The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36140: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Dec 8, 2025
CVE-2025-64650: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Dec 8, 2025
CVE-2025-36102: Client-Side Enforcement of Server-Side Security2.7 LowN/A0%Dec 8, 2025
CVE-2025-36017: Cleartext Storage of Sensitive Information in an Environment Variable6.5 MediumN/A0%Dec 8, 2025
CVE-2025-36015: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Dec 8, 2025
CVE-2025-33111: Creation of Temporary File in Directory with Insecure Permissions4.3 MediumN/A0%Dec 8, 2025
CVE-2025-12832: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Dec 8, 2025
CVE-2025-12635: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 8, 2025
CVE-2024-45675: Use of Password System for Primary Authentication7.8 HighN/A0%Dec 2, 2025
CVE-2025-36134: Sensitive Cookie with Improper SameSite Attribute7.5 HighN/A0%Nov 25, 2025
CVE-2025-36150: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A0%Nov 24, 2025
CVE-2025-36112: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Nov 24, 2025
CVE-2025-12740: Improper Input ValidationN/A7.7 High0%Nov 24, 2025
CVE-2025-36149: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Nov 21, 2025
CVE-2025-36072: Deserialization of Untrusted Data8.8 HighN/A0%Nov 20, 2025
CVE-2025-36160: Exposure of Sensitive System Information to an Unauthorized Control Sphere7.5 HighN/A0%Nov 20, 2025
CVE-2025-36159: Improper Output Neutralization for Logs5.5 MediumN/A0%Nov 20, 2025
CVE-2025-36158: Uncontrolled Recursion5.5 MediumN/A0%Nov 20, 2025
CVE-2025-36153: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 20, 2025
CVE-2025-36161: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Nov 20, 2025
CVE-2025-36371: Use of GET Request Method With Sensitive Query Strings6.5 MediumN/A0%Nov 19, 2025
CVE-2025-36118: Improper Clearing of Heap Memory Before Release7.5 HighN/A0%Nov 17, 2025
CVE-2025-36357: Absolute Path Traversal8.0 HighN/A0%Nov 17, 2025
CVE-2025-36299: Inclusion of Sensitive Information in Source Code4.3 MediumN/A0%Nov 17, 2025
CVE-2025-36251: Process Control9.8 CriticalN/A0%Nov 13, 2025
1601-1625 of 9773
‹›