The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-25768: Improper Neutralization of Special Elements used in a Command5.4 MediumN/A0%Feb 21, 2025
CVE-2025-25767: Incorrect Privilege Assignment4.8 MediumN/A0%Feb 21, 2025
CVE-2024-55156: Use of Externally-Controlled Format String5.5 MediumN/A0%Feb 21, 2025
CVE-2025-27088: Improper Neutralization of Input During Web Page Generation8.2 High8.4 High0%Feb 20, 2025
CVE-2025-25299: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low1%Feb 20, 2025
CVE-2025-20059: Relative Path Traversal9.1 Critical9.2 Critical1%Feb 20, 2025
CVE-2024-53974: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 19, 2025
CVE-2024-28776: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 19, 2025
CVE-2025-1024: Improper Authentication4.8 Medium8.4 High0%Feb 19, 2025
CVE-2024-56882: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 18, 2025
CVE-2025-0981: Improper Authentication6.1 Medium8.4 High0%Feb 18, 2025
CVE-2025-0424: Improper Input ValidationN/A5.1 Medium0%Feb 18, 2025
CVE-2025-0423: Improper Input ValidationN/A5.3 Medium1%Feb 18, 2025
CVE-2024-57971: Improper Control of Resource Identifiers9.1 CriticalN/A0%Feb 16, 2025
CVE-2025-25304: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Feb 14, 2025
CVE-2025-25296: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A6%Feb 14, 2025
CVE-2024-56463: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 14, 2025
CVE-2025-1239: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium1%Feb 14, 2025
CVE-2025-1071: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Feb 14, 2025
CVE-2025-0178: Improper Input Validation6.1 Medium5.1 Medium0%Feb 14, 2025
CVE-2025-24904: Improper Authentication8.5 HighN/A0%Feb 13, 2025
CVE-2025-24903: Insufficient Verification of Data Authenticity8.5 HighN/A0%Feb 13, 2025
CVE-2025-1271: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 13, 2025
CVE-2025-1225: Improper Restriction of XML External Entity Reference6.3 Medium5.3 Medium0%Feb 12, 2025
CVE-2024-33469: Improper Neutralization of Special Elements used in a Command7.9 HighN/A0%Feb 11, 2025
6201-6225 of 16564
‹›