The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-43005: Plaintext Storage of a Password4.3 MediumN/A0%May 13, 2025
CVE-2024-9524: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13962: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13961: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13960: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13959: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13944: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%May 9, 2025
CVE-2024-13759: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2025-26169: Incorrect Permission Assignment for Critical Resource8.1 HighN/A0%May 7, 2025
CVE-2025-46735: Improper Neutralization of Special Elements used in a CommandN/A1.1 Low1%May 6, 2025
CVE-2025-1493: Concurrent Execution using Shared Resource with Improper Synchronization5.3 MediumN/A0%May 5, 2025
CVE-2025-1000: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%May 5, 2025
CVE-2025-0915: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%May 5, 2025
CVE-2025-46335: Improper Neutralization of Input During Web Page Generation5.4 Medium8.6 High0%May 5, 2025
CVE-2025-1992: Missing Release of Memory after Effective Lifetime5.3 MediumN/A0%May 5, 2025
CVE-2024-52903: Uncaught Exception5.3 MediumN/A0%May 1, 2025
CVE-2025-4178: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium5.3 Medium1%May 1, 2025
CVE-2025-23246: Uncontrolled Resource Consumption5.5 MediumN/A0%May 1, 2025
CVE-2025-23245: Incorrect Permission Assignment for Critical Resource5.5 MediumN/A0%May 1, 2025
CVE-2025-46619: Improper Access Control7.6 HighN/A0%Apr 30, 2025
CVE-2025-3599: Time-of-check Time-of-use (TOCTOU) Race Condition6.5 MediumN/A0%Apr 30, 2025
CVE-2025-3224: Improper Privilege Management7.8 High7.3 High0%Apr 28, 2025
CVE-2025-42598: Incorrect Default Permissions7.8 High8.4 High0%Apr 28, 2025
CVE-2025-31144: Improper Restriction of Communication Channel to Intended Endpoints5.8 Medium6.9 Medium0%Apr 28, 2025
CVE-2025-26692: Improper Limitation of a Pathname to a Restricted Directory8.1 High9.2 Critical1%Apr 28, 2025
4951-4975 of 17380
‹›