The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-40681: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 13, 2025
CVE-2025-64716: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 13, 2025
CVE-2025-64711: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 13, 2025
CVE-2025-12872: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 12, 2025
CVE-2025-12869: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Nov 12, 2025
CVE-2025-13024: Compiler Optimization Removal or Modification of Security-critical Code9.8 CriticalN/A0%Nov 11, 2025
CVE-2025-13016: Improper Check or Handling of Exceptional Conditions7.5 HighN/A0%Nov 11, 2025
CVE-2025-11085: Improper Encoding or Escaping of OutputN/A8.6 High0%Nov 11, 2025
CVE-2025-11997: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 11, 2025
CVE-2025-42919: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Nov 11, 2025
CVE-2025-64518: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Nov 10, 2025
CVE-2025-64509: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 10, 2025
CVE-2025-64508: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Nov 10, 2025
CVE-2025-64501: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Nov 10, 2025
CVE-2025-62780: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Nov 10, 2025
CVE-2025-63709: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 10, 2025
CVE-2025-12925: Missing Authorization9.8 Critical6.9 Medium0%Nov 10, 2025
CVE-2025-12924: Missing Authorization6.5 Medium5.3 Medium0%Nov 10, 2025
CVE-2025-64496: Improper Neutralization of Directives in Dynamically Evaluated Code7.3 HighN/A7%Nov 8, 2025
CVE-2025-63640: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63639: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63638: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-36135: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 7, 2025
CVE-2025-63714: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63690: Use of Externally-Controlled Input to Select Classes or Code9.1 CriticalN/A1%Nov 7, 2025
4701-4725 of 16530
‹›