The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
Apache OFBiz: CVE-2026-114229: Cross-site Scripting vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-109928: Incorrect implementation of authentication algorithm in the password-reset and login jwt validation in apache ofbiz 24 vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-109856: Forced Browsing vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-109837: Authorization bypass through user-controlled key in order returns in apache ofbiz 24 vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-109129: Authorization bypass through user-controlled key in the order manager component in apache ofbiz 24 vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-105461: Forced Browsing vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-105330: Use of hard-coded cryptographic key in jwt token authentication in apache ofbiz 24 vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-105325: Forced Browsing vulnerability.N/AN/A0%Nov 5, 2026
CVE-2026-104720: Kobikom Telecommunications and Informatics Services Inc. Kobikom: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom…7.5 HighN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-100228: Improper input validation in order returns in apache ofbiz 24 vulnerability.N/AN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-100168: Forced Browsing vulnerability.N/AN/A0%Nov 5, 2026
CVE-2026-123032: Missing Authentication for Critical Function7.3 High5.5 Medium1%Nov 5, 2026
CVE-2026-64860: Uncontrolled Resource Consumption6.5 MediumN/A0%Nov 5, 2026
CVE-2026-82902: Server-Side Request Forgery (SSRF)N/AN/A0%Nov 5, 2026
CVE-2026-82904: Allocation of Resources Without Limits or ThrottlingN/AN/A1%Nov 5, 2026
CVE-2026-82916: External Control of File Name or PathN/AN/A0%Nov 5, 2026
CVE-2026-84728: Incorrect AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-76563: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A0%Nov 5, 2026
CVE-2026-123024: Missing Authentication for Critical Function7.3 High5.5 Medium1%Nov 5, 2026
CVE-2026-123023: Incorrect Authorization7.3 High5.5 Medium1%Nov 5, 2026
CVE-2026-107912: Red Hat: A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http…7.7 HighN/A0%Nov 5, 2026
CVE-2026-123119: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A2.3 Low0%Nov 5, 2026
CVE-2026-123047: Cleartext Storage of Sensitive Information7.5 HighN/A0%Nov 5, 2026
CVE-2026-123020: Improper Neutralization of Special Elements Used in a Template Engine6.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-123022: Improper Neutralization of Special Elements used in an OS Command7.3 High5.5 Medium2%Nov 5, 2026
1226-1250 of 422263
‹

Refine your search or filters to see more results.