The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-40700: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 4, 2025
CVE-2025-1015: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A25%Feb 4, 2025
CVE-2024-27137: Improper Authentication5.3 MediumN/A0%Feb 4, 2025
CVE-2025-23210: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Feb 3, 2025
CVE-2024-57669: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Feb 3, 2025
CVE-2024-57237: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Feb 3, 2025
CVE-2024-53943: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 3, 2025
CVE-2025-25062: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A43%Feb 3, 2025
CVE-2024-49349: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2025
CVE-2024-49339: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-49807: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-47116: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 31, 2025
CVE-2024-47103: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2024-40696: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2025-0930: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2025
CVE-2024-55416: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Jan 30, 2025
CVE-2025-0747: Improper Neutralization of Input During Web Page Generation8.6 HighN/A0%Jan 30, 2025
CVE-2025-0746: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 30, 2025
CVE-2024-57665: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jan 29, 2025
CVE-2025-0851: Absolute Path Traversal9.8 Critical9.3 Critical5%Jan 29, 2025
CVE-2024-48761: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Jan 29, 2025
CVE-2025-24790: Incorrect Default Permissions4.4 MediumN/A0%Jan 29, 2025
CVE-2025-24789: Untrusted Search Path7.8 HighN/A0%Jan 29, 2025
CVE-2025-22917: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 28, 2025
CVE-2024-57514: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A14%Jan 28, 2025
6276-6300 of 16570
‹›