The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-63690: Use of Externally-Controlled Input to Select Classes or Code9.1 CriticalN/A1%Nov 7, 2025
CVE-2025-63687: Incorrect Authorization6.5 MediumN/A0%Nov 7, 2025
CVE-2025-64339: Improper Neutralization of Input During Web Page Generation5.4 Medium7.2 High0%Nov 7, 2025
CVE-2025-64338: Improper Neutralization of Input During Web Page Generation9.0 Critical5.1 Medium0%Nov 7, 2025
CVE-2025-64336: Improper Neutralization of Input During Web Page Generation5.4 Medium7.2 High0%Nov 7, 2025
CVE-2025-64187: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.4 Medium4.6 Medium0%Nov 7, 2025
CVE-2025-64177: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 6, 2025
CVE-2025-64176: Improper Input Validation5.3 MediumN/A0%Nov 6, 2025
CVE-2025-64327: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Nov 6, 2025
CVE-2025-63589: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 6, 2025
CVE-2025-63588: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 6, 2025
CVE-2025-36054: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 6, 2025
CVE-2025-64164: Deserialization of Untrusted Data9.8 Critical8.9 High1%Nov 6, 2025
CVE-2025-10853: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A0%Nov 5, 2025
CVE-2025-63418: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 5, 2025
CVE-2025-63416: Improper Neutralization of Input During Web Page Generation9.1 CriticalN/A0%Nov 5, 2025
CVE-2025-5770: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 5, 2025
CVE-2025-20354: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Nov 5, 2025
CVE-2025-12469: Missing Authorization4.3 MediumN/A0%Nov 5, 2025
CVE-2025-12735: Undefined Security Weakness9.8 CriticalN/A2%Nov 5, 2025
CVE-2025-62722: Improper Neutralization of Input During Web Page Generation5.4 Medium8.7 High0%Nov 4, 2025
CVE-2025-62715: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Nov 4, 2025
CVE-2025-61431: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 4, 2025
CVE-2025-12682: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Nov 4, 2025
CVE-2025-36172: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 3, 2025
4726-4750 of 16531
‹›