Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-5270: Cleartext Transmission of Sensitive Information7.5 HighN/A0%May 27, 2025
CVE-2025-5269: Out-of-bounds Write8.1 HighN/A0%May 27, 2025
CVE-2025-5268: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%May 27, 2025
CVE-2025-5267: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%May 27, 2025
CVE-2025-5266: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%May 27, 2025
CVE-2025-5265: Improper Neutralization of Special Elements used in a Command4.8 MediumN/A0%May 27, 2025
CVE-2025-5264: Improper Neutralization of Special Elements used in a Command4.8 MediumN/A0%May 27, 2025
CVE-2025-5263: Origin Validation Error4.3 MediumN/A0%May 27, 2025
CVE-2025-5262: Double Free7.5 HighN/A0%May 27, 2025
CVE-2025-4919: Out-of-bounds Read8.8 HighN/A0%May 17, 2025
CVE-2025-4918: Out-of-bounds Read9.8 CriticalN/A1%May 17, 2025
CVE-2025-3932: Authentication Bypass Using an Alternate Path or Channel6.5 MediumN/A0%May 14, 2025
CVE-2025-3909: Product UI does not Warn User of Unsafe Actions8.1 HighN/A0%May 14, 2025
CVE-2025-3875: Authentication Bypass by Spoofing7.5 HighN/A0%May 14, 2025
CVE-2025-4093: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%Apr 29, 2025
CVE-2025-4092: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Apr 29, 2025
CVE-2025-4091: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%Apr 29, 2025
CVE-2025-4090: Insertion of Sensitive Information into Log File5.3 MediumN/A0%Apr 29, 2025
CVE-2025-4089: Improper Neutralization of Special Elements used in a Command5.1 MediumN/A0%Apr 29, 2025
CVE-2025-4088: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Apr 29, 2025
CVE-2025-4087: Out-of-bounds Read4.8 MediumN/A0%Apr 29, 2025
CVE-2025-4086: User Interface (UI) Misrepresentation of Critical Information6.5 MediumN/A0%Apr 29, 2025
CVE-2025-4085: Improper Privilege Management7.1 HighN/A0%Apr 29, 2025
CVE-2025-4084: Improper Encoding or Escaping of Output5.7 MediumN/A0%Apr 29, 2025
CVE-2025-4083: Improper Isolation or Compartmentalization9.1 CriticalN/A0%Apr 29, 2025
1001-1025 of 2523