The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-28073: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 8, 2025
CVE-2025-40846: Improper Input ValidationN/A7.1 High0%May 8, 2025
CVE-2025-30147: Missing Cryptographic StepN/A8.7 High0%May 7, 2025
CVE-2025-46824: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%May 7, 2025
CVE-2025-4388: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium13%May 6, 2025
CVE-2025-4333: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%May 6, 2025
CVE-2025-4328: URL Redirection to Untrusted Site3.5 Low5.1 Medium0%May 6, 2025
CVE-2025-46734: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 5, 2025
CVE-2025-45610: Improper Access Control7.5 HighN/A0%May 5, 2025
CVE-2025-46719: Improper Neutralization of Input During Web Page Generation5.4 Medium5.4 Medium0%May 5, 2025
CVE-2025-46571: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%May 5, 2025
CVE-2025-4318: Improper Neutralization of Directives in Dynamically Evaluated CodeN/A9.5 Critical1%May 5, 2025
CVE-2025-4260: Deserialization of Untrusted Data4.3 Medium5.3 Medium0%May 5, 2025
CVE-2025-4259: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%May 5, 2025
CVE-2025-4258: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%May 5, 2025
CVE-2024-41753: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 3, 2025
CVE-2025-47201: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 2, 2025
CVE-2024-13419: Missing Authorization6.4 MediumN/A0%May 2, 2025
CVE-2025-4178: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium5.3 Medium0%May 1, 2025
CVE-2025-4175: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%May 1, 2025
CVE-2025-46565: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.0 Medium0%May 1, 2025
CVE-2024-11390: Unrestricted Upload of File with Dangerous Type5.4 MediumN/A0%May 1, 2025
CVE-2022-42449: Unrestricted Upload of File with Dangerous Type4.6 MediumN/A0%Apr 30, 2025
CVE-2022-27562: Unrestricted Upload of File with Dangerous Type4.6 MediumN/A0%Apr 30, 2025
CVE-2025-46558: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A1%Apr 30, 2025
5926-5950 of 16561
‹›