GeezerVison is showing www.rapid7.com — Rapid7 Vulnerability & Exploit Database | CVE Insights
Vulnerability & Exploit Database Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.
Exploitability & Risk Exploited in the Wild
Metasploit module available
Enter at least 3 characters to search CVEs.
Title EitW Modules CVE-2026-127036: ibi WebFOCUS: Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS N/A 8.6 High N/A Nov 12, 2026 CVE-2026-13764: StylemixThemes Masterstudy - Education WordPress Theme: The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions… 8.8 High N/A N/A Nov 12, 2026 CVE-2026-16135: VibeThemes VibeBP: The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1 8.8 High N/A N/A Nov 12, 2026 CVE-2026-2982: wptb WP Table Builder – Drag & Drop Table Builder: The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 5.4 Medium N/A N/A Nov 12, 2026 CVE-2026-15309: WishList Member CourseCure Courses: The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including,… 8.8 High N/A N/A Nov 12, 2026 CVE-2026-126644: Red Hat: A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for… 3.9 Low N/A N/A Nov 12, 2026 CVE-2026-126643: Red Hat Red Hat Ansible Automation Platform 2: A cleartext storage flaw was found in the AAP Gateway Operator 6.5 Medium N/A N/A Nov 12, 2026 CVE-2026-126641: Red Hat Red Hat Ansible Automation Platform 2: A host key verification flaw was found in ansible-pylibssh and in the ansible.netcommon libssh connection plugin 6.5 Medium N/A N/A Nov 12, 2026 CVE-2026-124704: Progress Software Telerik UI for WPF: In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that… 7.8 High N/A N/A Nov 12, 2026 CVE-2026-124703: Progress Software Telerik UI for WPF: In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that… 7.8 High N/A N/A Nov 12, 2026 CVE-2026-124701: Progress Software Telerik UI for WinForms: In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists… 7.8 High N/A N/A Nov 12, 2026 CVE-2026-124023: Apache Software Foundation Apache Axis2/C: Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C N/A N/A N/A Nov 12, 2026 CVE-2026-114369: qt Qt Framework: Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets… N/A 2.7 Low N/A Nov 12, 2026 CVE-2026-76173: Sgestion / EasySoft WhatsApp for Dolibarr: Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module for… N/A 8.8 High N/A Nov 12, 2026 CVE-2026-127016: misp misp-modules: The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change… N/A 9.2 Critical N/A Nov 12, 2026 CVE-2026-124699: Progress Software Telerik UI for WinForms: In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists… 7.8 High N/A N/A Nov 12, 2026 CVE-2026-124617: Rejected reason: 歸類為 JSONCPP Open Source 之問題 N/A N/A N/A Nov 12, 2026 CVE-2026-123765: Apache Software Foundation Apache Sling XSS: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS N/A N/A N/A Nov 12, 2026 CVE-2026-118975: Progress Software Telerik Reporting: In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references… 6.5 Medium N/A N/A Nov 12, 2026 CVE-2026-117476: Rejected reason: none N/A N/A N/A Nov 12, 2026 CVE-2026-117475: Rejected reason: none N/A N/A N/A Nov 12, 2026 CVE-2026-117474: Rejected reason: none N/A N/A N/A Nov 12, 2026 CVE-2026-106140: Progress Software Telerik Reporting: In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the… 7.3 High N/A N/A Nov 12, 2026 CVE-2026-90908: Azul Payara: A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote,… N/A 9.3 Critical N/A Nov 12, 2026 CVE-2026-126642: Red Hat Red Hat Ansible Automation Platform 2: An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation… 6.5 Medium N/A N/A Nov 12, 2026
