The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-64548: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2025
CVE-2025-64547: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2025
CVE-2025-64546: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2025
CVE-2025-64541: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2025
CVE-2025-67641: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2025
CVE-2025-34425: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-66214: Deserialization of Untrusted Data8.8 HighN/A0%Dec 9, 2025
CVE-2025-65300: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2025
CVE-2025-34409: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34408: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34407: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34406: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34404: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34403: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34402: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34401: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34400: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34399: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34398: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-34397: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Dec 9, 2025
CVE-2025-65289: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 9, 2025
CVE-2025-61074: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Dec 9, 2025
CVE-2025-14330: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Dec 9, 2025
CVE-2025-14325: Access of Resource Using Incompatible Type7.3 HighN/A0%Dec 9, 2025
CVE-2025-14324: Improper Control of Generation of Code9.8 CriticalN/A1%Dec 9, 2025
4526-4550 of 16528
‹›