The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-48459: Deserialization of Untrusted Data5.3 MediumN/A0%Sep 24, 2025
CVE-2025-48392: Uncontrolled Resource Consumption7.5 HighN/A0%Sep 24, 2025
CVE-2025-40933: Generation of Predictable Numbers or Identifiers7.5 HighN/A0%Sep 17, 2025
CVE-2025-59154: Authentication Bypass by Spoofing5.9 MediumN/A0%Sep 15, 2025
CVE-2025-59328: Deserialization of Untrusted Data6.5 MediumN/A2%Sep 15, 2025
CVE-2025-48208: Improper Neutralization of Special Elements used in an LDAP Query8.8 HighN/A0%Sep 9, 2025
CVE-2025-24404: XML Injection (aka Blind XPath Injection)8.8 HighN/A0%Sep 9, 2025
CVE-2025-58782: Deserialization of Untrusted Data6.5 MediumN/A0%Sep 8, 2025
CVE-2024-43166: Incorrect Default Permissions9.8 CriticalN/A0%Sep 3, 2025
CVE-2024-43115: Improper Input Validation8.8 HighN/A0%Sep 3, 2025
CVE-2025-9784: Allocation of Resources Without Limits or Throttling7.5 HighN/A2%Sep 2, 2025
CVE-2009-20011: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical60%Aug 30, 2025
CVE-2012-10062: Unrestricted Upload of File with Dangerous TypeN/A8.7 High49%Aug 30, 2025
CVE-2025-26467: Privilege Defined With Unsafe Actions8.8 HighN/A0%Aug 25, 2025
CVE-2025-54813: Improper Output Neutralization for Logs7.5 High6.3 Medium0%Aug 22, 2025
CVE-2025-54812: Improper Output Neutralization for Logs5.4 Medium2.1 Low0%Aug 22, 2025
CVE-2024-48988: SQL Injection: Hibernate7.6 HighN/A0%Aug 22, 2025
CVE-2025-54988: Improper Restriction of XML External Entity Reference8.4 HighN/A0%Aug 20, 2025
CVE-2025-51991: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Aug 20, 2025
CVE-2025-53192: Improper Neutralization of Expression/Command Delimiters8.8 HighN/A0%Aug 18, 2025
CVE-2025-41242: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Aug 18, 2025
CVE-2025-54466: Improper Control of Generation of Code9.8 CriticalN/A0%Aug 15, 2025
CVE-2025-55675: Improper Authorization6.5 Medium5.3 Medium0%Aug 14, 2025
CVE-2025-55674: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium5.3 Medium0%Aug 14, 2025
CVE-2025-55673: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Aug 14, 2025
1476-1500 of 4466
‹›