The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2021-41117: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)8.7 HighN/A3%Oct 11, 2021
CVE-2021-36298: Use of a Broken or Risky Cryptographic Algorithm8.1 HighN/A1%Oct 1, 2021
CVE-2021-41617: Undefined Security WeaknessN/AN/A3%Sep 26, 2021
CVE-2021-1419: Improper Access Control7.8 HighN/A0%Sep 23, 2021
CVE-2020-26301: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A4%Sep 20, 2021
CVE-2021-41393: Undefined Security Weakness9.8 CriticalN/A1%Sep 18, 2021
CVE-2016-20012: Observable Discrepancy5.3 MediumN/A5%Sep 15, 2021
CVE-2021-28914: Weak Password Requirements6.5 MediumN/A1%Sep 9, 2021
CVE-2021-28913: Missing Authentication for Critical Function9.8 CriticalN/A2%Sep 9, 2021
CVE-2021-28912: Weak Password Requirements7.2 HighN/A1%Sep 9, 2021
CVE-2021-28911: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A2%Sep 9, 2021
CVE-2021-28909: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A1%Sep 9, 2021
CVE-2021-34718: Improper Neutralization of Argument Delimiters in a Command8.1 HighN/A2%Sep 9, 2021
CVE-2021-27022: Insertion of Sensitive Information into Log File4.9 MediumN/A1%Sep 7, 2021
CVE-2021-34565: Use of Hard-coded Credentials9.8 CriticalN/A1%Aug 31, 2021
CVE-2021-34564: Cleartext Storage of Sensitive Information in a Cookie5.5 MediumN/A0%Aug 31, 2021
CVE-2021-34563: Sensitive Cookie Without 'HttpOnly' Flag3.3 LowN/A0%Aug 31, 2021
CVE-2021-34562: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Aug 31, 2021
CVE-2021-34561: Reliance on Reverse DNS Resolution for a Security-Critical Action7.5 HighN/A1%Aug 31, 2021
CVE-2021-34560: Insufficiently Protected Credentials5.5 MediumN/A0%Aug 31, 2021
CVE-2021-34559: Inconsistent Interpretation of HTTP Requests5.4 MediumN/A1%Aug 31, 2021
CVE-2021-33555: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 31, 2021
CVE-2021-3634: Out-of-bounds Write6.5 MediumN/A5%Aug 31, 2021
CVE-2021-1592: Improper Control of a Resource Through its Lifetime4.3 MediumN/A1%Aug 25, 2021
CVE-2021-38306: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A9%Aug 24, 2021
1076-1100 of 1969
‹›