The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-0164: Incorrect Permission Assignment for Critical Resource2.3 LowN/A0%Sep 14, 2025
CVE-2025-36222: Initialization of a Resource with an Insecure Default9.8 CriticalN/A0%Sep 11, 2025
CVE-2025-39785: Use After Free5.5 MediumN/A0%Sep 11, 2025
CVE-2025-39776: Use After Free7.8 HighN/A0%Sep 11, 2025
CVE-2025-39772: NULL Pointer Dereference5.5 MediumN/A0%Sep 11, 2025
CVE-2024-47120: Execution with Unnecessary Privileges6.4 MediumN/A0%Sep 10, 2025
CVE-2024-45671: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 10, 2025
CVE-2024-45669: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 10, 2025
CVE-2025-36125: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 9, 2025
CVE-2025-36011: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Sep 9, 2025
CVE-2025-42958: Execution with Unnecessary Privileges9.1 CriticalN/A0%Sep 9, 2025
CVE-2025-1761: Access of Uninitialized Pointer7.5 HighN/A0%Sep 8, 2025
CVE-2025-36100: Password in Configuration File5.1 MediumN/A0%Sep 7, 2025
CVE-2025-38720: Improper Locking5.5 MediumN/A0%Sep 4, 2025
CVE-2025-38719: Divide By Zero5.5 MediumN/A0%Sep 4, 2025
CVE-2025-2694: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 4, 2025
CVE-2025-2667: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.9 MediumN/A0%Sep 4, 2025
CVE-2025-25048: Relative Path Traversal6.5 MediumN/A0%Sep 4, 2025
CVE-2024-43184: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 4, 2025
CVE-2025-36193: Incorrect Permission Assignment for Critical Resource8.4 HighN/A0%Sep 3, 2025
CVE-2025-36162: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Sep 2, 2025
CVE-2025-33102: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 1, 2025
CVE-2025-33099: Improper Certificate Validation5.9 MediumN/A0%Sep 1, 2025
CVE-2025-33084: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 1, 2025
CVE-2025-33083: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 1, 2025
1726-1750 of 9774
‹›