The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2025-8737: URL Redirection to Untrusted Site3.5 Low2.0 Low0%Aug 8, 2025
CVE-2010-10013: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical2%Aug 8, 2025
CVE-2025-8731: Use of Default Credentials9.8 Critical8.9 High1%Aug 8, 2025
CVE-2013-10065: Uncaught Exception7.5 High8.7 High2%Aug 5, 2025
CVE-2025-43980: Improper Access Control6.5 MediumN/A0%Aug 5, 2025
CVE-2025-54804: Integer Overflow or Wraparound6.5 MediumN/A0%Aug 5, 2025
CVE-2025-38741: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Aug 4, 2025
CVE-2025-44954: Use of Default Cryptographic Key9.0 CriticalN/A1%Aug 4, 2025
CVE-2014-125121: Use of Hard-coded CredentialsN/A10.0 Critical1%Jul 31, 2025
CVE-2023-53158: Improper Neutralization of Special Elements used in an OS Command4.1 MediumN/A0%Jul 28, 2025
CVE-2025-5449: Integer Overflow or Wraparound6.5 MediumN/A1%Jul 25, 2025
CVE-2025-29630: Undefined Security WeaknessN/AN/A0%Jul 25, 2025
CVE-2025-8114: NULL Pointer Dereference4.7 MediumN/A0%Jul 24, 2025
CVE-2025-6018: Incorrect Authorization7.8 HighN/A1%Jul 23, 2025
CVE-2025-4878: Use After Free3.6 LowN/A0%Jul 22, 2025
CVE-2025-7885: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low1%Jul 20, 2025
CVE-2025-34112: Improper Neutralization of Special Elements used in an SQL CommandN/A10.0 Critical3%Jul 15, 2025
CVE-2025-45582: Path Traversal: '../filedir'4.1 MediumN/A0%Jul 11, 2025
CVE-2025-27027: Improper Isolation or Compartmentalization4.1 MediumN/A0%Jul 9, 2025
CVE-2025-4663: Improper Check for Unusual or Exceptional Conditions4.9 Medium6.8 Medium0%Jul 8, 2025
CVE-2025-41224: Protection Mechanism Failure8.8 High7.7 High0%Jul 8, 2025
CVE-2025-24006: Improper Privilege Management7.8 HighN/A0%Jul 8, 2025
CVE-2025-24005: Improper Input Validation7.8 HighN/A0%Jul 8, 2025
CVE-2025-5987: Return of Wrong Status Code8.1 HighN/A2%Jul 7, 2025
CVE-2025-47228: Improper Neutralization of Special Elements used in an OS Command6.7 MediumN/A23%Jul 5, 2025
751-775 of 2138
‹›