The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2014-2653: Improper Input Validation6.5 MediumN/A2%Mar 27, 2014
CVE-2014-2532: Improper Input Validation4.2 MediumN/A5%Mar 18, 2014
CVE-2014-0017: Undefined Security Weakness4.0 MediumN/A0%Mar 14, 2014
CVE-2013-6943: Improper Control of Generation of Code5.3 MediumN/A2%Mar 10, 2014
CVE-2014-0709: Undefined Security WeaknessN/AN/A2%Feb 22, 2014
CVE-2011-3590: Undefined Security Weakness4.8 MediumN/A1%Feb 15, 2014
CVE-2011-3589: Undefined Security Weakness4.8 MediumN/A1%Feb 15, 2014
CVE-2011-3588: Undefined Security Weakness5.3 MediumN/A1%Feb 15, 2014
CVE-2013-6441: Undefined Security Weakness7.8 HighN/A0%Feb 14, 2014
CVE-2011-4327: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Feb 3, 2014
CVE-2014-1692: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A5%Jan 29, 2014
CVE-2013-6838: Undefined Security Weakness9.8 CriticalN/A3%Jan 28, 2014
CVE-2010-5294: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A1%Jan 21, 2014
CVE-2013-3594: Improper Input Validation9.8 CriticalN/A4%Jan 20, 2014
CVE-2013-5613: Use After Free9.8 CriticalN/A9%Dec 11, 2013
CVE-2013-5997: Undefined Security WeaknessN/AN/A1%Nov 22, 2013
CVE-2013-4548: Undefined Security Weakness6.3 MediumN/A3%Nov 8, 2013
CVE-2013-4436: Improper Input Validation8.1 HighN/A2%Nov 5, 2013
CVE-2013-4437: Undefined Security Weakness9.8 CriticalN/A1%Nov 5, 2013
CVE-2013-5599: Undefined Security Weakness9.8 CriticalN/A5%Oct 30, 2013
CVE-2013-4421: Undefined Security Weakness5.3 MediumN/A6%Oct 25, 2013
CVE-2013-4434: Undefined Security Weakness5.3 MediumN/A6%Oct 25, 2013
CVE-2012-4109: Improper Input Validation7.8 HighN/A0%Oct 2, 2013
CVE-2012-4078: Improper Authentication8.8 HighN/A4%Sep 24, 2013
CVE-2013-4707: Undefined Security Weakness6.5 MediumN/A1%Sep 20, 2013
1626-1650 of 1974
‹›