The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2024-46907: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Dec 2, 2024
CVE-2024-46906: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A40%Dec 2, 2024
CVE-2024-46905: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Dec 2, 2024
CVE-2024-38827: Authorization Bypass Through User-Controlled Key4.8 MediumN/A0%Dec 2, 2024
CVE-2024-31669: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Dec 2, 2024
CVE-2024-29645: Buffer Copy without Checking Size of Input7.8 HighN/A0%Dec 2, 2024
CVE-2024-10905: Improper Handling of File Names that Identify Virtual Resources10.0 CriticalN/A1%Dec 2, 2024
CVE-2024-53793: Cross-Site Request Forgery (CSRF)8.2 HighN/A0%Dec 2, 2024
CVE-2024-53789: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53784: Missing Authorization4.3 MediumN/A0%Dec 2, 2024
CVE-2024-53782: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53781: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53780: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53777: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53776: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53775: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 2, 2024
CVE-2024-53770: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53765: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53762: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53761: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 2, 2024
CVE-2024-53759: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 2, 2024
CVE-2024-53753: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 2, 2024
CVE-2024-53751: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 2, 2024
CVE-2024-53741: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 2, 2024
CVE-2024-53740: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 2, 2024
124026-124050 of 691462
‹›