The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36090: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jul 10, 2025
CVE-2024-39752: Unrestricted Upload of File with Dangerous Type6.8 MediumN/A0%Jul 10, 2025
CVE-2024-38327: Inclusion of Sensitive Information in Source Code6.8 MediumN/A0%Jul 10, 2025
CVE-2024-37524: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jul 10, 2025
CVE-2025-53663: Missing Encryption of Sensitive Data6.5 MediumN/A0%Jul 9, 2025
CVE-2025-2670: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Jul 9, 2025
CVE-2025-1112: Improper Ownership Management4.3 MediumN/A0%Jul 9, 2025
CVE-2024-56468: Stack-based Buffer Overflow7.5 HighN/A0%Jul 8, 2025
CVE-2025-27369: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Jul 8, 2025
CVE-2025-27367: Client-Side Enforcement of Server-Side Security5.3 MediumN/A0%Jul 8, 2025
CVE-2024-49784: Use of a Broken or Risky Cryptographic Algorithm5.3 MediumN/A0%Jul 8, 2025
CVE-2024-49783: Generation of Predictable IV with CBC Mode5.3 MediumN/A0%Jul 8, 2025
CVE-2023-43039: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 8, 2025
CVE-2025-3630: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 8, 2025
CVE-2025-2827: Exposure of Information Through Directory Listing4.3 MediumN/A0%Jul 8, 2025
CVE-2025-2793: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 8, 2025
CVE-2024-43190: Weak Password Recovery Mechanism for Forgotten Password5.9 MediumN/A0%Jul 7, 2025
CVE-2025-36014: Improper Control of Generation of Code8.2 HighN/A0%Jul 7, 2025
CVE-2025-1351: Concurrent Execution using Shared Resource with Improper Synchronization6.7 MediumN/A0%Jul 7, 2025
CVE-2025-36056: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 1, 2025
CVE-2025-2141: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 1, 2025
CVE-2025-2895: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Jun 30, 2025
CVE-2025-1991: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Jun 28, 2025
CVE-2025-36027: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Jun 28, 2025
CVE-2025-36026: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Jun 28, 2025
1826-1850 of 9776
‹›