The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-26304: Improper Clearing of Heap Memory Before Release8.2 HighN/A0%Feb 20, 2025
CVE-2025-0161: Improper Control of Generation of Code7.8 HighN/A0%Feb 20, 2025
CVE-2024-49781: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Feb 20, 2025
CVE-2024-49779: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Feb 20, 2025
CVE-2024-49344: Session Fixation4.3 MediumN/A0%Feb 20, 2025
CVE-2024-49337: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Feb 20, 2025
CVE-2024-49782: Improper Validation of Certificate with Host Mismatch6.8 MediumN/A0%Feb 20, 2025
CVE-2024-49780: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Feb 20, 2025
CVE-2024-49355: Improper Output Neutralization for Logs5.3 MediumN/A0%Feb 20, 2025
CVE-2024-43196: Improper Following of a Certificate's Chain of Trust4.3 MediumN/A0%Feb 20, 2025
CVE-2023-47160: Improper Restriction of XML External Entity Reference8.2 HighN/A0%Feb 19, 2025
CVE-2024-45084: Improper Neutralization of Formula Elements in a CSV File8.0 HighN/A0%Feb 19, 2025
CVE-2024-45081: Incorrect Authorization6.5 MediumN/A0%Feb 19, 2025
CVE-2024-28780: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 19, 2025
CVE-2024-28777: Deserialization of Untrusted Data8.8 HighN/A1%Feb 19, 2025
CVE-2024-28776: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 19, 2025
CVE-2024-52902: Use of Hard-coded Credentials8.8 HighN/A0%Feb 19, 2025
CVE-2024-56463: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 14, 2025
CVE-2024-56477: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Feb 14, 2025
CVE-2024-52895: Improper Check for Unusual or Exceptional Conditions6.5 MediumN/A0%Feb 14, 2025
CVE-2024-55904: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A0%Feb 14, 2025
CVE-2024-54176: Missing Authentication for Critical Function4.3 MediumN/A0%Feb 8, 2025
CVE-2025-0158: Uncaught Exception5.5 MediumN/A0%Feb 6, 2025
CVE-2024-56467: Generation of Error Message Containing Sensitive Information3.3 LowN/A0%Feb 6, 2025
CVE-2024-54171: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Feb 6, 2025
2076-2100 of 9776
‹›