The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-62716: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Oct 24, 2025
CVE-2025-60936: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 24, 2025
CVE-2025-5350: Server-Side Request Forgery (SSRF)5.9 MediumN/A0%Oct 24, 2025
CVE-2025-9158: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Oct 24, 2025
CVE-2025-62517: Improperly Controlled Modification of Object Prototype Attributes5.9 MediumN/A0%Oct 23, 2025
CVE-2025-60837: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 23, 2025
CVE-2025-34156: Exposure of Sensitive System Information to an Unauthorized Control SphereN/A6.9 Medium0%Oct 23, 2025
CVE-2025-9981: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 23, 2025
CVE-2025-9980: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 23, 2025
CVE-2025-62710: Predictable Seed in Pseudo-Random Number Generator (PRNG)5.9 MediumN/A0%Oct 22, 2025
CVE-2025-62610: Improper Authorization8.1 HighN/A0%Oct 22, 2025
CVE-2025-62248: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 22, 2025
CVE-2025-11952: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 22, 2025
CVE-2025-61881: Improper Access Control5.9 MediumN/A0%Oct 21, 2025
CVE-2025-61755: Missing Authorization3.7 LowN/A0%Oct 21, 2025
CVE-2025-61748: Improper Access Control3.7 LowN/A0%Oct 21, 2025
CVE-2025-53066: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 21, 2025
CVE-2025-53057: Improper Access Control5.9 MediumN/A0%Oct 21, 2025
CVE-2025-62249: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Oct 21, 2025
CVE-2025-61255: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 21, 2025
CVE-2025-56800: Authentication Bypass by Spoofing5.1 MediumN/A0%Oct 21, 2025
CVE-2025-60507: Improper Neutralization of Input During Web Page Generation8.9 HighN/A0%Oct 21, 2025
CVE-2025-12031: Sensitive Cookie Without 'HttpOnly' Flag5.3 Medium5.3 Medium0%Oct 21, 2025
CVE-2025-60506: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 21, 2025
CVE-2025-60280: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 21, 2025
4801-4825 of 16531
‹›