The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2012-5616: Undefined Security WeaknessN/AN/A1%Jan 22, 2013
CVE-2012-5717: Undefined Security Weakness6.5 MediumN/A1%Jan 18, 2013
CVE-2012-2251: Improper Input Validation5.3 MediumN/A0%Jan 11, 2013
CVE-2012-2252: Undefined Security Weakness5.3 MediumN/A0%Jan 11, 2013
CVE-2012-4698: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A1%Dec 23, 2012
CVE-2012-4898: Undefined Security Weakness6.5 MediumN/A1%Dec 18, 2012
CVE-2012-4838: Undefined Security WeaknessN/AN/A0%Dec 8, 2012
CVE-2012-6067: Improper AuthenticationN/AN/A3%Dec 4, 2012
CVE-2012-6066: Improper Authentication9.8 CriticalN/A40%Dec 4, 2012
CVE-2012-5975: Improper Authentication9.8 CriticalN/A36%Dec 4, 2012
CVE-2012-6063: Undefined Security Weakness9.8 CriticalN/A4%Nov 30, 2012
CVE-2012-4562: Undefined Security Weakness9.8 CriticalN/A13%Nov 30, 2012
CVE-2012-4559: Undefined Security Weakness9.8 CriticalN/A5%Nov 30, 2012
CVE-2012-4560: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A6%Nov 30, 2012
CVE-2012-4561: Undefined Security Weakness7.5 HighN/A5%Nov 30, 2012
CVE-2012-5301: Undefined Security Weakness5.3 MediumN/A1%Oct 4, 2012
CVE-2012-3478: Undefined Security Weakness7.1 HighN/A0%Aug 31, 2012
CVE-2012-1975: Use After Free9.8 CriticalN/A6%Aug 29, 2012
CVE-2012-3579: Undefined Security Weakness8.8 HighN/A40%Aug 29, 2012
CVE-2012-4577: Undefined Security Weakness9.8 CriticalN/A4%Aug 21, 2012
CVE-2012-1339: Improper Restriction of Operations within the Bounds of a Memory Buffer5.3 MediumN/A1%Aug 6, 2012
CVE-2012-1493: Undefined Security Weakness9.8 CriticalN/A63%Jul 9, 2012
CVE-2012-3006: Undefined Security Weakness8.1 HighN/A1%Jun 19, 2012
CVE-2012-0920: Undefined Security Weakness7.5 HighN/A6%Jun 5, 2012
CVE-2012-0338: Improper Input Validation7.5 HighN/A1%May 2, 2012
1676-1700 of 1974
‹›