The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-33084: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 1, 2025
CVE-2025-33083: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 1, 2025
CVE-2025-33082: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 1, 2025
CVE-2025-0656: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 1, 2025
CVE-2025-36133: Insertion of Sensitive Information into Log File5.9 MediumN/A0%Sep 1, 2025
CVE-2025-0165: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 30, 2025
CVE-2024-49790: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 28, 2025
CVE-2025-36003: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Aug 28, 2025
CVE-2025-2697: URL Redirection to Untrusted Site7.4 HighN/A0%Aug 26, 2025
CVE-2025-1994: Use of Inherently Dangerous Function7.8 HighN/A0%Aug 26, 2025
CVE-2025-1494: Improper Restriction of Rendered UI Layers or Frames6.1 MediumN/A0%Aug 26, 2025
CVE-2025-36174: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Aug 24, 2025
CVE-2025-36157: Incorrect Authorization9.8 CriticalN/A0%Aug 24, 2025
CVE-2025-36042: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 22, 2025
CVE-2025-33120: Execution with Unnecessary Privileges7.8 HighN/A0%Aug 22, 2025
CVE-2025-36114: Improper Input Validation6.5 MediumN/A0%Aug 20, 2025
CVE-2025-1142: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Aug 20, 2025
CVE-2025-1139: Incorrect Permission Assignment for Critical Resource6.1 MediumN/A0%Aug 20, 2025
CVE-2025-2988: Exposure of Sensitive System Information to an Unauthorized Control Sphere2.7 LowN/A0%Aug 19, 2025
CVE-2025-33008: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2025
CVE-2025-36120: Incorrect Authorization8.8 HighN/A0%Aug 18, 2025
CVE-2025-33100: Use of Hard-coded Credentials6.2 MediumN/A0%Aug 18, 2025
CVE-2025-33090: Inefficient Regular Expression Complexity7.5 HighN/A0%Aug 18, 2025
CVE-2025-27909: Permissive Cross-domain Policy with Untrusted Domains5.4 MediumN/A0%Aug 18, 2025
CVE-2025-1759: Improper Clearing of Heap Memory Before Release5.9 MediumN/A0%Aug 18, 2025
1751-1775 of 9776
‹›