The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2015-6412: Undefined Security Weakness9.8 CriticalN/A2%Jan 22, 2016
CVE-2016-1907: Improper Restriction of Operations within the Bounds of a Memory Buffer5.3 MediumN/A14%Jan 19, 2016
CVE-2016-1909: Undefined Security Weakness9.8 CriticalN/A71%Jan 15, 2016
CVE-2016-0778: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A21%Jan 14, 2016
CVE-2016-0777: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A63%Jan 14, 2016
CVE-2015-7754: Improper Input Validation8.1 HighN/A4%Jan 8, 2016
CVE-2015-7755: Improper Authentication9.8 CriticalN/A61%Dec 19, 2015
CVE-2015-6389: Improper AuthenticationN/AN/A3%Dec 13, 2015
CVE-2015-6415: Undefined Security Weakness7.5 HighN/A2%Dec 12, 2015
CVE-2015-7289: Undefined Security Weakness9.8 CriticalN/A2%Nov 21, 2015
CVE-2015-7845: Improper Input Validation5.3 MediumN/A1%Nov 19, 2015
CVE-2015-6367: Undefined Security Weakness7.5 HighN/A2%Nov 14, 2015
CVE-2015-6476: Undefined Security Weakness9.8 CriticalN/A2%Nov 7, 2015
CVE-2015-6316: Undefined Security Weakness7.3 HighN/A2%Nov 6, 2015
CVE-2015-7752: Undefined Security Weakness7.5 HighN/A2%Oct 19, 2015
CVE-2015-6333: Undefined Security Weakness5.3 MediumN/A0%Oct 16, 2015
CVE-2015-7760: Undefined Security Weakness5.3 MediumN/A2%Oct 9, 2015
CVE-2015-6280: Improper AuthenticationN/AN/A4%Sep 28, 2015
CVE-2015-6300: Improper Input ValidationN/AN/A2%Sep 20, 2015
CVE-2015-6564: Use After Free7.0 HighN/A1%Aug 24, 2015
CVE-2015-6563: Improper Input Validation6.4 MediumN/A0%Aug 24, 2015
CVE-2015-6565: Undefined Security Weakness7.8 HighN/A3%Aug 24, 2015
CVE-2015-2906: Undefined Security WeaknessN/AN/A3%Aug 23, 2015
CVE-2015-2907: Undefined Security Weakness9.8 CriticalN/A3%Aug 23, 2015
CVE-2015-6510: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A2%Aug 18, 2015
1551-1575 of 1974
‹›