The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2018-6695: Undefined Security Weakness5.9 MediumN/A1%Oct 3, 2018
CVE-2018-11752: Insufficiently Protected Credentials5.5 MediumN/A0%Oct 2, 2018
CVE-2018-11750: Improper Input Validation6.5 MediumN/A1%Oct 2, 2018
CVE-2018-17886: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Oct 2, 2018
CVE-2018-11786: Improper Privilege Management8.8 HighN/A2%Sep 18, 2018
CVE-2018-16059: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A30%Sep 7, 2018
CVE-2018-16158: Use of Hard-coded Credentials9.8 CriticalN/A35%Aug 30, 2018
CVE-2018-15919: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A4%Aug 28, 2018
CVE-2018-15481: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 21, 2018
CVE-2018-15599: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A3%Aug 21, 2018
CVE-2018-15473: Concurrent Execution using Shared Resource with Improper Synchronization5.3 MediumN/A99%Aug 17, 2018
CVE-2017-9001: Undefined Security Weakness8.1 HighN/A7%Aug 6, 2018
CVE-2018-10896: Use of Hard-coded Cryptographic Key7.1 HighN/A0%Aug 1, 2018
CVE-2018-1999036: Insertion of Sensitive Information into Log File6.5 MediumN/A1%Aug 1, 2018
CVE-2016-8613: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A2%Jul 31, 2018
CVE-2017-2648: Improper Certificate Validation6.8 MediumN/A1%Jul 27, 2018
CVE-2018-14440: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jul 20, 2018
CVE-2018-14441: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Jul 20, 2018
CVE-2018-0710: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A14%Jul 16, 2018
CVE-2018-0035: Undefined Security Weakness4.4 MediumN/A1%Jul 11, 2018
CVE-2018-9853: Improper Privilege Management9.8 CriticalN/A1%Jul 10, 2018
CVE-2018-1000601: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jun 26, 2018
CVE-2018-0294: Undefined Security Weakness6.7 MediumN/A0%Jun 20, 2018
CVE-2018-12338: Undefined Security Weakness9.8 CriticalN/A2%Jun 17, 2018
CVE-2018-12336: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A2%Jun 17, 2018
1376-1400 of 1970
‹›