The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-36843: Improper Verification of Cryptographic Signature4.3 MediumN/A0%Mar 13, 2025
CVE-2025-26260: Improper Control of Generation of Code8.8 HighN/A1%Mar 12, 2025
CVE-2025-27915: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A27%Mar 12, 2025
CVE-2025-27914: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 12, 2025
CVE-2025-27789: Inefficient Regular Expression Complexity6.2 MediumN/A0%Mar 11, 2025
CVE-2025-25929: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 11, 2025
CVE-2024-56338: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 11, 2025
CVE-2025-27431: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 11, 2025
CVE-2025-26659: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 11, 2025
CVE-2025-0062: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Mar 11, 2025
CVE-2024-55199: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 10, 2025
CVE-2025-25940: Deserialization of Untrusted Data9.8 CriticalN/A1%Mar 10, 2025
CVE-2025-2150: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 10, 2025
CVE-2025-2112: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Mar 8, 2025
CVE-2025-25361: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Mar 6, 2025
CVE-2023-38693: Improper Restriction of XML External Entity Reference9.8 CriticalN/A0%Mar 5, 2025
CVE-2024-5667: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Mar 5, 2025
CVE-2025-26202: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Mar 4, 2025
CVE-2025-1947: Improper Neutralization of Special Elements used in a Command6.3 Medium5.3 Medium3%Mar 4, 2025
CVE-2025-26182: Improper Control of Generation of Code6.5 MediumN/A0%Mar 4, 2025
CVE-2025-26091: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Mar 4, 2025
CVE-2025-1934: Undefined Security Weakness6.5 MediumN/A0%Mar 4, 2025
CVE-2025-1695: Loop with Unreachable Exit Condition5.3 Medium6.9 Medium0%Mar 4, 2025
CVE-2025-1890: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Mar 4, 2025
CVE-2024-55064: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 3, 2025
6126-6150 of 16564
‹›