The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-47436: Heap-based Buffer Overflow9.8 Critical6.0 Medium0%May 14, 2025
CVE-2025-26864: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%May 14, 2025
CVE-2025-26795: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%May 14, 2025
CVE-2024-24780: Improper Control of Generation of Code9.8 CriticalN/A1%May 14, 2025
CVE-2025-30207: Improper Limitation of a Pathname to a Restricted Directory7.5 High2.3 Low0%May 13, 2025
CVE-2025-27696: Incorrect Authorization8.8 High5.3 Medium0%May 13, 2025
CVE-2025-4529: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%May 11, 2025
CVE-2025-46392: Uncontrolled Resource Consumption6.5 MediumN/A0%May 9, 2025
CVE-2025-27533: Memory Allocation with Excessive Size Value7.5 High6.9 Medium1%May 7, 2025
CVE-2025-46762: External Control of File Name or Path8.1 High7.1 High0%May 6, 2025
CVE-2025-3891: Uncaught Exception7.5 HighN/A1%Apr 29, 2025
CVE-2025-31651: Improper Encoding or Escaping of Output9.8 CriticalN/A0%Apr 28, 2025
CVE-2025-31650: Incomplete Cleanup7.5 HighN/A8%Apr 28, 2025
CVE-2025-4000: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Apr 28, 2025
CVE-2025-3999: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Apr 28, 2025
CVE-2025-27820: Improper Certificate Validation7.5 HighN/A0%Apr 24, 2025
CVE-2025-26413: Improper Input Validation7.5 HighN/A0%Apr 22, 2025
CVE-2025-29953: Deserialization of Untrusted Data9.8 CriticalN/A0%Apr 18, 2025
CVE-2025-3790: Improper Access Control5.3 Medium6.9 Medium0%Apr 18, 2025
CVE-2024-56736: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Apr 16, 2025
CVE-2025-24859: Insufficient Session Expiration8.8 High2.1 Low0%Apr 14, 2025
CVE-2025-27391: Insertion of Sensitive Information into Log File6.5 Medium6.8 Medium0%Apr 9, 2025
CVE-2025-31672: Improper Input Validation5.3 MediumN/A1%Apr 9, 2025
CVE-2025-30677: Insertion of Sensitive Information into Log File6.5 Medium6.3 Medium0%Apr 9, 2025
CVE-2025-30473: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Apr 7, 2025
1576-1600 of 4467
‹›