The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-33205: Inclusion of Functionality from Untrusted Control Sphere7.3 HighN/A0%Nov 25, 2025
CVE-2025-33204: Improper Control of Generation of Code7.8 HighN/A0%Nov 25, 2025
CVE-2025-33203: Server-Side Request Forgery (SSRF)7.6 HighN/A0%Nov 25, 2025
CVE-2025-33200: Sensitive Information in Resource Not Removed Before Reuse2.3 LowN/A0%Nov 25, 2025
CVE-2025-33199: Always-Incorrect Control Flow Implementation3.2 LowN/A0%Nov 25, 2025
CVE-2025-33198: Sensitive Information in Resource Not Removed Before Reuse3.3 LowN/A0%Nov 25, 2025
CVE-2025-33197: NULL Pointer Dereference4.3 MediumN/A0%Nov 25, 2025
CVE-2025-33196: Sensitive Information in Resource Not Removed Before Reuse4.4 MediumN/A0%Nov 25, 2025
CVE-2025-33195: Improper Restriction of Operations within the Bounds of a Memory Buffer4.4 MediumN/A0%Nov 25, 2025
CVE-2025-33194: Incorrect Behavior Order: Validate Before Canonicalize5.7 MediumN/A0%Nov 25, 2025
CVE-2025-33193: Improper Validation of Integrity Check Value5.7 MediumN/A0%Nov 25, 2025
CVE-2025-33192: Unchecked Return Value to NULL Pointer Dereference5.7 MediumN/A0%Nov 25, 2025
CVE-2025-33191: Improper Input Validation5.7 MediumN/A0%Nov 25, 2025
CVE-2025-33190: Out-of-bounds Write6.7 MediumN/A0%Nov 25, 2025
CVE-2025-33189: Out-of-bounds Write7.8 HighN/A0%Nov 25, 2025
CVE-2025-33188: Improper Privilege Management8.0 HighN/A0%Nov 25, 2025
CVE-2025-33187: Improper Privilege Management9.3 CriticalN/A0%Nov 25, 2025
CVE-2025-13483: Missing Authentication for Critical FunctionN/A8.8 High0%Nov 25, 2025
CVE-2025-64061: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 25, 2025
CVE-2025-63729: Exposure of Sensitive Information to an Unauthorized Actor9.0 CriticalN/A0%Nov 25, 2025
CVE-2025-64050: Improper Control of Generation of Code7.2 HighN/A0%Nov 25, 2025
CVE-2025-64049: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Nov 25, 2025
CVE-2025-60739: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Nov 25, 2025
CVE-2025-40890: Improper Neutralization of Input During Web Page Generation7.9 High5.9 Medium0%Nov 25, 2025
CVE-2025-13467: Deserialization of Untrusted Data5.5 MediumN/A0%Nov 25, 2025
81751-81775 of 599228
‹›