Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-8037: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute9.1 CriticalN/A0%Jul 22, 2025
CVE-2025-8036: Reliance on Reverse DNS Resolution for a Security-Critical Action8.1 HighN/A0%Jul 22, 2025
CVE-2025-8035: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Jul 22, 2025
CVE-2025-8034: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Jul 22, 2025
CVE-2025-8033: NULL Pointer Dereference6.5 MediumN/A0%Jul 22, 2025
CVE-2025-8032: Protection Mechanism Failure8.1 HighN/A0%Jul 22, 2025
CVE-2025-8031: Incorrect Default Permissions9.8 CriticalN/A0%Jul 22, 2025
CVE-2025-8030: Improper Control of Generation of Code8.1 HighN/A0%Jul 22, 2025
CVE-2025-8029: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)8.1 HighN/A0%Jul 22, 2025
CVE-2025-8028: Improper Handling of Faults that Lead to Instruction Skips9.8 CriticalN/A0%Jul 22, 2025
CVE-2025-8027: Use of Uninitialized Variable6.5 MediumN/A0%Jul 22, 2025
CVE-2025-6436: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%Jun 24, 2025
CVE-2025-6435: Unrestricted Upload of File with Dangerous Type8.1 HighN/A0%Jun 24, 2025
CVE-2025-6434: Improper Restriction of Rendered UI Layers or Frames4.3 MediumN/A0%Jun 24, 2025
CVE-2025-6433: Improper Certificate Validation9.8 CriticalN/A0%Jun 24, 2025
CVE-2025-6432: Exposure of Sensitive Information to an Unauthorized Actor8.6 HighN/A0%Jun 24, 2025
CVE-2025-6430: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 24, 2025
CVE-2025-6429: Improper Encoding or Escaping of Output6.5 MediumN/A0%Jun 24, 2025
CVE-2025-6427: Protection Mechanism Failure9.1 CriticalN/A0%Jun 24, 2025
CVE-2025-6426: Insufficient Verification of Data Authenticity8.8 HighN/A0%Jun 24, 2025
CVE-2025-6425: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jun 24, 2025
CVE-2025-6424: Use After Free9.8 CriticalN/A0%Jun 24, 2025
CVE-2025-5986: User Interface (UI) Misrepresentation of Critical Information6.5 MediumN/A1%Jun 11, 2025
CVE-2025-5272: Out-of-bounds Write7.3 HighN/A0%May 27, 2025
CVE-2025-5271: Improper Encoding or Escaping of Output6.5 MediumN/A0%May 27, 2025
976-1000 of 2523