The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-50951: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47914: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2021-47908: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 1, 2026
CVE-2026-25156: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Jan 30, 2026
CVE-2020-37052: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Jan 30, 2026
CVE-2020-37044: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jan 30, 2026
CVE-2026-25141: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Jan 30, 2026
CVE-2026-1691: Deserialization of Untrusted Data6.3 Medium2.1 Low1%Jan 30, 2026
CVE-2020-36966: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 30, 2026
CVE-2020-37019: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 30, 2026
CVE-2020-36998: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 30, 2026
CVE-2020-36996: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 30, 2026
CVE-2026-25117: Improper Input ValidationN/A8.3 High1%Jan 29, 2026
CVE-2025-15549: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Jan 29, 2026
CVE-2020-37018: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 29, 2026
CVE-2026-1469: Improper Neutralization of Input During Web Page Generation5.4 Medium6.9 Medium0%Jan 29, 2026
CVE-2026-24769: Improper Neutralization of Input During Web Page Generation9.0 Critical8.5 High0%Jan 28, 2026
CVE-2023-37525: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Jan 28, 2026
CVE-2020-36993: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jan 28, 2026
CVE-2020-36988: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jan 28, 2026
CVE-2026-0483: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jan 28, 2026
CVE-2026-1466: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 28, 2026
CVE-2026-1513: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 28, 2026
CVE-2026-23830: Improper Control of Generation of Code10.0 CriticalN/A1%Jan 28, 2026
CVE-2026-24778: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Jan 27, 2026
4026-4050 of 16518
‹›