The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-13718: Cleartext Transmission of Sensitive Information3.7 LowN/A0%Mar 13, 2026
CVE-2025-13702: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 13, 2026
CVE-2023-40693: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2026
CVE-2025-13213: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Mar 10, 2026
CVE-2026-2713: Uncontrolled Search Path Element7.4 HighN/A0%Mar 10, 2026
CVE-2025-36227: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Mar 10, 2026
CVE-2025-36226: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 10, 2026
CVE-2025-13219: Use of GET Request Method With Sensitive Query Strings5.9 MediumN/A0%Mar 10, 2026
CVE-2025-36105: Cleartext Storage of Sensitive Information in an Environment Variable4.4 MediumN/A0%Mar 10, 2026
CVE-2026-1713: Authentication Bypass by Primary Weakness5.0 MediumN/A0%Mar 3, 2026
CVE-2026-1567: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 3, 2026
CVE-2025-14480: Use of a Broken or Risky Cryptographic Algorithm5.1 MediumN/A0%Mar 3, 2026
CVE-2025-14456: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Mar 3, 2026
CVE-2025-13688: Improper Neutralization of Special Elements used in an OS Command6.3 MediumN/A0%Mar 3, 2026
CVE-2025-13687: Improper Neutralization of Special Elements used in an OS Command6.3 MediumN/A0%Mar 3, 2026
CVE-2025-13686: Improper Neutralization of Special Elements used in an OS Command6.3 MediumN/A0%Mar 3, 2026
CVE-2026-2606: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Mar 3, 2026
CVE-2026-1265: Insertion of Sensitive Information into Log File4.3 MediumN/A0%Mar 3, 2026
CVE-2025-36364: Use of Web Browser Cache Containing Sensitive Information3.3 LowN/A0%Mar 3, 2026
CVE-2025-36363: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Mar 3, 2026
CVE-2025-14923: Use of Hard-coded Cryptographic Key4.7 MediumN/A0%Mar 3, 2026
CVE-2025-14604: Incorrect Permission Assignment for Critical Resource6.6 MediumN/A0%Mar 3, 2026
CVE-2025-13734: Missing Authorization5.4 MediumN/A0%Mar 3, 2026
CVE-2025-13616: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A0%Mar 3, 2026
CVE-2025-13490: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Mar 3, 2026
1451-1475 of 9773
‹›