The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-55672: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 Medium5.3 Medium0%Aug 14, 2025
CVE-2025-54472: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 14, 2025
CVE-2025-55668: Session Fixation6.5 MediumN/A0%Aug 13, 2025
CVE-2025-48989: Improper Resource Shutdown or Release7.5 HighN/A1%Aug 13, 2025
CVE-2025-53606: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 8, 2025
CVE-2025-48913: Improper Input Validation9.8 CriticalN/A0%Aug 8, 2025
CVE-2025-54571: Unchecked Return Value6.1 Medium6.9 Medium0%Aug 6, 2025
CVE-2024-51775: Missing Origin Validation in WebSockets5.3 MediumN/A0%Aug 3, 2025
CVE-2024-52279: Improper Input Validation5.3 MediumN/A0%Aug 3, 2025
CVE-2024-41177: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 3, 2025
CVE-2012-10022: Improper Privilege ManagementN/A8.5 High1%Aug 1, 2025
CVE-2025-24854: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 31, 2025
CVE-2025-24853: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Jul 31, 2025
CVE-2025-54656: Improper Output Neutralization for Logs6.5 MediumN/A0%Jul 30, 2025
CVE-2025-54415: Improper Neutralization of Special Elements used in an OS CommandN/A9.1 Critical0%Jul 26, 2025
CVE-2016-15046: Unrestricted Upload of File with Dangerous TypeN/A8.6 High0%Jul 25, 2025
CVE-2025-54090: Incorrect Check of Function Return Value6.3 MediumN/A0%Jul 23, 2025
CVE-2025-50151: Improper Input Validation8.8 HighN/A0%Jul 21, 2025
CVE-2025-49656: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Jul 21, 2025
CVE-2025-54064: Insertion of Sensitive Information into Log FileN/A6.9 Medium0%Jul 17, 2025
CVE-2025-48795: Uncontrolled Resource Consumption5.6 MediumN/A0%Jul 15, 2025
CVE-2025-53689: Improper Restriction of XML External Entity Reference8.8 HighN/A0%Jul 14, 2025
CVE-2024-41169: Improper Control of a Resource Through its Lifetime7.5 HighN/A0%Jul 12, 2025
CVE-2025-48924: Uncontrolled Recursion5.3 MediumN/A0%Jul 11, 2025
CVE-2025-53506: Uncontrolled Resource Consumption7.5 HighN/A0%Jul 10, 2025
1501-1525 of 4466
‹›