The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-6563: Improper Input ValidationN/A4.8 Medium0%Jul 3, 2025
CVE-2025-27453: Sensitive Cookie Without 'HttpOnly' Flag5.3 MediumN/A0%Jul 3, 2025
CVE-2025-27448: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Jul 3, 2025
CVE-2025-27447: Improper Neutralization of Input During Web Page Generation7.4 HighN/A0%Jul 3, 2025
CVE-2025-34067: Deserialization of Untrusted DataN/A10.0 Critical19%Jul 2, 2025
CVE-2025-53103: Cleartext Storage of Sensitive Information5.8 MediumN/A0%Jul 1, 2025
CVE-2024-46993: Heap-based Buffer OverflowN/A4.4 Medium0%Jul 1, 2025
CVE-2024-46992: Improper Validation of Integrity Check Value7.8 HighN/A0%Jul 1, 2025
CVE-2025-36056: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 1, 2025
CVE-2025-2141: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 1, 2025
CVE-2025-6925: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium0%Jun 30, 2025
CVE-2025-26074: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Jun 30, 2025
CVE-2025-40734: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 30, 2025
CVE-2025-40733: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 30, 2025
CVE-2025-5878: Improper Neutralization of Special Elements7.3 High5.5 Medium0%Jun 29, 2025
CVE-2025-53393: Deserialization of Untrusted Data6.0 MediumN/A0%Jun 28, 2025
CVE-2024-52900: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 28, 2025
CVE-2025-50367: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 27, 2025
CVE-2025-6768: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-6767: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-6766: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-6753: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-6749: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-6738: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 27, 2025
CVE-2025-53121: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jun 26, 2025
5501-5525 of 16557
‹›