The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2012-20005: Łukasz Więcek SocialFit: SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 MediumN/AOct 20, 2026
CVE-2012-20004: Carles Reverter K-news: K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 MediumN/AOct 20, 2026
CVE-2012-20003: Web Updates KMU Custom Tables: Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 MediumN/AOct 20, 2026
CVE-2012-20002: James Charlesworth TinyMCE Thumbnail Gallery: TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows…7.5 High8.7 HighN/AOct 20, 2026
CVE-2026-113728: bulwarkmail webmail: Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server7.5 HighN/AN/AOct 20, 2026
CVE-2026-113727: openchoreo: OpenChoreo is a developer platform for Kubernetes7.4 HighN/AN/AOct 20, 2026
CVE-2026-113812: Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised…N/AN/AN/AOct 20, 2026
CVE-2026-113274: Google Chrome: Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113039: Google Chrome: Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113125: Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113013: Google Chrome: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113088: Google Chrome: Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…N/AN/AN/AOct 20, 2026
CVE-2026-113083: Google Chrome: Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113286: Google Chrome: Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113227: Google Chrome: Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113122: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read…N/AN/AN/AOct 20, 2026
CVE-2026-112996: Google Chrome: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113294: Google Chrome: Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113130: Google Chrome: Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…N/AN/AN/AOct 20, 2026
CVE-2026-113074: Google Chrome: Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute…N/AN/AN/AOct 20, 2026
CVE-2026-113067: Google Chrome: Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113046: Google Chrome: Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…N/AN/AN/AOct 20, 2026
CVE-2026-113182: Google Chrome: Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…N/AN/AN/AOct 20, 2026
CVE-2026-113331: Google Chrome: Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…N/AN/AN/AOct 20, 2026
CVE-2026-113237: Google Chrome: Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside…N/AN/AN/AOct 20, 2026
1151-1175 of 407346