The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-41847: Improper Access Control5.3 MediumN/A0%Jun 9, 2026
CVE-2026-41846: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 9, 2026
CVE-2026-41845: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 9, 2026
CVE-2026-41844: URL Redirection to Untrusted Site6.1 MediumN/A0%Jun 9, 2026
CVE-2026-41843: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Jun 9, 2026
CVE-2026-41842: Uncontrolled Resource Consumption7.5 HighN/A0%Jun 9, 2026
CVE-2026-41841: Use of Cache Containing Sensitive Information5.9 MediumN/A0%Jun 9, 2026
CVE-2026-41840: Missing Release of Memory after Effective Lifetime5.9 MediumN/A0%Jun 9, 2026
CVE-2026-41839: Session Fixation4.2 MediumN/A0%Jun 9, 2026
CVE-2026-41838: Use of Insufficiently Random Values7.5 HighN/A0%Jun 9, 2026
CVE-2026-22737: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Mar 20, 2026
CVE-2025-41254: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 16, 2025
CVE-2025-11226: Improper Input ValidationN/A7.0 High0%Oct 1, 2025
CVE-2025-41249: Improper Authorization7.5 HighN/A0%Sep 16, 2025
CVE-2025-41242: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A2%Aug 18, 2025
CVE-2025-41234: Improper Neutralization of CRLF Sequences in HTTP Headers6.5 MediumN/A1%Jun 12, 2025
CVE-2025-22233: Improper Input Validation3.1 LowN/A0%May 16, 2025
CVE-2024-38808: Allocation of Resources Without Limits or Throttling4.3 MediumN/A1%Aug 20, 2024
CVE-2024-22262: URL Redirection to Untrusted Site8.1 HighN/A1%Apr 16, 2024
CVE-2024-22259: URL Redirection to Untrusted Site8.1 HighN/A3%Mar 16, 2024
CVE-2024-22243: URL Redirection to Untrusted Site8.1 HighN/A4%Feb 23, 2024
CVE-2024-22233: Uncontrolled Resource Consumption7.5 HighN/A1%Jan 22, 2024
CVE-2023-34053: Undefined Security Weakness5.3 MediumN/A1%Nov 28, 2023
CVE-2023-47174: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 31, 2023
CVE-2023-20863: Uncontrolled Resource Consumption6.5 MediumN/A1%Apr 13, 2023
26-50 of 97
‹›