity: 4
vulnerability
Explore
Debian: CVE-2024-39929: exim4 -- security update
Published: July 04, 2024 | Severity: 4
vulnerability
Explore
FreeBSD: VID-5D921A8C-3A43-11EF-B611-84A93843EB75 (CVE-2024-39884): Apache httpd -- source code disclosure
Published: July 04, 2024 | Severity: 4
vulnerability
Explore
Apache Tomcat: Important: Denial of Service (CVE-2024-34750)
Published: July 04, 2024 | Severity: 4
vulnerability
Explore
Ubuntu: (Multiple Advisories) (CVE-2024-39884): Apache HTTP Server vulnerabilities
Published: July 04, 2024 | Severity: 4
vulnerability
Explore
Artifex Ghostscript: (CVE-2024-29511) Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage.
Published: July 03, 2024 | Severity: 4
vulnerability
Explore
Artifex Ghostscript: (CVE-2024-29508) Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
Published: July 03, 2024 | Severity: 4
vulnerability
Explore
Artifex Ghostscript: (CVE-2024-29509) Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
Published: July 03, 2024 | Severity: 4
vulnerability
Explore
Artifex Ghostscript: (CVE-2024-29506) Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
Published: July 03, 2024 | Severity: 4
vulnerability
Explore
SUSE: CVE-2023-52168: SUSE Linux Security Advisory
Published: July 03, 2024 | Severity: 4
vulnerability
Explore