The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-34314: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34313: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34310: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34309: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34308: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34307: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34306: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34303: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34302: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34301: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-53533: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 27, 2025
CVE-2025-36170: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 27, 2025
CVE-2025-36138: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 27, 2025
CVE-2025-32785: Improper Neutralization of Input During Web Page Generation5.4 Medium2.0 Low0%Oct 27, 2025
CVE-2025-12305: Deserialization of Untrusted Data9.8 Critical2.1 Low0%Oct 27, 2025
CVE-2025-12304: Improper Authorization4.3 Medium2.1 Low0%Oct 27, 2025
CVE-2025-54965: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 27, 2025
CVE-2025-12297: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Oct 27, 2025
CVE-2025-61481: Exposure of Sensitive Information to an Unauthorized Actor10.0 CriticalN/A0%Oct 27, 2025
CVE-2025-41384: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 27, 2025
CVE-2025-12246: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Oct 27, 2025
CVE-2025-12245: Origin Validation Error5.3 Medium5.5 Medium0%Oct 27, 2025
CVE-2025-11682: Improper Neutralization of Input During Web Page GenerationN/A7.1 High0%Oct 27, 2025
CVE-2025-11760: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 25, 2025
CVE-2025-12194: Uncontrolled Resource ConsumptionN/A5.9 Medium0%Oct 24, 2025
4776-4800 of 16531