The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-49124: Untrusted Search Path8.4 HighN/A0%Jun 16, 2025
CVE-2025-48988: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jun 16, 2025
CVE-2025-48976: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jun 16, 2025
CVE-2025-47869: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Jun 16, 2025
CVE-2025-47868: Out-of-bounds Write9.8 CriticalN/A0%Jun 16, 2025
CVE-2025-30675: Exposure of Sensitive Information to an Unauthorized Actor4.7 MediumN/A0%Jun 11, 2025
CVE-2025-47849: Improper Privilege Management8.8 HighN/A0%Jun 10, 2025
CVE-2025-47713: Improper Privilege Management8.8 HighN/A0%Jun 10, 2025
CVE-2025-26521: Exposure of Sensitive Information to an Unauthorized Actor8.1 HighN/A0%Jun 10, 2025
CVE-2025-27819: Deserialization of Untrusted Data7.5 HighN/A1%Jun 10, 2025
CVE-2025-27818: Deserialization of Untrusted Data8.8 HighN/A0%Jun 10, 2025
CVE-2025-27817: Server-Side Request Forgery (SSRF)7.5 HighN/A18%Jun 10, 2025
CVE-2025-49127: Deserialization of Untrusted DataN/A8.9 High1%Jun 6, 2025
CVE-2025-27531: Deserialization of Untrusted Data9.8 CriticalN/A1%Jun 6, 2025
CVE-2025-48866: Excessive Platform Resource Consumption within a Loop7.5 HighN/A0%Jun 2, 2025
CVE-2025-48912: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%May 30, 2025
CVE-2025-46701: Improper Handling of Case Sensitivity7.3 HighN/A0%May 29, 2025
CVE-2025-48471: Unrestricted Upload of File with Dangerous Type9.8 Critical7.0 High1%May 29, 2025
CVE-2024-47056: Cleartext Storage of Sensitive Information5.1 MediumN/A0%May 28, 2025
CVE-2025-48734: Improper Access Control8.8 HighN/A0%May 28, 2025
CVE-2025-27528: Deserialization of Untrusted Data9.1 CriticalN/A0%May 28, 2025
CVE-2025-27526: Deserialization of Untrusted Data6.5 MediumN/A0%May 28, 2025
CVE-2025-27522: Deserialization of Untrusted Data6.5 MediumN/A0%May 28, 2025
CVE-2025-35003: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%May 26, 2025
CVE-2025-47947: Excessive Platform Resource Consumption within a Loop7.5 HighN/A0%May 21, 2025
1551-1575 of 4467
‹›