The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122324: oss-apps SplitPro: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other…3.1 Low2.3 LowN/ANov 5, 2026
CVE-2026-122317: oss-apps SplitPro: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any…4.3 Medium5.3 MediumN/ANov 5, 2026
CVE-2026-115738: Trellix DLP on-prem extensions: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated…N/A7.1 HighN/ANov 5, 2026
CVE-2026-119744: Cendio ThinLinc: Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that…8.8 High7.7 HighN/ANov 5, 2026
CVE-2026-97356: Apache Software Foundation Apache OFBiz: External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07…N/AN/AN/ANov 5, 2026
CVE-2026-97355: Apache Software Foundation Apache OFBiz: Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-92887: Apache Software Foundation Apache OFBiz: Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-85627: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache…8.8 HighN/AN/ANov 5, 2026
CVE-2026-84183: Apache Software Foundation Apache OFBiz: Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/LayoutEvents.xml in…8.8 HighN/AN/ANov 5, 2026
CVE-2026-83542: Apache Software Foundation Apache OFBiz: Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows…9.8 CriticalN/AN/ANov 5, 2026
CVE-2026-83538: Missing AuthorizationN/AN/AN/ANov 5, 2026
CVE-2026-82960: Apache Software Foundation Apache OFBiz: Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin before…8.8 HighN/AN/ANov 5, 2026
CVE-2026-82912: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Injection')…8.8 HighN/AN/ANov 5, 2026
CVE-2026-82910: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in…8.8 HighN/AN/ANov 5, 2026
CVE-2026-82907: Apache Software Foundation Apache OFBiz: Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all…9.8 CriticalN/AN/ANov 5, 2026
CVE-2026-123028: itsourcecode Online Book Store: A vulnerability was identified in itsourcecode Online Book Store 1.07.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-114277: Apache Software Foundation Apache OFBiz: Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBizN/AN/AN/ANov 5, 2026
CVE-2026-114272: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08…N/AN/AN/ANov 5, 2026
CVE-2026-114271: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on…N/AN/AN/ANov 5, 2026
CVE-2026-114235: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-114233: Apache Software Foundation Apache OFBiz: Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an…N/AN/AN/ANov 5, 2026
CVE-2026-114229: Apache Software Foundation Apache OFBiz: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in…N/AN/AN/ANov 5, 2026
CVE-2026-109928: Apache Software Foundation Apache OFBiz: Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-109856: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms…N/AN/AN/ANov 5, 2026
CVE-2026-109837: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all…N/AN/AN/ANov 5, 2026
576-600 of 424315
‹›