The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2012-2441: Weak Password Requirements9.8 CriticalN/A9%Apr 28, 2012
CVE-2012-0269: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A4%Apr 27, 2012
CVE-2011-5000: Undefined Security Weakness6.5 MediumN/A3%Apr 4, 2012
CVE-2012-0386: Undefined Security Weakness7.5 HighN/A3%Mar 29, 2012
CVE-2012-0814: Undefined Security WeaknessN/AN/A4%Jan 27, 2012
CVE-2011-4659: Undefined Security Weakness9.8 CriticalN/A2%Jan 19, 2012
CVE-2012-0099: Undefined Security Weakness3.7 LowN/A1%Jan 18, 2012
CVE-2011-3992: Improper Restriction of Operations within the Bounds of a Memory BufferN/AN/A5%Nov 3, 2011
CVE-2011-3870: Improper Link Resolution Before File Access7.1 HighN/A0%Oct 27, 2011
CVE-2011-2555: Undefined Security Weakness9.8 CriticalN/A3%Aug 29, 2011
CVE-2011-1624: Undefined Security Weakness7.5 HighN/A1%Aug 18, 2011
CVE-2011-2294: Undefined Security Weakness5.3 MediumN/A2%Jul 21, 2011
CVE-2011-2245: Undefined Security Weakness7.3 HighN/A2%Jul 20, 2011
CVE-2011-1623: Undefined Security Weakness9.8 CriticalN/A2%Jun 2, 2011
CVE-2011-0766: Undefined Security Weakness7.5 HighN/A3%May 31, 2011
CVE-2011-0949: Undefined Security WeaknessN/AN/A1%May 31, 2011
CVE-2011-0189: Undefined Security Weakness5.9 MediumN/A1%Mar 23, 2011
CVE-2011-1137: Undefined Security Weakness7.5 HighN/A28%Mar 11, 2011
CVE-2011-0437: Undefined Security Weakness6.5 MediumN/A2%Mar 7, 2011
CVE-2010-4755: Undefined Security Weakness6.5 MediumN/A8%Mar 2, 2011
CVE-2011-0539: Use of Uninitialized Variable7.5 HighN/A2%Feb 10, 2011
CVE-2010-4478: Improper Authentication9.8 CriticalN/A4%Dec 6, 2010
CVE-2010-3038: Undefined Security WeaknessN/AN/A3%Nov 22, 2010
CVE-2010-2975: Exposure of Sensitive Information to an Unauthorized Actor4.0 MediumN/A0%Aug 9, 2010
CVE-2010-2821: Undefined Security WeaknessN/AN/A1%Aug 6, 2010
1701-1725 of 1974
‹›