The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-28198: Improper Neutralization of Special Elements used in an SQL Command5.9 MediumN/A0%Apr 15, 2025
CVE-2025-3588: Stack-based Buffer Overflow5.3 Medium4.8 Medium0%Apr 14, 2025
CVE-2022-43850: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 14, 2025
CVE-2025-3570: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Apr 14, 2025
CVE-2025-3569: Improper Authorization6.3 Medium5.3 Medium0%Apr 14, 2025
CVE-2025-3567: Improper Authorization4.3 Medium5.3 Medium0%Apr 14, 2025
CVE-2025-3423: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 13, 2025
CVE-2025-32395: Exposure of Sensitive Information to an Unauthorized ActorN/A6.0 Medium0%Apr 10, 2025
CVE-2023-42007: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 10, 2025
CVE-2025-30148: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 10, 2025
CVE-2025-32379: Improper Neutralization of Input During Web Page Generation5.0 MediumN/A0%Apr 9, 2025
CVE-2023-33844: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 9, 2025
CVE-2025-30292: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Apr 8, 2025
CVE-2025-27205: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 8, 2025
CVE-2025-22465: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 8, 2025
CVE-2025-22855: Improper Neutralization of Input During Web Page Generation2.7 LowN/A0%Apr 8, 2025
CVE-2025-30166: Improper Neutralization of Input During Web Page Generation4.8 Medium1.8 Low0%Apr 8, 2025
CVE-2025-26653: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Apr 8, 2025
CVE-2025-3413: Deserialization of Untrusted Data6.3 Medium5.3 Medium0%Apr 8, 2025
CVE-2025-3412: Server-Side Request Forgery (SSRF)6.3 Medium5.3 Medium0%Apr 8, 2025
CVE-2025-3411: Server-Side Request Forgery (SSRF)6.3 Medium5.3 Medium0%Apr 8, 2025
CVE-2025-3410: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Apr 8, 2025
CVE-2025-3398: Improper Access Control6.3 Medium5.3 Medium0%Apr 8, 2025
CVE-2025-3392: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Apr 8, 2025
CVE-2025-3391: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Apr 8, 2025
6001-6025 of 16561
‹›