The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-22890: Execution with Unnecessary Privileges8.8 HighN/A0%Feb 6, 2025
CVE-2025-1019: Improper Restriction of Rendered UI Layers or Frames4.3 MediumN/A0%Feb 4, 2025
CVE-2024-35177: Improper Access Control7.8 HighN/A0%Feb 3, 2025
CVE-2024-0131: Buffer Access with Incorrect Length Value4.4 MediumN/A0%Feb 2, 2025
CVE-2025-0145: Untrusted Search Path4.6 MediumN/A0%Jan 30, 2025
CVE-2025-23007: Improper Privilege Management5.5 MediumN/A0%Jan 30, 2025
CVE-2025-24479: Incorrect AuthorizationN/A8.6 High0%Jan 28, 2025
CVE-2025-0065: Improper Neutralization of Argument Delimiters in a Command7.8 HighN/A1%Jan 28, 2025
CVE-2025-23084: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A2%Jan 28, 2025
CVE-2024-0150: Out-of-bounds Write7.1 HighN/A0%Jan 28, 2025
CVE-2024-0147: Use After Free5.5 MediumN/A0%Jan 28, 2025
CVE-2024-52012: Relative Path Traversal5.4 MediumN/A45%Jan 27, 2025
CVE-2024-45077: Improper Control of Filename for Include/Require Statement in PHP Program6.5 MediumN/A0%Jan 24, 2025
CVE-2024-9495: Uncontrolled Search Path Element8.6 HighN/A0%Jan 24, 2025
CVE-2025-0651: Improper Privilege Management7.1 High6.1 Medium0%Jan 22, 2025
CVE-2024-55957: Incorrect Default Permissions7.8 HighN/A0%Jan 22, 2025
CVE-2024-42013: Incorrect Authorization6.4 MediumN/A0%Jan 22, 2025
CVE-2024-42012: Insufficiently Protected Credentials5.7 MediumN/A0%Jan 22, 2025
CVE-2024-37284: Improper Handling of Exceptional Conditions5.5 MediumN/A0%Jan 21, 2025
CVE-2024-13524: Untrusted Search Path4.5 Medium2.0 Low0%Jan 20, 2025
CVE-2025-21325: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Jan 17, 2025
CVE-2024-5198: NULL Pointer Dereference3.3 LowN/A0%Jan 15, 2025
CVE-2025-0440: Authentication Bypass by Spoofing6.5 MediumN/A0%Jan 15, 2025
CVE-2025-23042: Improper Authorization7.5 High8.7 High1%Jan 14, 2025
CVE-2025-21335: Use After Free7.8 HighN/A1%Jan 14, 2025
5226-5250 of 17376
‹›