The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-1831: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Mar 2, 2025
CVE-2025-1821: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Mar 2, 2025
CVE-2025-1820: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Mar 2, 2025
CVE-2025-1818: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium1%Mar 2, 2025
CVE-2025-1812: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Mar 2, 2025
CVE-2025-25476: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 28, 2025
CVE-2025-0160: Process Control8.1 HighN/A0%Feb 28, 2025
CVE-2025-1746: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 28, 2025
CVE-2025-22491: Improper Neutralization of Input During Web Page Generation6.7 MediumN/A0%Feb 28, 2025
CVE-2024-9285: Improper Neutralization of Input During Web Page Generation4.3 Medium5.3 Medium0%Feb 27, 2025
CVE-2024-5848: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 27, 2025
CVE-2025-1686: External Control of File Name or Path6.8 Medium4.8 Medium1%Feb 27, 2025
CVE-2024-46226: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 26, 2025
CVE-2025-0719: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 26, 2025
CVE-2025-27148: Creation of Temporary File With Insecure Permissions8.8 HighN/A0%Feb 25, 2025
CVE-2025-27145: Improper Neutralization of Script in Attributes in a Web Page3.6 LowN/A0%Feb 25, 2025
CVE-2025-27144: Allocation of Resources Without Limits or ThrottlingN/A6.6 Medium0%Feb 24, 2025
CVE-2024-57026: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 24, 2025
CVE-2025-25460: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Feb 24, 2025
CVE-2025-1584: Path Traversal: '../filedir'4.3 Medium5.3 Medium1%Feb 23, 2025
CVE-2025-27109: Improper Encoding or Escaping of Output7.3 HighN/A0%Feb 21, 2025
CVE-2025-27108: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Feb 21, 2025
CVE-2025-25772: Cross-Site Request Forgery (CSRF)5.1 MediumN/A0%Feb 21, 2025
CVE-2025-25770: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Feb 21, 2025
CVE-2025-25769: Cross-Site Request Forgery (CSRF)8.0 HighN/A0%Feb 21, 2025
6176-6200 of 16564
‹›