The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36419: Server-generated Error Message Containing Sensitive Information5.3 MediumN/A0%Jan 20, 2026
CVE-2025-36418: Improper Verification of Cryptographic Signature7.3 HighN/A0%Jan 20, 2026
CVE-2025-36411: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Jan 20, 2026
CVE-2025-36410: Client-Side Enforcement of Server-Side Security3.1 LowN/A0%Jan 20, 2026
CVE-2025-36409: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36408: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 20, 2026
CVE-2025-36397: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36396: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36115: Session Fixation6.3 MediumN/A0%Jan 20, 2026
CVE-2025-36113: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36066: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-36065: Insufficient Session Expiration6.3 MediumN/A0%Jan 20, 2026
CVE-2025-36063: Insufficient Session Expiration6.3 MediumN/A0%Jan 20, 2026
CVE-2025-36059: Execution with Unnecessary Privileges4.7 MediumN/A0%Jan 20, 2026
CVE-2025-36058: Insertion of Sensitive Information into Externally-Accessible File or Directory5.5 MediumN/A0%Jan 20, 2026
CVE-2025-33015: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Jan 20, 2026
CVE-2025-1722: Improper Clearing of Heap Memory Before Release5.9 MediumN/A0%Jan 20, 2026
CVE-2025-1719: Improper Clearing of Heap Memory Before Release5.9 MediumN/A0%Jan 20, 2026
CVE-2025-14115: Use of Hard-coded Credentials8.4 HighN/A0%Jan 20, 2026
CVE-2025-13925: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Jan 20, 2026
CVE-2025-12985: Incorrect Permission Assignment for Critical Resource8.4 HighN/A0%Jan 20, 2026
CVE-2025-71134: Undefined Security Weakness5.5 MediumN/A0%Jan 14, 2026
CVE-2025-68800: Use After Free7.8 HighN/A0%Jan 13, 2026
CVE-2025-68751: Undefined Security WeaknessN/AN/A0%Jan 5, 2026
CVE-2022-50870: Undefined Security WeaknessN/AN/A0%Dec 30, 2025
1551-1575 of 9773
‹›