The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-38341: Use of Weak Hash5.9 MediumN/A0%May 28, 2025
CVE-2025-3357: Improper Validation of Specified Index, Position, or Offset in Input9.8 CriticalN/A0%May 28, 2025
CVE-2025-25029: Improper Encoding or Escaping of Output4.9 MediumN/A0%May 28, 2025
CVE-2025-25026: Incorrect Authorization4.3 MediumN/A0%May 28, 2025
CVE-2025-25025: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%May 28, 2025
CVE-2024-45094: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%May 27, 2025
CVE-2025-33079: Plaintext Storage of a Password6.5 MediumN/A0%May 27, 2025
CVE-2025-33138: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%May 22, 2025
CVE-2025-33137: Client-Side Enforcement of Server-Side Security7.1 HighN/A0%May 22, 2025
CVE-2025-33136: Modification of Assumed-Immutable Data (MAID)7.1 HighN/A0%May 22, 2025
CVE-2024-45641: Improper Certificate Validation6.5 MediumN/A0%May 20, 2025
CVE-2023-33861: Improper Certificate Validation6.5 MediumN/A0%May 20, 2025
CVE-2025-33103: Execution with Unnecessary Privileges8.5 HighN/A0%May 17, 2025
CVE-2024-51475: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%May 16, 2025
CVE-2025-1138: Exposure of Information Through Directory Listing4.3 MediumN/A0%May 15, 2025
CVE-2025-3440: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%May 15, 2025
CVE-2025-33104: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 14, 2025
CVE-2025-2900: Heap-based Buffer Overflow7.5 HighN/A0%May 14, 2025
CVE-2025-3632: Memory Allocation with Excessive Size Value7.5 HighN/A0%May 12, 2025
CVE-2025-1137: Execution with Unnecessary Privileges7.5 HighN/A0%May 10, 2025
CVE-2025-1993: Weak Password Requirements5.1 MediumN/A0%May 9, 2025
CVE-2025-1331: Use of Inherently Dangerous Function7.8 HighN/A0%May 8, 2025
CVE-2025-1330: Out-of-bounds Write7.8 HighN/A0%May 8, 2025
CVE-2025-1329: Out-of-bounds Write7.8 HighN/A0%May 8, 2025
CVE-2025-33093: Password in Configuration File7.5 HighN/A0%May 7, 2025
1901-1925 of 9776
‹›