The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-14284: Improper Neutralization of Input During Web Page Generation6.1 Medium2.0 Low0%Dec 9, 2025
CVE-2025-10573: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A33%Dec 9, 2025
CVE-2025-66470: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 9, 2025
CVE-2025-66469: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 9, 2025
CVE-2025-65229: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Dec 8, 2025
CVE-2025-48625: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Dec 8, 2025
CVE-2025-48608: Missing Authorization5.5 MediumN/A0%Dec 8, 2025
CVE-2025-48606: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48639: Improper Restriction of Rendered UI Layers or Frames7.3 HighN/A0%Dec 8, 2025
CVE-2025-48633: Undefined Security Weakness5.5 MediumN/A0%Dec 8, 2025
CVE-2025-48632: Improper Input Validation7.8 HighN/A0%Dec 8, 2025
CVE-2025-48631: Uncontrolled Resource Consumption6.5 MediumN/A0%Dec 8, 2025
CVE-2025-48629: Initialization of a Resource with an Insecure Default7.8 HighN/A0%Dec 8, 2025
CVE-2025-48628: Unintended Proxy or Intermediary7.8 HighN/A0%Dec 8, 2025
CVE-2025-48627: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48621: Initialization of a Resource with an Insecure Default7.3 HighN/A0%Dec 8, 2025
CVE-2025-48620: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48618: Improper Locking6.8 MediumN/A0%Dec 8, 2025
CVE-2025-48615: Allocation of Resources Without Limits or Throttling7.8 HighN/A0%Dec 8, 2025
CVE-2025-48614: Missing Authorization4.6 MediumN/A0%Dec 8, 2025
CVE-2025-48612: Improper Input Validation7.8 HighN/A0%Dec 8, 2025
CVE-2025-48603: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Dec 8, 2025
CVE-2025-48599: Missing Authorization7.8 HighN/A0%Dec 8, 2025
CVE-2025-48594: Improper Input Validation7.3 HighN/A0%Dec 8, 2025
CVE-2025-48590: Uncontrolled Resource Consumption5.5 MediumN/A0%Dec 8, 2025
4551-4575 of 16528
‹›