The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-53898: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
CVE-2023-53897: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
CVE-2023-53895: Improper Authorization9.8 Critical9.3 Critical1%Dec 16, 2025
CVE-2025-67744: Improper Control of Generation of Code9.6 CriticalN/A1%Dec 16, 2025
CVE-2023-53891: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 15, 2025
CVE-2023-53890: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 15, 2025
CVE-2023-53888: Improper Control of Generation of Code8.8 High8.6 High1%Dec 15, 2025
CVE-2023-53887: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 15, 2025
CVE-2023-53884: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 15, 2025
CVE-2023-53882: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Dec 15, 2025
CVE-2023-53880: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Dec 15, 2025
CVE-2023-53876: Unrestricted Upload of File with Dangerous Type5.4 Medium5.1 Medium0%Dec 15, 2025
CVE-2023-53870: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Dec 15, 2025
CVE-2025-66843: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 15, 2025
CVE-2025-14021: User Interface (UI) Misrepresentation of Critical Information4.3 MediumN/A0%Dec 15, 2025
CVE-2025-14674: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.3 Medium5.3 Medium0%Dec 14, 2025
CVE-2025-36750: Improper Neutralization of Input During Web Page Generation5.4 Medium8.6 High0%Dec 13, 2025
CVE-2025-36748: Improper Neutralization of Input During Web Page Generation5.4 Medium8.4 High0%Dec 13, 2025
CVE-2025-14278: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 13, 2025
CVE-2025-67721: Insertion of Sensitive Information Into Sent Data7.5 High6.3 Medium1%Dec 12, 2025
CVE-2025-67750: Improper Control of Generation of Code8.4 HighN/A0%Dec 12, 2025
CVE-2025-67634: Improper Neutralization of Input During Web Page Generation6.1 Medium4.6 Medium0%Dec 12, 2025
CVE-2025-8083: Improperly Controlled Modification of Object Prototype Attributes8.6 HighN/A0%Dec 12, 2025
CVE-2025-67734: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 12, 2025
CVE-2024-58305: Improper Neutralization of Input During Web Page Generation8.8 High8.6 High0%Dec 12, 2025
4376-4400 of 16522
‹›