The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36132: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 30, 2025
CVE-2025-36245: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 29, 2025
CVE-2025-36099: Allocation of Resources Without Limits or Throttling4.9 MediumN/A0%Sep 29, 2025
CVE-2025-36352: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 29, 2025
CVE-2025-36351: Improper Access Control4.3 MediumN/A0%Sep 29, 2025
CVE-2025-36239: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 27, 2025
CVE-2024-43192: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Sep 27, 2025
CVE-2025-36144: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 27, 2025
CVE-2025-36326: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Sep 26, 2025
CVE-2025-36274: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Sep 26, 2025
CVE-2025-33116: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Sep 25, 2025
CVE-2025-36064: Improper Restriction of Excessive Authentication Attempts5.9 MediumN/A0%Sep 22, 2025
CVE-2025-36202: Use of Externally-Controlled Format String7.5 HighN/A0%Sep 22, 2025
CVE-2025-36037: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Sep 22, 2025
CVE-2025-10768: Deserialization of Untrusted Data9.8 Critical2.1 Low0%Sep 21, 2025
CVE-2025-36248: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 19, 2025
CVE-2025-36146: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Sep 18, 2025
CVE-2025-36143: Improper Neutralization of Special Elements used in an OS Command4.7 MediumN/A0%Sep 18, 2025
CVE-2025-36139: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Sep 18, 2025
CVE-2023-53326: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2025-36244: External Initialization of Trusted Variables or Data Stores5.5 MediumN/A0%Sep 16, 2025
CVE-2025-57248: NULL Pointer Dereference7.3 HighN/A0%Sep 15, 2025
CVE-2025-36082: Use of Web Browser Cache Containing Sensitive Information4.0 MediumN/A0%Sep 15, 2025
CVE-2025-36035: Allocation of Resources Without Limits or Throttling6.7 MediumN/A0%Sep 14, 2025
CVE-2025-0164: Incorrect Permission Assignment for Critical Resource2.3 LowN/A0%Sep 14, 2025
1701-1725 of 9773
‹›