The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2020-14145: Observable Discrepancy5.9 MediumN/A2%Jun 29, 2020
CVE-2020-15319: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15318: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15317: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15316: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15315: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15314: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15313: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15312: Use of Hard-coded Credentials5.9 MediumN/A1%Jun 29, 2020
CVE-2020-15340: Missing Encryption of Sensitive Data7.5 HighN/A1%Jun 26, 2020
CVE-2020-3336: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A2%Jun 18, 2020
CVE-2020-3929: Inadequate Encryption Strength5.9 MediumN/A1%Jun 12, 2020
CVE-2020-0197: Out-of-bounds Read5.5 MediumN/A0%Jun 11, 2020
CVE-2020-1292: Undefined Security Weakness7.8 HighN/A3%Jun 9, 2020
CVE-2020-3200: Interpretation Conflict7.7 HighN/A2%Jun 3, 2020
CVE-2020-12062: Improper Input Validation7.5 HighN/A2%Jun 1, 2020
CVE-2020-10654: Out-of-bounds Write9.8 CriticalN/A3%May 13, 2020
CVE-2020-2185: Undefined Security Weakness5.6 MediumN/A1%May 6, 2020
CVE-2020-11940: Out-of-bounds Read7.5 HighN/A1%Apr 23, 2020
CVE-2020-11939: Integer Overflow or Wraparound9.8 CriticalN/A3%Apr 23, 2020
CVE-2020-11965: Improper Authentication9.8 CriticalN/A2%Apr 21, 2020
CVE-2019-14326: Incorrect Default Permissions7.8 HighN/A1%Apr 14, 2020
CVE-2020-1730: NULL Pointer Dereference5.3 MediumN/A3%Apr 13, 2020
CVE-2020-1616: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A1%Apr 8, 2020
CVE-2020-1614: Use of Hard-coded Credentials10.0 CriticalN/A1%Apr 8, 2020
1201-1225 of 1969
‹›