The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36019: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 17, 2026
CVE-2025-36018: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Feb 17, 2026
CVE-2025-12755: Improper Output Neutralization for Logs4.0 MediumN/A0%Feb 17, 2026
CVE-2024-43178: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 17, 2026
CVE-2025-36425: Plaintext Storage of a Password5.3 MediumN/A0%Feb 17, 2026
CVE-2025-36247: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Feb 17, 2026
CVE-2025-14689: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Feb 17, 2026
CVE-2025-13867: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Feb 17, 2026
CVE-2025-14150: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A0%Feb 5, 2026
CVE-2025-13491: Untrusted Search Path5.1 MediumN/A0%Feb 5, 2026
CVE-2025-13379: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Feb 5, 2026
CVE-2024-51451: Improper Neutralization of HTTP Headers for Scripting Syntax6.5 MediumN/A0%Feb 4, 2026
CVE-2024-43181: Insufficient Session Expiration6.3 MediumN/A0%Feb 4, 2026
CVE-2024-40685: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Feb 4, 2026
CVE-2025-2134: Insufficient Resource Pool3.5 LowN/A0%Feb 4, 2026
CVE-2025-27550: Exposure of Sensitive System Information to an Unauthorized Control Sphere3.5 LowN/A0%Feb 4, 2026
CVE-2025-1823: Allocation of Resources Without Limits or Throttling3.5 LowN/A0%Feb 4, 2026
CVE-2025-13375: Execution with Unnecessary Privileges9.8 CriticalN/A0%Feb 4, 2026
CVE-2024-39724: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Feb 4, 2026
CVE-2023-38281: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Feb 4, 2026
CVE-2023-38017: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Feb 4, 2026
CVE-2023-38010: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Feb 4, 2026
CVE-2025-36094: Improper Validation of Specified Quantity in Input5.4 MediumN/A0%Feb 3, 2026
CVE-2025-36033: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 3, 2026
CVE-2025-33081: Cleartext Storage of Sensitive Information3.3 LowN/A0%Feb 3, 2026
1501-1525 of 9773
‹›