The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-45007: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Apr 30, 2025
CVE-2025-46346: Improper Neutralization of Input During Web Page Generation5.4 Medium6.3 Medium0%Apr 29, 2025
CVE-2025-40616: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Apr 29, 2025
CVE-2025-40615: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Apr 29, 2025
CVE-2025-1551: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 29, 2025
CVE-2025-4083: Improper Isolation or Compartmentalization9.1 CriticalN/A0%Apr 29, 2025
CVE-2025-3929: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Apr 29, 2025
CVE-2025-46343: Improper Neutralization of Input During Web Page Generation5.0 MediumN/A0%Apr 29, 2025
CVE-2025-46338: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Apr 29, 2025
CVE-2024-11922: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Apr 28, 2025
CVE-2025-4036: Improper Access Control6.3 Medium5.3 Medium0%Apr 28, 2025
CVE-2023-42404: Improper Control of Generation of Code4.9 MediumN/A0%Apr 28, 2025
CVE-2025-4019: Missing Authentication for Critical Function7.3 High6.9 Medium0%Apr 28, 2025
CVE-2025-4018: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Apr 28, 2025
CVE-2025-4017: Improper Authorization4.3 Medium5.3 Medium0%Apr 28, 2025
CVE-2025-4016: Improper Authorization5.4 Medium5.3 Medium0%Apr 28, 2025
CVE-2025-4015: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Apr 28, 2025
CVE-2025-3706: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 28, 2025
CVE-2025-3986: Inefficient Regular Expression Complexity4.3 Medium5.3 Medium0%Apr 27, 2025
CVE-2025-3985: Inefficient Regular Expression Complexity2.7 Low5.1 Medium0%Apr 27, 2025
CVE-2025-3984: Improper Control of Generation of Code5.0 Medium2.3 Low0%Apr 27, 2025
CVE-2025-46655: Improper Protection of Alternate Path4.9 MediumN/A0%Apr 26, 2025
CVE-2025-46654: Improper Protection of Alternate Path4.9 MediumN/A0%Apr 26, 2025
CVE-2025-2986: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Apr 25, 2025
CVE-2022-44760: Unrestricted Upload of File with Dangerous Type4.6 MediumN/A0%Apr 24, 2025
5951-5975 of 16560
‹›