The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-0162: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 7, 2025
CVE-2023-43052: Improper Interaction Between Multiple Correctly-Behaving Entities5.3 MediumN/A0%Mar 7, 2025
CVE-2023-35894: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Mar 7, 2025
CVE-2024-51476: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Mar 6, 2025
CVE-2024-43169: Download of Code Without Integrity Check8.8 HighN/A0%Mar 3, 2025
CVE-2024-41771: Insufficiently Protected Credentials7.5 HighN/A0%Mar 3, 2025
CVE-2024-41770: Insufficiently Protected Credentials7.5 HighN/A0%Mar 3, 2025
CVE-2024-54179: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 3, 2025
CVE-2025-0895: Insertion of Sensitive Information Into Debugging Code2.4 LowN/A0%Mar 2, 2025
CVE-2024-55907: Inclusion of Sensitive Information in Source Code2.0 LowN/A0%Mar 2, 2025
CVE-2024-41778: Weak Password Requirements5.3 MediumN/A0%Mar 1, 2025
CVE-2025-0160: Process Control8.1 HighN/A0%Feb 28, 2025
CVE-2025-0159: Authentication Bypass Using an Alternate Path or Channel9.1 CriticalN/A0%Feb 28, 2025
CVE-2025-0985: Cleartext Storage of Sensitive Information in an Environment Variable5.5 MediumN/A0%Feb 28, 2025
CVE-2024-54175: Improper Check for Unusual or Exceptional Conditions5.5 MediumN/A0%Feb 28, 2025
CVE-2025-23225: Improper Handling of Missing Values6.5 MediumN/A0%Feb 28, 2025
CVE-2025-0975: Improper Neutralization of Escape, Meta, or Control Sequences8.8 HighN/A0%Feb 28, 2025
CVE-2025-0823: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Feb 28, 2025
CVE-2024-56340: Relative Path Traversal6.5 MediumN/A2%Feb 28, 2025
CVE-2024-54173: Improper Management of Sensitive Trace Data4.7 MediumN/A0%Feb 28, 2025
CVE-2025-0759: Time-of-check Time-of-use (TOCTOU) Race Condition3.3 LowN/A0%Feb 27, 2025
CVE-2024-56812: Generation of Error Message Containing Sensitive Information3.3 LowN/A0%Feb 27, 2025
CVE-2024-56811: Generation of Error Message Containing Sensitive Information3.3 LowN/A0%Feb 27, 2025
CVE-2024-56810: Generation of Error Message Containing Sensitive Information3.3 LowN/A0%Feb 27, 2025
CVE-2024-56496: Generation of Error Message Containing Sensitive Information3.3 LowN/A0%Feb 27, 2025
2026-2050 of 9776
‹›