The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112947: vitejs: Vite is a frontend tooling framework for JavaScriptN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112946: vitejs: Vite is a frontend tooling framework for JavaScriptN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112945: vitejs: Vite is a frontend tooling framework for JavaScriptN/A2.1 LowN/AOct 20, 2026
CVE-2026-112840: Brainstorm Force SureCart: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-112836: e4jvikwp VikRentCar: Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112829: Arraytics Booktics: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112824: Magepeople inc. Bus Ticket Booking with Seat Reservation: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112823: WP User Manager: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User…4.3 MediumN/AN/AOct 20, 2026
CVE-2026-111843: CozyThemes Rootblox: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-111765: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol7.5 HighN/AN/AOct 20, 2026
CVE-2026-111764: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol7.5 HighN/AN/AOct 20, 2026
CVE-2026-111763: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) ProtocolN/A5.7 MediumN/AOct 20, 2026
CVE-2026-109700: eLightUp Meta Box – WordPress Custom Fields Framework: Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-107755: Apache Software Foundation Apache CouchDB: Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms…N/A6.0 MediumN/AOct 20, 2026
CVE-2025-71436: librdf Raptor RDF Syntax Library: Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in…7.1 High7.1 HighN/AOct 20, 2026
CVE-2026-97400: Eclipse Foundation Eclipse OpenJ9: In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent…N/A6.8 MediumN/AOct 20, 2026
CVE-2026-96402: Eclipse Foundation Eclipse ThreadX - USBX: A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration,…N/A5.2 MediumN/AOct 20, 2026
CVE-2026-95168: n/a: An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in…N/AN/AN/AOct 20, 2026
CVE-2026-95111: Eclipse Foundation Eclipse ThreadX: A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much…N/A4.8 MediumN/AOct 20, 2026
CVE-2026-92454: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold…6.1 Medium6.8 MediumN/AOct 20, 2026
CVE-2026-92449: Eclipse Foundation Eclipse ThreadX - GUIX: `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value…N/A6.8 MediumN/AOct 20, 2026
CVE-2026-92446: Eclipse Foundation Eclipse ThreadX - GUIX: `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and…N/A6.8 MediumN/AOct 20, 2026
CVE-2026-92162: flatpak: Flatpak is a system for building, distributing, and running sandboxed desktop applications on LinuxN/A7.2 HighN/AOct 20, 2026
CVE-2026-91189: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX binary resource loader never checks that a font page's glyph range is well formedN/A7.1 HighN/AOct 20, 2026
CVE-2026-91186: Eclipse Foundation Eclipse ThreadX - GUIX: The PNG chunk reader has no notion of chunk orderingN/A8.4 HighN/AOct 20, 2026
1676-1700 of 407346
‹›