The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-49343: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Jul 28, 2025
CVE-2024-49342: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Jul 28, 2025
CVE-2025-38359: Improper Locking5.5 MediumN/A0%Jul 25, 2025
CVE-2025-36005: Improper Certificate Validation5.9 MediumN/A0%Jul 24, 2025
CVE-2025-33109: Execution with Unnecessary Privileges7.5 HighN/A0%Jul 24, 2025
CVE-2025-33013: Improper Clearing of Heap Memory Before Release6.2 MediumN/A0%Jul 24, 2025
CVE-2025-36117: Session Fixation6.3 MediumN/A0%Jul 23, 2025
CVE-2025-36116: Missing Origin Validation in WebSockets6.3 MediumN/A0%Jul 23, 2025
CVE-2025-33077: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Jul 23, 2025
CVE-2025-33076: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Jul 23, 2025
CVE-2025-33020: Missing Encryption of Sensitive Data5.9 MediumN/A0%Jul 23, 2025
CVE-2024-41751: Client-Side Enforcement of Server-Side Security5.5 MediumN/A0%Jul 23, 2025
CVE-2024-41750: Client-Side Enforcement of Server-Side Security5.5 MediumN/A0%Jul 23, 2025
CVE-2024-40686: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Jul 23, 2025
CVE-2024-40682: Improper Validation of Specified Type of Input6.2 MediumN/A0%Jul 23, 2025
CVE-2024-38335: Allocation of Resources Without Limits or Throttling4.5 MediumN/A0%Jul 22, 2025
CVE-2025-36106: Inadequate Encryption Strength6.5 MediumN/A0%Jul 21, 2025
CVE-2025-36062: Missing Encryption of Sensitive Data5.9 MediumN/A0%Jul 21, 2025
CVE-2025-36057: Improper Check for Certificate Revocation5.2 MediumN/A0%Jul 21, 2025
CVE-2025-36107: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Jul 21, 2025
CVE-2025-33014: Use of Web Link to Untrusted Target with window.opener Access5.4 MediumN/A0%Jul 18, 2025
CVE-2025-36097: Stack-based Buffer Overflow7.5 HighN/A0%Jul 16, 2025
CVE-2025-33097: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 15, 2025
CVE-2025-36104: Insecure Inherited Permissions6.5 MediumN/A0%Jul 12, 2025
CVE-2025-3631: Use After Free6.5 MediumN/A0%Jul 11, 2025
1801-1825 of 9776
‹›