The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-0154: Improper Neutralization of HTTP Headers for Scripting Syntax5.3 MediumN/A0%Apr 2, 2025
CVE-2024-56476: Observable Response Discrepancy5.3 MediumN/A0%Apr 2, 2025
CVE-2024-56475: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 2, 2025
CVE-2024-56474: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Apr 2, 2025
CVE-2024-56341: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 2, 2025
CVE-2024-25051: Insufficient Session Expiration6.6 MediumN/A0%Apr 2, 2025
CVE-2025-30224: Exposure of Sensitive Information to an Unauthorized ActorN/A5.1 Medium1%Apr 1, 2025
CVE-2025-2955: Improper Access Control5.3 Medium6.9 Medium0%Mar 30, 2025
CVE-2024-55895: Generation of Error Message Containing Sensitive Information2.7 LowN/A0%Mar 29, 2025
CVE-2024-7577: Insertion of Sensitive Information into Log File4.4 MediumN/A0%Mar 29, 2025
CVE-2024-51477: Observable Discrepancy4.3 MediumN/A0%Mar 29, 2025
CVE-2024-43186: Plaintext Storage of a Password5.3 MediumN/A0%Mar 29, 2025
CVE-2025-0986: Improper Handling of Highly Compressed Data (Data Amplification)4.5 MediumN/A0%Mar 28, 2025
CVE-2023-38272: Channel Accessible by Non-Endpoint5.9 MediumN/A0%Mar 27, 2025
CVE-2023-37405: Missing Encryption of Sensitive Data6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29497: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29496: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29494: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29493: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29492: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29491: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29490: Uncontrolled Resource Consumption6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29489: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29488: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29487: Uncontrolled Resource Consumption7.5 HighN/A0%Mar 27, 2025
1976-2000 of 9776