The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-60503: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Nov 3, 2025
CVE-2025-63442: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Nov 3, 2025
CVE-2025-12626: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Nov 3, 2025
CVE-2025-12623: Authorization Bypass Through User-Controlled Key3.1 Low1.3 Low0%Nov 3, 2025
CVE-2025-11928: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Nov 1, 2025
CVE-2025-12460: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Oct 31, 2025
CVE-2024-13992: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 31, 2025
CVE-2025-27208: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Oct 31, 2025
CVE-2024-13993: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium1%Oct 30, 2025
CVE-2023-7312: Improper Neutralization of Input During Web Page Generation4.8 Medium6.2 Medium1%Oct 30, 2025
CVE-2023-53690: Improper Neutralization of Input During Web Page Generation4.8 Medium6.2 Medium1%Oct 30, 2025
CVE-2011-10036: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2025-52180: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-52179: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-64112: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Oct 30, 2025
CVE-2025-56313: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-60319: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Oct 30, 2025
CVE-2025-53883: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A9.3 Critical0%Oct 30, 2025
CVE-2025-64135: Initialization of a Resource with an Insecure Default5.9 MediumN/A0%Oct 29, 2025
CVE-2025-62800: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 28, 2025
CVE-2025-62798: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 28, 2025
CVE-2025-34318: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Oct 28, 2025
CVE-2025-34317: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34316: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34315: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
4751-4775 of 16531
‹›