The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2019-25237: Incorrect Authorization9.8 Critical8.7 High0%Dec 24, 2025
CVE-2019-25236: Missing Authentication for Critical Function9.8 Critical8.7 High0%Dec 24, 2025
CVE-2019-25235: Authorization Bypass Through User-Controlled Key9.8 Critical8.8 High0%Dec 24, 2025
CVE-2019-25234: Improper Neutralization of Input During Web Page Generation5.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25156: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25155: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25154: Out-of-bounds Write9.8 Critical8.5 High0%Dec 24, 2025
CVE-2018-25153: Undefined Security WeaknessN/A6.8 Medium0%Dec 24, 2025
CVE-2018-25152: Cross-Site Request Forgery (CSRF)5.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25151: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25150: Cross-Site Request Forgery (CSRF)5.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25149: Cross-Site Request Forgery (CSRF)6.5 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25148: Incorrect Privilege Assignment8.8 High8.7 High1%Dec 24, 2025
CVE-2018-25146: Incorrect Authorization8.1 High7.1 High0%Dec 24, 2025
CVE-2018-25144: Improper Limitation of a Pathname to a Restricted Directory8.4 High8.7 High0%Dec 24, 2025
CVE-2018-25143: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Dec 24, 2025
CVE-2018-25141: Missing Authentication for Critical Function7.5 High8.7 High0%Dec 24, 2025
CVE-2018-25140: Missing Authentication for Critical Function7.5 High9.3 Critical0%Dec 24, 2025
CVE-2018-25137: Missing Authentication for Critical Function7.5 High8.7 High0%Dec 24, 2025
CVE-2018-25136: Missing Authentication for Critical Function7.5 High8.7 High1%Dec 24, 2025
CVE-2018-25134: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Dec 24, 2025
CVE-2018-25133: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Dec 24, 2025
CVE-2018-25131: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Dec 24, 2025
CVE-2018-25130: Plaintext Storage of a Password6.2 Medium6.8 Medium0%Dec 24, 2025
CVE-2018-25129: Authorization Bypass Through User-Controlled Key7.5 High7.1 High0%Dec 24, 2025
79251-79275 of 402816
‹›