CVE & Exploit Intelligence Database

Updated 52m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

15 results Clear all

CVE-2025-1864 9.8 CRITICAL EPSS 0.00

radare2 <5.9.9 - Buffer Overflow

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.

CWE-119 Mar 03, 2025

CVE-2025-1744 9.8 CRITICAL EPSS 0.00

Radare2 < 5.9.8 - Out-of-Bounds Write

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.

CWE-787 Feb 28, 2025

CVE-2024-29646 9.8 CRITICAL EPSS 0.01

radarorg radare2 <5.8.8 - RCE

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

CWE-120 Dec 17, 2024

CVE-2023-46570 9.8 CRITICAL EPSS 0.00

radare2 <5.8.9 - Info Disclosure

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.

CWE-125 Oct 28, 2023

CVE-2023-46569 9.8 CRITICAL EPSS 0.00

radare2 <5.8.9 - Info Disclosure

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.

CWE-125 Oct 28, 2023

CVE-2023-4322 9.8 CRITICAL 1 Writeup EPSS 0.00

radareorg/radare2 <5.9.0 - Buffer Overflow

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.

CWE-122 Aug 14, 2023

CVE-2021-32495 10.0 CRITICAL 1 Writeup EPSS 0.00

Radare2 - Use After Free

Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

CWE-416 Jul 07, 2023

CVE-2021-32494 10.0 CRITICAL 1 Writeup EPSS 0.00

Radare2 - Divide By Zero

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.

CWE-369 Jul 07, 2023

CVE-2020-27794 9.1 CRITICAL 1 Writeup EPSS 0.00

Radare2 < 4.4.0 - Double Free

A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.

CWE-415 Aug 19, 2022

CVE-2022-1899 9.1 CRITICAL EPSS 0.00

radare2 <5.7.0 - Info Disclosure

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.

CWE-125 May 26, 2022

CVE-2022-1297 9.1 CRITICAL 1 Writeup EPSS 0.00

Radare2 < 5.6.8 - Out-of-Bounds Read

Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.

CWE-125 Apr 11, 2022

CVE-2022-1296 9.1 CRITICAL 1 Writeup EPSS 0.00

Radare2 < 5.6.8 - Out-of-Bounds Read

Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.

CWE-125 Apr 11, 2022

CVE-2022-0559 9.8 CRITICAL 1 Writeup EPSS 0.00

radareorg/radare2 <5.6.2 - Use After Free

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.

CWE-416 Feb 16, 2022

CVE-2022-0139 9.8 CRITICAL EPSS 0.00

radareorg/radare2 <5.6.0 - Use After Free

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.

CWE-416 Feb 08, 2022

CVE-2020-24133 9.8 CRITICAL EPSS 0.02

Radare2-extras <e74a93c - Buffer Overflow

A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.

CWE-787 Jul 14, 2021