The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2025-36075: IBM Safer Payments: IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through…5.3 MediumN/AN/ANov 8, 2026
CVE-2025-1837: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an…5.4 MediumN/AN/ANov 8, 2026
CVE-2025-0166: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose…2.7 LowN/AN/ANov 8, 2026
CVE-2024-41786: IBM Engineering Requirements Management DOORS Next: IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server…5.3 MediumN/AN/ANov 8, 2026
CVE-2026-124553: funstory-ai BabelDOC: BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust…7.5 High8.7 HighN/ANov 8, 2026
CVE-2026-124494: JiHong88 suneditor: SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's…N/A9.3 CriticalN/ANov 8, 2026
CVE-2026-124493: JiHong88 suneditor: SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that…N/A9.3 CriticalN/ANov 8, 2026
CVE-2026-124492: JiHong88 suneditor: SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList,…7.6 High8.3 HighN/ANov 8, 2026
CVE-2026-124491: JiHong88 suneditor: SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method…6.4 Medium5.3 MediumN/ANov 8, 2026
CVE-2026-124490: openemr: OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of…9.1 Critical9.4 CriticalN/ANov 8, 2026
CVE-2026-124489: openemr: OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payment.php that allows…7.1 High7.1 HighN/ANov 8, 2026
CVE-2026-124488: openemr: OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking…8.1 High8.6 HighN/ANov 8, 2026
CVE-2026-124487: openemr: OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124486: openemr: OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic document controller that allows…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-124485: openemr: OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124484: openemr: OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-124483: openemr: OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check…8.3 High8.7 HighN/ANov 8, 2026
CVE-2026-124482: openemr: OpenEMR before 8.4.0 contains an authorization bypass allowing low-privileged SMART standalone-launch users to bind…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124481: openemr: OpenEMR before 8.4.0 contains an improper authorization vulnerability in Rainforest patient portal payments that trusts…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124480: openemr: OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows low-privileged authenticated users to…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-124479: openemr: OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document download, where the…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124478: openemr: OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124477: openemr: OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated users to…8.8 High8.7 HighN/ANov 8, 2026
CVE-2026-124476: openemr: OpenEMR before 8.3.0 contains an insecure direct object reference in portal/lib/paylib.php, which writes the…6.5 Medium7.1 HighN/ANov 8, 2026
CVE-2026-124475: openemr: OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows…7.1 High7.1 HighN/ANov 8, 2026
101-125 of 418829
‹›