The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-13689: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Feb 17, 2026
CVE-2025-13333: Improperly Implemented Security Check for Standard4.4 MediumN/A0%Feb 17, 2026
CVE-2025-36348: Generation of Error Message Containing Sensitive Information4.9 MediumN/A0%Feb 17, 2026
CVE-2025-36183: Unrestricted Upload of File with Dangerous Type3.8 LowN/A0%Feb 17, 2026
CVE-2025-33135: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 17, 2026
CVE-2025-33088: Incorrect Permission Assignment for Critical Resource7.4 HighN/A0%Feb 17, 2026
CVE-2023-38005: Improper Access Control4.3 MediumN/A0%Feb 17, 2026
CVE-2025-36379: Inadequate Encryption Strength5.9 MediumN/A0%Feb 17, 2026
CVE-2025-36377: Insufficient Session Expiration6.3 MediumN/A0%Feb 17, 2026
CVE-2025-36376: Insufficient Session Expiration6.3 MediumN/A0%Feb 17, 2026
CVE-2025-14289: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Feb 17, 2026
CVE-2025-13691: Exposure of Sensitive System Information to an Unauthorized Control Sphere8.1 HighN/A0%Feb 17, 2026
CVE-2025-36243: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Feb 17, 2026
CVE-2025-33130: Buffer Copy without Checking Size of Input6.5 MediumN/A0%Feb 17, 2026
CVE-2025-33124: Incorrect Calculation of Buffer Size6.5 MediumN/A0%Feb 17, 2026
CVE-2025-33101: Improper Clearing of Heap Memory Before Release5.9 MediumN/A0%Feb 17, 2026
CVE-2025-33089: Use of Hard-coded Credentials6.5 MediumN/A0%Feb 17, 2026
CVE-2025-27904: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Feb 17, 2026
CVE-2025-27903: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Feb 17, 2026
CVE-2025-27901: Improper Neutralization of HTTP Headers for Scripting Syntax6.5 MediumN/A0%Feb 17, 2026
CVE-2025-27900: URL Redirection to Untrusted Site6.8 MediumN/A0%Feb 17, 2026
CVE-2025-27899: Cleartext Storage of Sensitive Information in an Environment Variable5.3 MediumN/A0%Feb 17, 2026
CVE-2025-27898: Insufficient Session Expiration6.3 MediumN/A0%Feb 17, 2026
CVE-2025-13108: Sensitive Information in Resource Not Removed Before Reuse5.5 MediumN/A0%Feb 17, 2026
CVE-2023-38265: Exposure of Information Through Directory Listing5.3 MediumN/A0%Feb 17, 2026
1476-1500 of 9773
‹›