The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-4918: Out-of-bounds Read9.8 CriticalN/A1%May 17, 2025
CVE-2025-4839: Permissive Cross-domain Policy with Untrusted Domains3.1 Low2.3 Low0%May 17, 2025
CVE-2025-4838: URL Redirection to Untrusted Site4.3 Medium5.3 Medium0%May 17, 2025
CVE-2025-4805: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium1%May 16, 2025
CVE-2025-40632: Improper Neutralization of Input During Web Page Generation6.1 Medium2.0 Low0%May 16, 2025
CVE-2025-40631: Improper Neutralization of HTTP Headers for Scripting Syntax6.1 Medium2.0 Low0%May 16, 2025
CVE-2025-4768: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%May 16, 2025
CVE-2025-47786: Improper Neutralization of Input During Web Page Generation4.8 Medium1.9 Low0%May 15, 2025
CVE-2024-8673: Undefined Security Weakness9.1 CriticalN/A4%May 15, 2025
CVE-2024-8090: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%May 15, 2025
CVE-2025-3440: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%May 15, 2025
CVE-2024-13914: Improper Limitation of a Pathname to a Restricted Directory7.2 HighN/A1%May 15, 2025
CVE-2025-4126: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%May 15, 2025
CVE-2025-29691: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-29690: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-29689: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-29688: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-29686: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-44024: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2024-45516: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2025
CVE-2025-4641: Improper Restriction of XML External Entity ReferenceN/A9.3 Critical0%May 14, 2025
CVE-2025-33104: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 14, 2025
CVE-2025-0133: Improper Neutralization of Input During Web Page GenerationN/A2.7 Low3%May 14, 2025
CVE-2025-3909: Product UI does not Warn User of Unsafe Actions8.1 HighN/A0%May 14, 2025
CVE-2024-57273: Improper Neutralization of Input During Web Page GenerationN/AN/A1%May 14, 2025
5876-5900 of 16560
‹›