The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-14790: Insufficiently Protected Credentials6.5 MediumN/A0%Mar 25, 2026
CVE-2025-12708: Use of Hard-coded Credentials6.2 MediumN/A0%Mar 25, 2026
CVE-2026-1276: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 19, 2026
CVE-2025-36051: Insertion of Sensitive Information into Externally-Accessible File or Directory6.2 MediumN/A0%Mar 19, 2026
CVE-2025-15051: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 19, 2026
CVE-2025-13995: Improper Validation of Syntactic Correctness of Input5.0 MediumN/A0%Mar 19, 2026
CVE-2026-3856: Missing Support for Integrity Check5.3 MediumN/A0%Mar 17, 2026
CVE-2026-1264: Missing Authentication for Critical Function7.1 HighN/A0%Mar 17, 2026
CVE-2025-14031: Improper Neutralization of Special Elements used in a Command7.5 HighN/A0%Mar 17, 2026
CVE-2026-1376: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Mar 17, 2026
CVE-2026-1267: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 17, 2026
CVE-2025-14806: Use of Cache Containing Sensitive Information5.7 MediumN/A0%Mar 17, 2026
CVE-2026-0977: Improper Access Control5.1 MediumN/A0%Mar 16, 2026
CVE-2025-13460: Observable Response Discrepancy5.3 MediumN/A0%Mar 16, 2026
CVE-2025-13459: Improper Enforcement of Behavioral Workflow2.7 LowN/A0%Mar 16, 2026
CVE-2025-13212: Improper Control of Interaction Frequency5.3 MediumN/A0%Mar 16, 2026
CVE-2026-0835: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2026
CVE-2025-36368: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Mar 13, 2026
CVE-2025-14811: Use of GET Request Method With Sensitive Query Strings3.1 LowN/A0%Mar 13, 2026
CVE-2025-14504: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2026
CVE-2025-14483: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Mar 13, 2026
CVE-2025-13726: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Mar 13, 2026
CVE-2025-13723: Use of a Key Past its Expiration Date5.3 MediumN/A0%Mar 13, 2026
CVE-2025-13718: Cleartext Transmission of Sensitive Information3.7 LowN/A0%Mar 13, 2026
CVE-2025-13702: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 13, 2026
1426-1450 of 9771
‹›