The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-29486: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29485: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Mar 27, 2025
CVE-2025-29484: Uncontrolled Resource Consumption7.5 HighN/A0%Mar 27, 2025
CVE-2025-29483: Missing Release of Memory after Effective Lifetime6.5 MediumN/A0%Mar 27, 2025
CVE-2025-1998: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Mar 27, 2025
CVE-2025-1997: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Mar 27, 2025
CVE-2024-56469: Missing Authentication for Critical Function6.3 MediumN/A0%Mar 27, 2025
CVE-2022-39163: Inconsistent Interpretation of HTTP Requests4.7 MediumN/A0%Mar 26, 2025
CVE-2024-31896: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Mar 25, 2025
CVE-2023-43029: Cleartext Storage of Sensitive Information in an Environment Variable6.8 MediumN/A0%Mar 21, 2025
CVE-2024-51459: Improper Handling of Insufficient Permissions or Privileges8.4 HighN/A0%Mar 19, 2025
CVE-2024-45644: Unrestricted Upload of File with Dangerous Type4.7 MediumN/A0%Mar 19, 2025
CVE-2024-56347: Process Control9.6 CriticalN/A0%Mar 18, 2025
CVE-2024-56346: Process Control10.0 CriticalN/A0%Mar 18, 2025
CVE-2024-49822: Server-Side Request Forgery (SSRF)4.1 MediumN/A0%Mar 18, 2025
CVE-2024-45643: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Mar 14, 2025
CVE-2024-45638: Plaintext Storage of a Password4.1 MediumN/A0%Mar 14, 2025
CVE-2024-52362: Improper Validation of Syntactic Correctness of Input4.3 MediumN/A0%Mar 12, 2025
CVE-2025-21855: Use After Free8.6 HighN/A0%Mar 12, 2025
CVE-2024-56338: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 11, 2025
CVE-2024-49823: Out-of-bounds Write6.5 MediumN/A0%Mar 11, 2025
CVE-2024-41760: Observable Discrepancy3.7 LowN/A0%Mar 11, 2025
CVE-2024-22340: Observable Timing Discrepancy6.5 MediumN/A0%Mar 11, 2025
CVE-2024-52905: Exposure of Sensitive System Information to an Unauthorized Control Sphere2.7 LowN/A0%Mar 10, 2025
CVE-2024-47109: Insufficiently Protected Credentials5.3 MediumN/A0%Mar 10, 2025
2001-2025 of 9776
‹›