The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-67730: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 12, 2025
CVE-2025-13989: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13866: Missing Authorization6.4 MediumN/A0%Dec 12, 2025
CVE-2025-66452: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 11, 2025
CVE-2024-58297: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Dec 11, 2025
CVE-2024-58296: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 11, 2025
CVE-2024-58292: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 11, 2025
CVE-2024-58291: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 11, 2025
CVE-2024-58289: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Dec 11, 2025
CVE-2024-58304: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 11, 2025
CVE-2025-14538: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 11, 2025
CVE-2025-36889: Unintended Proxy or Intermediary5.5 MediumN/A0%Dec 11, 2025
CVE-2025-14531: Improper Neutralization of CRLF Sequences4.3 Medium2.1 Low0%Dec 11, 2025
CVE-2025-59803: Improper Verification of Cryptographic Signature5.3 MediumN/A0%Dec 11, 2025
CVE-2025-59802: Authentication Bypass by Spoofing7.5 HighN/A0%Dec 11, 2025
CVE-2025-55314: NULL Pointer Dereference7.8 HighN/A0%Dec 11, 2025
CVE-2025-55313: Improper Control of Generation of Code7.8 HighN/A0%Dec 11, 2025
CVE-2025-55312: NULL Pointer Dereference7.8 HighN/A0%Dec 11, 2025
CVE-2025-55311: Improper Verification of Cryptographic Signature6.5 MediumN/A0%Dec 11, 2025
CVE-2025-55309: Use After Free6.7 MediumN/A0%Dec 11, 2025
CVE-2025-55308: Use After Free6.7 MediumN/A0%Dec 11, 2025
CVE-2025-55307: Out-of-bounds Read3.3 LowN/A0%Dec 11, 2025
CVE-2025-14518: Server-Side Request Forgery (SSRF)9.8 Critical2.1 Low0%Dec 11, 2025
CVE-2025-14516: Server-Side Request Forgery (SSRF)8.8 High2.1 Low0%Dec 11, 2025
CVE-2025-67505: Concurrent Execution using Shared Resource with Improper Synchronization8.4 HighN/A0%Dec 10, 2025
4401-4425 of 16522
‹›