The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-60506: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 21, 2025
CVE-2025-60280: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 21, 2025
CVE-2025-62528: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 20, 2025
CVE-2025-62522: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.0 Medium2%Oct 20, 2025
CVE-2025-61456: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 20, 2025
CVE-2025-61417: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 20, 2025
CVE-2025-57738: Improper Isolation or Compartmentalization7.2 HighN/A0%Oct 20, 2025
CVE-2025-61454: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 20, 2025
CVE-2025-8349: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Oct 20, 2025
CVE-2020-36854: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 18, 2025
CVE-2025-62508: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 17, 2025
CVE-2025-11925: Improper Check for Unusual or Exceptional Conditions6.1 Medium10.0 Critical0%Oct 17, 2025
CVE-2025-34281: Improper Neutralization of Input During Web Page Generation5.4 Medium6.2 Medium0%Oct 17, 2025
CVE-2024-31573: Incorrect Resource Transfer Between Spheres4.0 MediumN/A0%Oct 17, 2025
CVE-2025-62421: Improper Neutralization of Input During Web Page Generation5.4 Medium5.5 Medium0%Oct 17, 2025
CVE-2025-62420: Deserialization of Untrusted Data8.8 High8.2 High0%Oct 17, 2025
CVE-2025-58747: Improper Neutralization of Input During Web Page Generation6.1 Medium2.0 Low0%Oct 17, 2025
CVE-2025-62418: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.8 MediumN/A0%Oct 16, 2025
CVE-2025-62415: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.8 MediumN/A0%Oct 16, 2025
CVE-2025-62414: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.8 MediumN/A0%Oct 16, 2025
CVE-2025-34253: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 16, 2025
CVE-2025-62413: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 16, 2025
CVE-2025-62411: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Oct 16, 2025
CVE-2025-62491: Use After Free8.8 High8.8 High0%Oct 16, 2025
CVE-2025-55072: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 16, 2025
4826-4850 of 16533
‹›