The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36436: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Feb 2, 2026
CVE-2025-36253: Use of a One-Way Hash without a Salt5.9 MediumN/A0%Feb 2, 2026
CVE-2025-36238: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.0 MediumN/A0%Feb 2, 2026
CVE-2025-36194: Improper Access Control for Register Interface2.8 LowN/A0%Feb 2, 2026
CVE-2025-13096: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Feb 2, 2026
CVE-2025-15395: Incorrect Authorization4.3 MediumN/A0%Feb 2, 2026
CVE-2025-14914: Improper Limitation of a Pathname to a Restricted Directory7.6 HighN/A0%Feb 2, 2026
CVE-2025-36442: Improper Neutralization of Special Elements in Data Query Logic6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36428: Improper Validation of Specified Quantity in Input5.3 MediumN/A0%Jan 30, 2026
CVE-2025-36427: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36424: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36423: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36407: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36387: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36384: Unquoted Search Path or Element8.4 HighN/A0%Jan 30, 2026
CVE-2025-36366: Improper Neutralization of Special Elements in Data Query Logic6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36365: Authorization Bypass Through User-Controlled Key6.8 MediumN/A0%Jan 30, 2026
CVE-2025-36353: Improper Neutralization of Special Elements in Data Query Logic6.2 MediumN/A0%Jan 30, 2026
CVE-2025-36184: Execution with Unnecessary Privileges7.2 HighN/A0%Jan 30, 2026
CVE-2025-36123: Allocation of Resources Without Limits or Throttling6.2 MediumN/A0%Jan 30, 2026
CVE-2025-36098: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36070: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36009: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jan 30, 2026
CVE-2025-36001: Uncontrolled Recursion6.5 MediumN/A0%Jan 30, 2026
CVE-2025-2668: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Jan 30, 2026
1526-1550 of 9773
‹›