The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-59267: Apache Software Foundation Apache OpenOffice: A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier7.8 High5.8 MediumN/ANov 4, 2026
CVE-2026-121925: Snowflake: A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions,…6.6 MediumN/AN/ANov 4, 2026
CVE-2026-114456: Snowflake: Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could have…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-104799: rnlab Mobile builder: The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including,…8.8 HighN/AN/ANov 4, 2026
CVE-2026-90634: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF…7.3 HighN/AN/ANov 4, 2026
CVE-2026-90632: Apache Software Foundation Apache OpenOffice: Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the…5.5 MediumN/AN/ANov 4, 2026
CVE-2026-90631: Apache Software Foundation Apache OpenOffice: Apache OpenOffice documents can contain links3.3 LowN/AN/ANov 4, 2026
CVE-2026-90629: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF…7.3 HighN/AN/ANov 4, 2026
CVE-2026-90628: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF…7.3 HighN/AN/ANov 4, 2026
CVE-2026-90627: Apache Software Foundation Apache OpenOffice: The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the…5.5 MediumN/AN/ANov 4, 2026
CVE-2026-90626: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF…7.3 HighN/AN/ANov 4, 2026
CVE-2026-90624: Apache Software Foundation Apache OpenOffice: An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF…7.3 HighN/AN/ANov 4, 2026
CVE-2026-59268: Apache Software Foundation Apache OpenOffice: An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a…7.3 HighN/AN/ANov 4, 2026
CVE-2026-59264: Apache Software Foundation Apache OpenOffice: The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code…7.8 HighN/AN/ANov 4, 2026
CVE-2026-59263: Apache Software Foundation Apache OpenOffice: A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed…5.5 Medium1.9 LowN/ANov 4, 2026
CVE-2026-115448: Apache Software Foundation Apache ZooKeeper: Uncontrolled recursion in Apache ZooKeeperN/A8.7 HighN/ANov 4, 2026
CVE-2026-108946: Apache Software Foundation: Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDBN/AN/AN/ANov 4, 2026
CVE-2026-108500: Apache Software Foundation Apache ActiveMQ: Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an…N/AN/AN/ANov 4, 2026
CVE-2026-103582: Apache Software Foundation Apache ActiveMQ NMS OpenWire Client Library: Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package…N/AN/AN/ANov 4, 2026
CVE-2026-102704: Xen: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…N/AN/AN/ANov 4, 2026
CVE-2026-102703: Xen: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…N/AN/AN/ANov 4, 2026
CVE-2026-100302: Apache Software Foundation Apache ZooKeeper: Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a…N/A7.1 HighN/ANov 4, 2026
CVE-2026-100300: Apache Software Foundation Apache ZooKeeper: Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write…N/A8.7 HighN/ANov 4, 2026
CVE-2026-100252: Apache Software Foundation Apache ZooKeeper: Improper Authorization vulnerability in Apache ZooKeeperN/A8.6 HighN/ANov 4, 2026
CVE-2026-100235: Apache Software Foundation Apache ZooKeeper: Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of…N/A6.0 MediumN/ANov 4, 2026
76-100 of 419764
‹›