The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-10703: Improper Control of Generation of CodeN/A8.6 High0%Nov 19, 2025
CVE-2025-63243: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Nov 19, 2025
CVE-2025-64408: Deserialization of Untrusted Data6.3 MediumN/A12%Nov 19, 2025
CVE-2025-65013: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 18, 2025
CVE-2025-63229: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 18, 2025
CVE-2025-63693: Improper Control of Generation of Code5.4 MediumN/A0%Nov 18, 2025
CVE-2025-63883: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 18, 2025
CVE-2025-64758: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Nov 17, 2025
CVE-2025-63708: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 17, 2025
CVE-2025-13268: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.3 Medium2.1 Low0%Nov 17, 2025
CVE-2025-13266: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Nov 17, 2025
CVE-2025-13265: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical5.3 Medium1%Nov 17, 2025
CVE-2025-13262: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical5.5 Medium1%Nov 17, 2025
CVE-2025-13261: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Nov 17, 2025
CVE-2025-13246: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Nov 16, 2025
CVE-2025-13209: Improper Restriction of XML External Entity Reference6.3 Medium2.1 Low0%Nov 15, 2025
CVE-2025-64308: Unprotected Transport of Credentials6.5 Medium7.1 High0%Nov 15, 2025
CVE-2025-13204: Improperly Controlled Modification of Object Prototype Attributes7.3 HighN/A0%Nov 14, 2025
CVE-2025-10018: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Nov 14, 2025
CVE-2025-64747: Improper Input Validation5.5 MediumN/A0%Nov 13, 2025
CVE-2025-64745: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 13, 2025
CVE-2025-64726: External Control of System or Configuration SettingN/A7.3 High0%Nov 13, 2025
CVE-2025-59840: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Nov 13, 2025
CVE-2025-11538: Binding to an Unrestricted IP Address6.8 MediumN/A0%Nov 13, 2025
CVE-2025-64718: Improperly Controlled Modification of Object Prototype Attributes5.3 MediumN/A0%Nov 13, 2025
4676-4700 of 16530
‹›