The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36250: Process Control9.8 CriticalN/A0%Nov 13, 2025
CVE-2025-36236: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Nov 13, 2025
CVE-2025-36096: Insufficiently Protected Credentials8.1 HighN/A0%Nov 13, 2025
CVE-2025-33119: Password in Configuration File6.5 MediumN/A0%Nov 12, 2025
CVE-2025-36223: Improper Neutralization of HTTP Headers for Scripting Syntax6.1 MediumN/A0%Nov 12, 2025
CVE-2025-27368: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 12, 2025
CVE-2025-40163: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-40146: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-33150: Files or Directories Accessible to External Parties5.3 MediumN/A0%Nov 10, 2025
CVE-2025-62689: Heap-based Buffer Overflow7.5 High8.7 High0%Nov 10, 2025
CVE-2025-59777: NULL Pointer Dereference7.5 High8.7 High0%Nov 10, 2025
CVE-2025-36186: Execution with Unnecessary Privileges7.8 HighN/A0%Nov 7, 2025
CVE-2025-36185: Improper Neutralization of Special Elements in Data Query Logic5.5 MediumN/A0%Nov 7, 2025
CVE-2025-36136: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Nov 7, 2025
CVE-2025-36135: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 7, 2025
CVE-2025-36131: Exposure of Private Personal Information to an Unauthorized Actor4.6 MediumN/A0%Nov 7, 2025
CVE-2025-36008: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 7, 2025
CVE-2025-36006: Improper Resource Shutdown or Release6.5 MediumN/A0%Nov 7, 2025
CVE-2025-33012: Use of a Key Past its Expiration Date8.8 HighN/A0%Nov 7, 2025
CVE-2025-2534: Memory Allocation with Excessive Size Value7.5 HighN/A0%Nov 7, 2025
CVE-2024-47118: Stack-based Buffer Overflow7.5 HighN/A0%Nov 7, 2025
CVE-2025-33110: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Nov 6, 2025
CVE-2025-36054: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 6, 2025
CVE-2025-36172: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 3, 2025
CVE-2025-12531: Improper Restriction of XML External Entity Reference9.1 CriticalN/A0%Nov 3, 2025
1626-1650 of 9773
‹›