The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2024-8066: Unrestricted Upload of File with Dangerous Type7.5 HighN/A1%Nov 28, 2024
CVE-2024-11788: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-11786: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-11761: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-11685: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 28, 2024
CVE-2024-11684: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 28, 2024
CVE-2024-11458: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 28, 2024
CVE-2024-11431: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-11366: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 28, 2024
CVE-2024-11333: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-11203: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 28, 2024
CVE-2024-36466: Authentication Bypass by Spoofing8.8 HighN/A1%Nov 28, 2024
CVE-2024-11925: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A1%Nov 28, 2024
CVE-2024-11918: Missing Authorization4.3 MediumN/A0%Nov 28, 2024
CVE-2024-10896: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Nov 28, 2024
CVE-2024-10510: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Nov 28, 2024
CVE-2024-10493: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 28, 2024
CVE-2024-10473: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 28, 2024
CVE-2024-46939: Improper Limitation of a Pathname to a Restricted DirectoryN/A2.4 Low0%Nov 28, 2024
CVE-2024-53008: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A1%Nov 28, 2024
CVE-2024-38658: Out-of-bounds Read7.8 HighN/A0%Nov 28, 2024
CVE-2024-38389: Out-of-bounds Read7.8 HighN/A0%Nov 28, 2024
CVE-2024-38309: Stack-based Buffer Overflow7.8 HighN/A0%Nov 28, 2024
CVE-2018-9377: Use of Uninitialized Resource5.5 MediumN/A0%Nov 28, 2024
CVE-2024-11933: Heap-based Buffer Overflow7.8 HighN/A0%Nov 28, 2024
124401-124425 of 788572
‹›