The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-61927: Improper Control of Generation of CodeN/A7.2 High1%Oct 10, 2025
CVE-2025-60880: Improper Neutralization of Input During Web Page Generation8.3 HighN/A0%Oct 10, 2025
CVE-2025-60308: Improper Neutralization of Input During Web Page Generation4.1 MediumN/A0%Oct 10, 2025
CVE-2025-60269: Improper Neutralization of Special Elements used in an SQL Command9.4 CriticalN/A0%Oct 10, 2025
CVE-2025-60869: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Oct 10, 2025
CVE-2025-61319: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 10, 2025
CVE-2025-11189: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Oct 10, 2025
CVE-2025-35060: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-55200: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 9, 2025
CVE-2025-11551: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical2.1 Low0%Oct 9, 2025
CVE-2025-60302: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 9, 2025
CVE-2025-56683: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Oct 9, 2025
CVE-2025-61788: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 8, 2025
CVE-2025-60828: Deserialization of Untrusted Data6.5 MediumN/A0%Oct 8, 2025
CVE-2025-60314: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2025
CVE-2025-60299: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2025
CVE-2025-60298: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2025
CVE-2025-61787: Improper Neutralization of Special Elements used in a Command8.1 HighN/A0%Oct 8, 2025
CVE-2025-61786: Improper Privilege Management3.3 LowN/A0%Oct 8, 2025
CVE-2025-61785: Incorrect Privilege Assignment3.3 LowN/A0%Oct 8, 2025
CVE-2025-61999: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-61998: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-61997: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-61996: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-11406: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Oct 7, 2025
4876-4900 of 16533
‹›