The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-66877: Stack-based Buffer Overflow7.5 HighN/A0%Dec 29, 2025
CVE-2025-66869: Heap-based Buffer Overflow7.5 HighN/A0%Dec 29, 2025
CVE-2025-64645: Time-of-check Time-of-use (TOCTOU) Race Condition7.4 HighN/A0%Dec 26, 2025
CVE-2025-36230: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Dec 26, 2025
CVE-2025-36229: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Dec 26, 2025
CVE-2025-36228: Incorrect Execution-Assigned Permissions3.8 LowN/A0%Dec 26, 2025
CVE-2025-36192: Missing Authorization7.1 HighN/A0%Dec 26, 2025
CVE-2025-14687: Client-Side Enforcement of Server-Side Security6.5 MediumN/A0%Dec 26, 2025
CVE-2025-13915: Authentication Bypass by Primary Weakness9.8 CriticalN/A1%Dec 26, 2025
CVE-2025-1721: Improper Clearing of Heap Memory Before Release7.5 HighN/A0%Dec 26, 2025
CVE-2025-12771: Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 HighN/A0%Dec 26, 2025
CVE-2025-36154: Cleartext Storage in a File or on Disk6.2 MediumN/A0%Dec 24, 2025
CVE-2023-54095: Undefined Security Weakness7.0 HighN/A0%Dec 24, 2025
CVE-2023-54017: Undefined Security WeaknessN/AN/A0%Dec 24, 2025
CVE-2025-36360: Insufficient Session Expiration5.0 MediumN/A0%Dec 15, 2025
CVE-2025-14148: Insufficiently Protected Credentials6.5 MediumN/A0%Dec 15, 2025
CVE-2025-13489: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Dec 15, 2025
CVE-2025-14549: Out-of-bounds Read8.1 High6.9 Medium0%Dec 15, 2025
CVE-2025-13481: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-13214: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-13211: Improper Control of Interaction Frequency6.5 MediumN/A0%Dec 11, 2025
CVE-2025-13148: Unverified Password Change6.5 MediumN/A0%Dec 11, 2025
CVE-2025-36437: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Dec 9, 2025
CVE-2024-56464: Exposure of Information Through Directory Listing2.7 LowN/A0%Dec 9, 2025
CVE-2023-53859: Undefined Security WeaknessN/AN/A0%Dec 9, 2025
1576-1600 of 9773
‹›