The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-42992: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2023-42991: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2023-42990: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2026-112361: n/a Dolibarr: A vulnerability has been found in Dolibarr up to 23.0.26.3 Medium5.3 Medium0%Oct 19, 2026
CVE-2026-112261: Red Hat: A flaw was found in GIMP7.8 HighN/A0%Oct 19, 2026
CVE-2026-112258: Red Hat: A flaw was found in GIMP7.8 HighN/A0%Oct 19, 2026
CVE-2026-112257: Red Hat: A flaw was found in GIMP7.8 HighN/A0%Oct 19, 2026
CVE-2026-76788: Out-of-bounds Write8.8 HighN/A0%Oct 19, 2026
CVE-2026-76787: NULL Pointer Dereference5.9 MediumN/A0%Oct 19, 2026
CVE-2026-112395: python-pillow Pillow: Pillow is a Python imaging library6.5 MediumN/A0%Oct 19, 2026
CVE-2026-112394: Buffer Over-readN/A6.3 Medium0%Oct 19, 2026
CVE-2026-112393: Heap-based Buffer OverflowN/A9.2 Critical1%Oct 19, 2026
CVE-2026-112391: Loop with Unreachable Exit ConditionN/A6.3 Medium0%Oct 19, 2026
CVE-2026-112390: Loop with Unreachable Exit ConditionN/A8.2 High0%Oct 19, 2026
CVE-2026-112302: kiwilan php-archive: A weakness has been identified in kiwilan php-archive up to 2.3.026.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112301: Improper Neutralization of Special Elements used in an OS Command7.3 High5.5 Medium2%Oct 19, 2026
CVE-2026-112300: Inefficient Regular Expression Complexity5.3 Medium6.9 Medium0%Oct 19, 2026
CVE-2026-112299: Server-Side Request Forgery (SSRF)4.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-111946: Exposure of Sensitive System Information to an Unauthorized Control SphereN/AN/A0%Oct 19, 2026
CVE-2026-82166: Missing Authentication for Critical Function8.8 HighN/A0%Oct 19, 2026
CVE-2026-71170: Uncontrolled Search Path Element7.8 HighN/A0%Oct 19, 2026
CVE-2026-71169: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Oct 19, 2026
CVE-2026-112782: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 19, 2026
CVE-2026-112781: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium8.7 High0%Oct 19, 2026
CVE-2026-112780: Exposed Dangerous Method or Function8.8 High9.3 Critical0%Oct 19, 2026
2551-2575 of 417319
‹›