The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-31492: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High1%Apr 6, 2025
CVE-2024-53868: Inconsistent Interpretation of HTTP Requests7.5 HighN/A3%Apr 3, 2025
CVE-2025-30676: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A3%Apr 1, 2025
CVE-2025-30177: Improper Neutralization of Internal Special Elements6.5 MediumN/A1%Apr 1, 2025
CVE-2025-30065: Deserialization of Untrusted Data9.8 Critical10.0 Critical0%Apr 1, 2025
CVE-2025-29868: Private Data Structure Returned From A Public Method6.5 MediumN/A2%Apr 1, 2025
CVE-2025-27427: Incorrect Authorization4.3 Medium2.3 Low1%Apr 1, 2025
CVE-2025-3022: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical2%Mar 31, 2025
CVE-2025-30067: Improper Control of Generation of Code7.2 HighN/A0%Mar 27, 2025
CVE-2024-48944: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Mar 27, 2025
CVE-2024-53679: Improper Neutralization of Input During Web Page Generation5.4 Medium8.4 High0%Mar 25, 2025
CVE-2024-53678: Improper Neutralization of Special Elements used in an SQL Command8.8 High5.1 Medium0%Mar 25, 2025
CVE-2025-30474: Exposure of Sensitive Information to an Unauthorized Actor5.0 MediumN/A0%Mar 23, 2025
CVE-2025-27553: Relative Path Traversal7.5 HighN/A0%Mar 23, 2025
CVE-2025-26796: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 22, 2025
CVE-2025-27888: Server-Side Request Forgery (SSRF)5.4 Medium5.8 Medium1%Mar 20, 2025
CVE-2024-54016: Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumN/A0%Mar 20, 2025
CVE-2024-47552: Deserialization of Untrusted Data9.8 CriticalN/A0%Mar 20, 2025
CVE-2025-27018: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Mar 19, 2025
CVE-2024-8510: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Mar 17, 2025
CVE-2025-27017: Insertion of Sensitive Information into Externally-Accessible File or Directory6.5 Medium6.9 Medium0%Mar 12, 2025
CVE-2025-27867: Improper Neutralization of Input During Web Page Generation5.6 MediumN/A0%Mar 12, 2025
CVE-2025-2240: Improperly Controlled Sequential Memory Allocation7.5 HighN/A0%Mar 12, 2025
CVE-2025-29891: Improper Neutralization of Internal Special Elements4.8 MediumN/A0%Mar 12, 2025
CVE-2025-24813: Path Equivalence: 'file.name' (Internal Dot)9.8 CriticalN/A94%Mar 10, 2025
1601-1625 of 4467
‹›