The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2018-25331: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 17, 2026
CVE-2026-8752: Improper Access Control5.3 Medium5.5 Medium1%May 17, 2026
CVE-2026-8751: Deserialization of Untrusted Data9.8 Critical5.5 Medium0%May 17, 2026
CVE-2026-8750: Exposure of Sensitive Information to an Unauthorized Actor7.5 High5.5 Medium0%May 17, 2026
CVE-2026-8740: Improper Neutralization of Special Elements Used in a Template Engine6.3 Medium2.1 Low0%May 17, 2026
CVE-2026-8739: Use of Hard-coded Cryptographic Key5.3 Medium5.5 Medium0%May 17, 2026
CVE-2026-8738: Undefined Security Weakness6.5 Medium5.5 Medium1%May 17, 2026
CVE-2026-8737: Missing Authentication for Critical Function5.3 Medium5.5 Medium1%May 17, 2026
CVE-2026-8736: Improper Limitation of a Pathname to a Restricted Directory4.1 Medium0.9 Low0%May 17, 2026
CVE-2026-8735: Deserialization of Untrusted Data6.3 Medium2.1 Low0%May 17, 2026
CVE-2026-8724: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low1%May 17, 2026
CVE-2021-47981: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 16, 2026
CVE-2021-47975: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%May 16, 2026
CVE-2021-47955: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37240: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37238: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37236: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37235: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2026-44721: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%May 15, 2026
CVE-2026-44568: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 15, 2026
CVE-2026-46367: Improper Neutralization of Input During Web Page Generation7.6 High8.3 High0%May 15, 2026
CVE-2026-46361: Improper Neutralization of Input During Web Page Generation6.9 Medium8.2 High0%May 15, 2026
CVE-2026-46360: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-45622: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%May 15, 2026
CVE-2021-47968: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 15, 2026
2601-2625 of 16407