The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-44760: Unrestricted Upload of File with Dangerous Type4.6 MediumN/A0%Apr 24, 2025
CVE-2025-29526: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 23, 2025
CVE-2025-2703: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Apr 23, 2025
CVE-2025-32965: Embedded Malicious CodeN/A9.3 Critical0%Apr 22, 2025
CVE-2025-26159: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 22, 2025
CVE-2025-32961: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Apr 22, 2025
CVE-2025-32960: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Apr 22, 2025
CVE-2025-32951: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Apr 22, 2025
CVE-2025-3843: Cross-Site Request Forgery (CSRF)4.3 Medium5.3 Medium0%Apr 21, 2025
CVE-2025-3842: Improper Control of Generation of Code6.3 Medium5.3 Medium0%Apr 21, 2025
CVE-2024-42699: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Apr 21, 2025
CVE-2020-36844: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 20, 2025
CVE-2025-3830: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Apr 20, 2025
CVE-2025-3807: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Apr 19, 2025
CVE-2025-32792: Exposure of Sensitive System Information to an Unauthorized Control SphereN/A8.7 High0%Apr 18, 2025
CVE-2025-25427: Improper Neutralization of Input During Web Page Generation5.4 Medium8.6 High0%Apr 18, 2025
CVE-2025-3760: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Apr 17, 2025
CVE-2025-43708: Uncontrolled Recursion3.3 LowN/A0%Apr 17, 2025
CVE-2025-1983: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Apr 16, 2025
CVE-2025-24297: Improper Neutralization of Input During Web Page Generation9.8 Critical9.3 Critical0%Apr 15, 2025
CVE-2025-30736: Improper Access Control7.4 HighN/A0%Apr 15, 2025
CVE-2025-30698: Improper Access Control5.6 MediumN/A1%Apr 15, 2025
CVE-2025-30691: Improper Access Control4.8 MediumN/A0%Apr 15, 2025
CVE-2025-21587: Improper Access Control7.4 HighN/A1%Apr 15, 2025
CVE-2025-29213: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Apr 15, 2025
5976-6000 of 16561
‹›