The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2009-1745: Undefined Security WeaknessN/AN/A2%May 21, 2009
CVE-2009-1273: Undefined Security Weakness5.3 MediumN/A1%Apr 8, 2009
CVE-2009-0623: Undefined Security Weakness7.5 HighN/A1%Feb 26, 2009
CVE-2008-5776: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A2%Dec 30, 2008
CVE-2008-5201: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A2%Nov 21, 2008
CVE-2008-5161: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A19%Nov 19, 2008
CVE-2008-5124: Improper AuthenticationN/AN/A2%Nov 18, 2008
CVE-2008-4956: Improper Link Resolution Before File Access5.5 MediumN/A0%Nov 5, 2008
CVE-2008-4762: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A14%Oct 28, 2008
CVE-2008-4726: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A44%Oct 23, 2008
CVE-2008-3825: Undefined Security Weakness8.4 HighN/A0%Oct 3, 2008
CVE-2008-4181: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A3%Sep 23, 2008
CVE-2008-4109: Undefined Security Weakness5.3 MediumN/A28%Sep 17, 2008
CVE-2008-3844: Improper Input ValidationN/AN/A3%Aug 27, 2008
CVE-2008-3731: Undefined Security Weakness4.3 MediumN/A2%Aug 20, 2008
CVE-2008-3564: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A2%Aug 10, 2008
CVE-2003-1562: Concurrent Execution using Shared Resource with Improper Synchronization8.1 HighN/A6%Aug 4, 2008
CVE-2004-2760: Undefined Security Weakness7.3 HighN/A9%Aug 4, 2008
CVE-2008-3385: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A2%Jul 30, 2008
CVE-2008-3259: Exposure of Sensitive Information to an Unauthorized Actor2.9 LowN/A0%Jul 22, 2008
CVE-2008-3234: Undefined Security Weakness8.1 HighN/A6%Jul 18, 2008
CVE-2008-2898: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A7%Jun 27, 2008
CVE-2008-2573: Improper Restriction of Operations within the Bounds of a Memory BufferN/AN/A6%Jun 6, 2008
CVE-2008-0536: Improper Authentication7.5 HighN/A4%May 22, 2008
CVE-2008-0535: Undefined Security Weakness7.5 HighN/A5%May 22, 2008
1751-1775 of 1974
‹›