The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-26381: Allocation of Resources Without Limits or ThrottlingN/A7.1 High0%Feb 10, 2026
CVE-2021-47921: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Feb 1, 2026
CVE-2021-47920: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Feb 1, 2026
CVE-2021-47919: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47918: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Feb 1, 2026
CVE-2021-47917: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47916: Undefined Security WeaknessN/A8.4 HighN/AFeb 1, 2026
CVE-2021-47915: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Feb 1, 2026
CVE-2021-47914: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47913: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47912: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47911: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Feb 1, 2026
CVE-2021-47909: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Feb 1, 2026
CVE-2021-47908: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47885: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47856: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47902: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Jan 27, 2026
CVE-2021-47901: Improper Neutralization of Formula Elements in a CSV File9.8 Critical5.1 Medium0%Jan 27, 2026
CVE-2021-47900: Improper Control of Filename for Include/Require Statement in PHP Program9.8 Critical9.3 Critical0%Jan 27, 2026
CVE-2021-47906: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 23, 2026
CVE-2021-47905: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 23, 2026
CVE-2021-47903: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High1%Jan 23, 2026
CVE-2021-47898: Unquoted Search Path or Element7.8 High8.5 High0%Jan 23, 2026
CVE-2021-47897: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 23, 2026
CVE-2021-47896: Unquoted Search Path or Element7.8 High8.5 High0%Jan 23, 2026
126-150 of 23470
‹›