The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-49827: Exposure of Sensitive Information Due to Incompatible Policies3.7 LowN/A0%Aug 18, 2025
CVE-2025-36088: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 15, 2025
CVE-2025-36047: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Aug 14, 2025
CVE-2025-33142: Improper Certificate Validation5.3 MediumN/A0%Aug 14, 2025
CVE-2025-36000: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Aug 12, 2025
CVE-2025-36124: Privilege Chaining5.9 MediumN/A0%Aug 12, 2025
CVE-2025-36119: Authentication Bypass by Spoofing7.1 HighN/A0%Aug 8, 2025
CVE-2025-36023: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 8, 2025
CVE-2024-56339: Trusting HTTP Permission Methods on the Server Side3.7 LowN/A0%Aug 7, 2025
CVE-2025-36020: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Aug 6, 2025
CVE-2025-3354: Heap-based Buffer Overflow8.1 HighN/A0%Aug 6, 2025
CVE-2025-3320: Heap-based Buffer Overflow8.1 HighN/A0%Aug 6, 2025
CVE-2024-52890: Improper Neutralization of Encoded URI Schemes in a Web Page6.1 MediumN/A0%Aug 5, 2025
CVE-2025-33118: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 1, 2025
CVE-2025-2824: URL Redirection to Untrusted Site7.4 HighN/A0%Aug 1, 2025
CVE-2025-36040: Insufficient Session Expiration6.5 MediumN/A0%Jul 31, 2025
CVE-2025-36039: Client-Side Enforcement of Server-Side Security6.5 MediumN/A0%Jul 31, 2025
CVE-2025-36071: Missing Release of Resource after Effective Lifetime6.5 MediumN/A0%Jul 29, 2025
CVE-2025-33114: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A0%Jul 29, 2025
CVE-2025-33092: Stack-based Buffer Overflow7.8 HighN/A0%Jul 29, 2025
CVE-2024-52894: Stack-based Buffer Overflow4.9 MediumN/A0%Jul 29, 2025
CVE-2024-51473: Stack-based Buffer Overflow6.5 MediumN/A0%Jul 29, 2025
CVE-2024-49828: Stack-based Buffer Overflow6.5 MediumN/A0%Jul 29, 2025
CVE-2025-36010: Deadlock6.5 MediumN/A0%Jul 29, 2025
CVE-2025-2533: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Jul 29, 2025
1776-1800 of 9776
‹›