The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-58393: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2023-54413: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2022-51025: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Oct 22, 2026
CVE-2022-51024: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2022-51023: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2022-51022: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical8.8 High1%Oct 22, 2026
CVE-2022-51021: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2021-48017: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2021-48016: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Oct 22, 2026
CVE-2021-48015: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 22, 2026
CVE-2021-48014: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical2%Oct 22, 2026
CVE-2021-48013: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 22, 2026
CVE-2020-37284: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2019-25779: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2019-25778: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2018-25439: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2018-25438: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 22, 2026
CVE-2017-20290: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2017-20289: Improper Control of Filename for Include/Require Statement in PHP Program7.5 High7.7 High1%Oct 22, 2026
CVE-2017-20288: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2017-20287: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2026-114348: webpack-dev-server: webpack-dev-server is a development server that provides live reloading for webpack projects5.3 MediumN/A0%Oct 22, 2026
CVE-2026-112085: webpack-dev-server: webpack-dev-server is a development server that provides live reloading for webpack projects8.2 HighN/A0%Oct 22, 2026
CVE-2026-106017: OpenVPN OpenVPN 3 Core Library: Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent…N/A6.3 Medium0%Oct 22, 2026
CVE-2026-96293: WatchGuard WatchGuard Agent: A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption…N/A6.9 Medium0%Oct 22, 2026
1876-1900 of 557596