The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2015-2897: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A2%Aug 8, 2015
CVE-2015-5352: Undefined Security WeaknessN/AN/A5%Aug 3, 2015
CVE-2015-5600: Uncontrolled Resource Consumption8.1 HighN/A9%Aug 3, 2015
CVE-2015-4236: Undefined Security Weakness5.3 MediumN/A2%Jul 10, 2015
CVE-2015-4196: Undefined Security Weakness5.3 MediumN/A2%Jul 4, 2015
CVE-2015-4216: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A3%Jun 26, 2015
CVE-2015-4217: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A2%Jun 26, 2015
CVE-2015-4195: Undefined Security Weakness4.3 MediumN/A2%Jun 19, 2015
CVE-2012-4716: Undefined Security Weakness9.1 CriticalN/A2%Jun 13, 2015
CVE-2015-4156: Improper Link Resolution Before File Access4.4 MediumN/A0%Jun 2, 2015
CVE-2015-1317: Undefined Security WeaknessN/AN/A3%Apr 8, 2015
CVE-2014-9462: Improper Input Validation8.4 HighN/A4%Mar 31, 2015
CVE-2015-2157: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A1%Mar 27, 2015
CVE-2015-0667: Improper Access ControlN/AN/A2%Mar 18, 2015
CVE-2015-1782: Improper Input Validation9.8 CriticalN/A4%Mar 13, 2015
CVE-2014-8779: Undefined Security Weakness5.9 MediumN/A1%Feb 3, 2015
CVE-2015-0924: Undefined Security WeaknessN/AN/A1%Jan 17, 2015
CVE-2014-8132: Undefined Security Weakness5.3 MediumN/A5%Dec 29, 2014
CVE-2014-9278: Improper Authentication4.3 MediumN/A2%Dec 6, 2014
CVE-2014-8990: Improper Neutralization of Special Elements used in a Command7.3 HighN/A5%Dec 5, 2014
CVE-2014-9027: Cross-Site Request Forgery (CSRF)6.3 MediumN/A1%Nov 20, 2014
CVE-2014-8475: Undefined Security Weakness3.7 LowN/A2%Nov 18, 2014
CVE-2014-2015: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A4%Nov 2, 2014
CVE-2014-8529: Undefined Security Weakness3.3 LowN/A0%Oct 29, 2014
CVE-2014-6501: Undefined Security Weakness3.3 LowN/A0%Oct 15, 2014
1576-1600 of 1974
‹›