The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2024-54484: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54479: Undefined Security Weakness7.5 HighN/A2%Dec 12, 2024
CVE-2024-54477: Insecure Storage of Sensitive Information5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54476: Observable Discrepancy5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54474: Undefined Security Weakness5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54471: Insufficiently Protected Credentials5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54466: Missing Authorization5.3 MediumN/A1%Dec 12, 2024
CVE-2024-54465: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 12, 2024
CVE-2024-53845: Use of a Broken or Risky Cryptographic AlgorithmN/A6.6 Medium1%Dec 12, 2024
CVE-2024-53274: Improper Neutralization of Input During Web Page Generation6.1 Medium2.0 Low0%Dec 12, 2024
CVE-2024-53273: Improper Neutralization of Input During Web Page Generation6.1 Medium5.0 Medium0%Dec 12, 2024
CVE-2024-53272: Improper Neutralization of Input During Web Page Generation6.1 Medium5.0 Medium0%Dec 12, 2024
CVE-2024-44300: Undefined Security Weakness5.5 MediumN/A0%Dec 12, 2024
CVE-2024-44299: Undefined Security Weakness9.8 CriticalN/A0%Dec 12, 2024
CVE-2024-44291: Undefined Security Weakness7.8 HighN/A0%Dec 12, 2024
CVE-2024-44290: Undefined Security Weakness3.3 LowN/A0%Dec 12, 2024
CVE-2024-44248: Undefined Security Weakness6.5 MediumN/A1%Dec 12, 2024
CVE-2024-44246: Out-of-bounds Read5.3 MediumN/A1%Dec 12, 2024
CVE-2024-44245: Out-of-bounds Write7.1 HighN/A0%Dec 12, 2024
CVE-2024-44243: Undefined Security Weakness5.5 MediumN/A1%Dec 12, 2024
CVE-2024-44242: Out-of-bounds Write9.8 CriticalN/A1%Dec 12, 2024
CVE-2024-44241: Allocation of Resources Without Limits or Throttling9.8 CriticalN/A1%Dec 12, 2024
CVE-2024-44225: Undefined Security Weakness7.8 HighN/A0%Dec 12, 2024
CVE-2024-44224: Incorrect Default Permissions7.8 HighN/A0%Dec 12, 2024
CVE-2024-44220: Unrestricted Upload of File with Dangerous Type5.5 MediumN/A1%Dec 12, 2024
123151-123175 of 545471
‹›