The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2016-4927: Improper Input Validation8.1 HighN/A1%Mar 20, 2017
CVE-2017-3879: Improper Restriction of Operations within the Bounds of a Memory Buffer5.3 MediumN/A3%Mar 17, 2017
CVE-2017-3819: Missing Authentication for Critical Function8.8 HighN/A3%Mar 15, 2017
CVE-2016-7409: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Mar 3, 2017
CVE-2016-7408: Improper Access Control8.8 HighN/A4%Mar 3, 2017
CVE-2016-7407: Improper Input Validation9.8 CriticalN/A6%Mar 3, 2017
CVE-2016-7406: Improper Input Validation9.8 CriticalN/A10%Mar 3, 2017
CVE-2016-9347: Undefined Security Weakness5.0 MediumN/A0%Feb 13, 2017
CVE-2016-6210: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A89%Feb 13, 2017
CVE-2016-10177: Use of Hard-coded Credentials9.8 CriticalN/A7%Jan 30, 2017
CVE-2017-5544: Uncontrolled Resource Consumption5.9 MediumN/A5%Jan 23, 2017
CVE-2016-10104: Inadequate Encryption Strength5.9 MediumN/A1%Jan 23, 2017
CVE-2016-10102: Inadequate Encryption Strength8.1 HighN/A0%Jan 23, 2017
CVE-2016-10012: Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 HighN/A1%Jan 5, 2017
CVE-2016-10011: Improper Restriction of Operations within the Bounds of a Memory Buffer6.2 MediumN/A1%Jan 5, 2017
CVE-2016-10010: Improper Privilege Management7.0 HighN/A4%Jan 5, 2017
CVE-2016-10009: Untrusted Search Path7.3 HighN/A37%Jan 5, 2017
CVE-2016-7456: Undefined Security Weakness9.8 CriticalN/A33%Dec 29, 2016
CVE-2016-6474: Improper Authentication7.3 HighN/A1%Dec 14, 2016
CVE-2016-8858: Uncontrolled Resource Consumption7.5 HighN/A29%Dec 9, 2016
CVE-2015-0721: Undefined Security Weakness8.0 HighN/A3%Oct 6, 2016
CVE-2016-6393: Undefined Security Weakness7.5 HighN/A5%Oct 5, 2016
CVE-2016-0897: Undefined Security Weakness9.8 CriticalN/A2%Sep 18, 2016
CVE-2016-0930: Concurrent Execution using Shared Resource with Improper Synchronization9.8 CriticalN/A1%Sep 18, 2016
CVE-2016-6838: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Sep 7, 2016
1501-1525 of 1974
‹›