The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2015-20123: Aspose Aspose Doc Exporter: Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated…7.5 High8.7 High0%Oct 20, 2026
CVE-2014-125134: ChurcHope: ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers…7.5 High8.7 High1%Oct 20, 2026
CVE-2014-125133: imithemes NativeChurch: NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated…7.5 High8.7 High1%Oct 20, 2026
CVE-2014-125132: Jason Newman Blogroll Fun: Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2014-125131: DedeCMS: DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20005: Łukasz Więcek SocialFit: SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20004: Carles Reverter K-news: K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20003: Web Updates KMU Custom Tables: Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20002: James Charlesworth TinyMCE Thumbnail Gallery: TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows…7.5 High8.7 High0%Oct 20, 2026
CVE-2026-86413: curl: When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl…N/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-86412): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
CVE-2026-86411: curl: An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy…N/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-86410): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-86409: curl: curl: stale SigV4 headers sent unintendedN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-113869: thunderbird: thunderbird: Use-after-free via S/MIME decryption password prompt5.4 MediumN/A0%Oct 20, 2026
Red Hat: CVE-2026-113868: thunderbird: Thunderbird: information disclosure via malformed authentication challenge5.3 MediumN/A0%Oct 20, 2026
Red Hat: CVE-2026-113867: thunderbird: thunderbird: Unauthorized actions via XMPP stanza injectionN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-113866: thunderbird: thunderbird: Information disclosure via unencrypted AutoDiscover lookup5.9 MediumN/A0%Oct 20, 2026
CVE-2026-113725: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/A0%Oct 20, 2026
CVE-2026-113724: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/A0%Oct 20, 2026
CVE-2026-113723: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A7.1 High0%Oct 20, 2026
CVE-2026-113722: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/A0%Oct 20, 2026
CVE-2026-113721: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/A0%Oct 20, 2026
CVE-2026-113720: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A4.4 Medium0%Oct 20, 2026
CVE-2026-113719: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/A0%Oct 20, 2026
3101-3125 of 415363
‹›