The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-54859: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Oct 16, 2025
CVE-2025-54760: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 16, 2025
CVE-2025-52583: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 16, 2025
CVE-2025-24833: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 16, 2025
CVE-2025-62410: Improperly Controlled Modification of Object Prototype AttributesN/A9.4 Critical0%Oct 15, 2025
CVE-2025-61933: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 15, 2025
CVE-2025-59269: Improper Neutralization of Input During Web Page Generation6.1 Medium8.4 High0%Oct 15, 2025
CVE-2025-10869: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 15, 2025
CVE-2025-11160: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Oct 15, 2025
CVE-2025-61797: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-61796: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-54272: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-54266: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Oct 14, 2025
CVE-2025-54264: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Oct 14, 2025
CVE-2025-62374: Improperly Controlled Modification of Object Prototype Attributes6.4 MediumN/A0%Oct 14, 2025
CVE-2025-60374: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 14, 2025
CVE-2025-60537: Improper Input Validation6.5 MediumN/A0%Oct 14, 2025
CVE-2025-62366: Improper Neutralization of Input During Web Page GenerationN/A2.9 Low0%Oct 14, 2025
CVE-2025-62172: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A8.5 High0%Oct 14, 2025
CVE-2025-11711: Sensitive Data Storage in Improperly Locked Memory6.5 MediumN/A0%Oct 14, 2025
CVE-2025-42901: Improper Control of Generation of Code5.4 MediumN/A0%Oct 14, 2025
CVE-2025-62358: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2025
CVE-2025-37729: Improper Neutralization of Special Elements Used in a Template Engine7.2 HighN/A0%Oct 13, 2025
CVE-2025-11184: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Oct 13, 2025
CVE-2025-11183: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Oct 13, 2025
4851-4875 of 16533
‹›