The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-15134: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 28, 2025
CVE-2025-15117: Deserialization of Untrusted Data3.1 Low2.3 Low0%Dec 28, 2025
CVE-2025-15109: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Dec 27, 2025
CVE-2025-66203: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A1%Dec 27, 2025
CVE-2025-68697: Improper Privilege Management5.4 MediumN/A0%Dec 26, 2025
CVE-2025-61914: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 26, 2025
CVE-2025-13158: Improperly Controlled Modification of Object Prototype AttributesN/A9.3 Critical1%Dec 26, 2025
CVE-2025-68946: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 26, 2025
CVE-2025-15094: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 26, 2025
CVE-2025-15093: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 26, 2025
CVE-2025-15087: Improper Authorization4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15086: Improper Access Control4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15085: Improper Authorization8.1 High2.1 Low0%Dec 25, 2025
CVE-2025-15084: Improper Access Control3.1 Low1.3 Low0%Dec 25, 2025
CVE-2019-25235: Authorization Bypass Through User-Controlled Key9.8 Critical8.8 High0%Dec 24, 2025
CVE-2018-25131: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Dec 24, 2025
CVE-2024-58335: Improper Restriction of XML External Entity Reference5.0 MediumN/A0%Dec 24, 2025
CVE-2021-47738: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 23, 2025
CVE-2021-47733: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 23, 2025
CVE-2021-47732: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 23, 2025
CVE-2021-47716: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 23, 2025
CVE-2024-57521: Improper Neutralization of Special Elements used in an SQL Command10.0 CriticalN/A1%Dec 23, 2025
CVE-2025-66845: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 23, 2025
CVE-2023-53978: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 22, 2025
CVE-2023-53977: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 22, 2025
4301-4325 of 16522
‹›