The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-24015: Improper Verification of Cryptographic Signature5.3 Medium7.7 High0%Jun 3, 2025
CVE-2025-5523: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Jun 3, 2025
CVE-2025-35036: Improper Control of Generation of Code7.3 High6.9 Medium0%Jun 3, 2025
CVE-2025-46548: Improper Authentication6.5 MediumN/A1%Jun 3, 2025
CVE-2025-20297: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jun 2, 2025
CVE-2024-8008: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A0%Jun 2, 2025
CVE-2024-3509: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jun 2, 2025
CVE-2024-40114: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 2, 2025
CVE-2025-48494: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jun 2, 2025
CVE-2025-47289: Sensitive Cookie Without 'HttpOnly' Flag6.3 MediumN/A0%Jun 2, 2025
CVE-2025-2896: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jun 1, 2025
CVE-2025-25044: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2025
CVE-2025-1484: Incomplete List of Disallowed Inputs6.5 Medium6.3 Medium0%May 30, 2025
CVE-2025-48875: Improper Neutralization of Input During Web Page Generation5.4 Medium4.6 Medium0%May 30, 2025
CVE-2025-48488: Improper Neutralization of Input During Web Page Generation5.4 Medium4.6 Medium0%May 30, 2025
CVE-2025-48483: Improper Neutralization of Input During Web Page Generation5.4 Medium6.3 Medium0%May 30, 2025
CVE-2025-31501: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 28, 2025
CVE-2025-31500: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 28, 2025
CVE-2025-48734: Improper Access Control8.8 HighN/A0%May 28, 2025
CVE-2025-40651: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%May 28, 2025
CVE-2024-45094: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%May 27, 2025
CVE-2025-48370: Improper AuthenticationN/A2.7 Low0%May 27, 2025
CVE-2025-23393: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.2 Medium5.6 Medium0%May 27, 2025
CVE-2025-48054: Improperly Controlled Modification of Object Prototype AttributesN/A6.8 Medium1%May 27, 2025
CVE-2025-23392: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.2 Medium5.6 Medium0%May 26, 2025
5826-5850 of 16560
‹›