The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16089: External Control of Assumed-Immutable Web Parameter5.9 MediumN/A0%Jul 17, 2026
CVE-2026-16017: Missing Authorization6.3 Medium2.1 Low0%Jul 17, 2026
CVE-2026-12705: Missing Support for Integrity Check6.4 Medium5.9 Medium0%Jul 17, 2026
CVE-2026-9592: Use of GET Request Method With Sensitive Query StringsN/A7.5 High0%Jul 17, 2026
CVE-2026-7488: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Jul 17, 2026
CVE-2026-51080: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-16072: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.9 MediumN/A0%Jul 17, 2026
CVE-2026-16016: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 17, 2026
CVE-2026-16015: Missing Authentication for Critical Function6.3 Medium2.1 Low1%Jul 17, 2026
CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic8.1 HighN/A0%Jul 17, 2026
CVE-2024-42214: Incomplete Denylist to Cross-Site Scripting5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23578: Permissive Cross-domain Policy with Untrusted Domains4.2 MediumN/A0%Jul 17, 2026
CVE-2024-23577: Improper Input Validation4.3 MediumN/A0%Jul 17, 2026
CVE-2024-23575: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23574: Observable Response Discrepancy5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23573: Direct Request3.7 LowN/A0%Jul 17, 2026
CVE-2024-23572: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.2 MediumN/A0%Jul 17, 2026
CVE-2024-23571: Use of Web Browser Cache Containing Sensitive Information4.3 MediumN/A0%Jul 17, 2026
CVE-2024-23570: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jul 17, 2026
CVE-2024-23569: Incomplete Denylist to Cross-Site Scripting4.3 MediumN/A0%Jul 17, 2026
CVE-2024-23568: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23567: Guessable CAPTCHA4.3 MediumN/A0%Jul 17, 2026
CVE-2024-23566: Guessable CAPTCHA6.5 MediumN/A0%Jul 17, 2026
CVE-2024-23565: Improper Control of Interaction Frequency5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23564: Inadequate Encryption Strength9.1 CriticalN/A0%Jul 17, 2026
42001-42025 of 758711
‹›