The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-64403: Missing Authorization8.1 HighN/A1%Nov 12, 2025
CVE-2025-64402: Missing Authorization6.5 MediumN/A1%Nov 12, 2025
CVE-2025-64401: Missing Authorization7.5 HighN/A1%Nov 12, 2025
CVE-2025-62232: Insertion of Sensitive Information into Log File7.5 HighN/A0%Oct 31, 2025
CVE-2024-58273: Incorrect Privilege Assignment7.8 High8.5 High0%Oct 30, 2025
CVE-2021-47700: Execution with Unnecessary Privileges7.8 High8.5 High0%Oct 30, 2025
CVE-2025-61795: Improper Resource Shutdown or Release5.3 MediumN/A1%Oct 27, 2025
CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences9.6 CriticalN/A10%Oct 27, 2025
CVE-2025-55752: Relative Path Traversal7.5 HighN/A64%Oct 27, 2025
CVE-2025-57738: Improper Isolation or Compartmentalization7.2 HighN/A23%Oct 20, 2025
CVE-2025-47410: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Oct 18, 2025
CVE-2025-61581: Inefficient Regular Expression Complexity7.5 HighN/A1%Oct 16, 2025
CVE-2025-54539: Deserialization of Untrusted Data9.8 CriticalN/A2%Oct 16, 2025
CVE-2025-55039: Improper Verification of Cryptographic Signature6.5 MediumN/A0%Oct 15, 2025
CVE-2024-44088: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Oct 14, 2025
CVE-2025-61919: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 10, 2025
CVE-2025-30001: Incorrect Execution-Assigned Permissions7.3 HighN/A1%Oct 10, 2025
CVE-2025-62228: Improper Neutralization of Special Elements used in an SQL Command8.8 High5.1 Medium0%Oct 9, 2025
CVE-2025-61585: Undefined Security WeaknessN/AN/AN/AOct 3, 2025
CVE-2025-61735: Server-Side Request Forgery (SSRF)7.3 HighN/A1%Oct 2, 2025
CVE-2025-61734: Files or Directories Accessible to External Parties7.5 HighN/A21%Oct 2, 2025
CVE-2025-61733: Authentication Bypass Using an Alternate Path or Channel7.5 HighN/A1%Oct 2, 2025
CVE-2025-59954: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Sep 30, 2025
CVE-2025-54831: Exposure of Sensitive Information Due to Incompatible Policies6.5 MediumN/A1%Sep 26, 2025
CVE-2025-58457: Improper Handling of Insufficient Permissions or Privileges4.3 MediumN/A0%Sep 24, 2025
1451-1475 of 4466
‹›