The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-1950: Process Control9.3 CriticalN/A0%Apr 22, 2025
CVE-2025-2987: Server-Side Request Forgery (SSRF)3.8 LowN/A0%Apr 22, 2025
CVE-2025-2950: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Apr 18, 2025
CVE-2024-49808: Incorrect Authorization6.3 MediumN/A0%Apr 18, 2025
CVE-2024-45651: Insufficient Session Expiration6.3 MediumN/A0%Apr 18, 2025
CVE-2025-2947: Insecure Preserved Inherited Permissions7.2 HighN/A0%Apr 17, 2025
CVE-2024-22314: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Apr 16, 2025
CVE-2025-22104: Out-of-bounds Read7.1 HighN/A0%Apr 16, 2025
CVE-2025-22053: Improper Locking5.5 MediumN/A0%Apr 16, 2025
CVE-2023-27272: Weak Password Requirements3.1 LowN/A0%Apr 14, 2025
CVE-2022-43852: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Apr 14, 2025
CVE-2022-43851: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Apr 14, 2025
CVE-2022-43850: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 14, 2025
CVE-2022-43847: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Apr 14, 2025
CVE-2022-43840: Improper Neutralization of Data within XPath Expressions4.3 MediumN/A0%Apr 14, 2025
CVE-2024-49825: Insufficient Session Expiration6.3 MediumN/A0%Apr 14, 2025
CVE-2025-3423: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 13, 2025
CVE-2024-51461: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Apr 11, 2025
CVE-2023-43037: Improper Input Validation6.5 MediumN/A0%Apr 10, 2025
CVE-2023-43035: Use of Web Browser Cache Containing Sensitive Information4.0 MediumN/A0%Apr 10, 2025
CVE-2023-42007: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 10, 2025
CVE-2025-25023: Incorrect Privilege Assignment4.9 MediumN/A0%Apr 9, 2025
CVE-2023-33844: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 9, 2025
CVE-2025-1095: Unprotected Alternate Channel8.8 HighN/A0%Apr 8, 2025
CVE-2025-1500: Unrestricted Upload of File with Dangerous Type5.5 MediumN/A0%Apr 5, 2025
1951-1975 of 9776
‹›