The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-1584: Path Traversal: '../filedir'4.3 Medium5.3 Medium0%Feb 23, 2025
CVE-2025-27109: Improper Encoding or Escaping of Output7.3 HighN/A0%Feb 21, 2025
CVE-2025-27108: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Feb 21, 2025
CVE-2025-25772: Cross-Site Request Forgery (CSRF)5.1 MediumN/A0%Feb 21, 2025
CVE-2025-25770: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Feb 21, 2025
CVE-2025-25769: Cross-Site Request Forgery (CSRF)8.0 HighN/A0%Feb 21, 2025
CVE-2025-25768: Improper Neutralization of Special Elements used in a Command5.4 MediumN/A0%Feb 21, 2025
CVE-2025-25767: Incorrect Privilege Assignment4.8 MediumN/A0%Feb 21, 2025
CVE-2024-55156: Use of Externally-Controlled Format String5.5 MediumN/A0%Feb 21, 2025
CVE-2025-27088: Improper Neutralization of Input During Web Page Generation8.2 High8.4 High0%Feb 20, 2025
CVE-2025-25299: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low1%Feb 20, 2025
CVE-2025-20059: Relative Path Traversal9.1 Critical9.2 Critical1%Feb 20, 2025
CVE-2024-53974: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 19, 2025
CVE-2024-28776: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 19, 2025
CVE-2025-1024: Improper Authentication4.8 Medium8.4 High0%Feb 19, 2025
CVE-2024-56882: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 18, 2025
CVE-2025-0981: Improper Authentication6.1 Medium8.4 High0%Feb 18, 2025
CVE-2025-0424: Improper Input ValidationN/A5.1 Medium0%Feb 18, 2025
CVE-2025-0423: Improper Input ValidationN/A5.3 Medium1%Feb 18, 2025
CVE-2024-57971: Improper Control of Resource Identifiers9.1 CriticalN/A0%Feb 16, 2025
CVE-2025-25304: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Feb 14, 2025
CVE-2025-25296: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A6%Feb 14, 2025
CVE-2024-56463: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 14, 2025
CVE-2025-1239: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium1%Feb 14, 2025
CVE-2025-1071: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Feb 14, 2025
6201-6225 of 16570
‹›