The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-48867: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 24, 2025
CVE-2025-43779: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Sep 24, 2025
CVE-2025-59548: Improper Neutralization of Input During Web Page Generation6.1 Medium5.9 Medium0%Sep 23, 2025
CVE-2025-59546: Improper Neutralization of Input During Web Page Generation2.4 LowN/A0%Sep 23, 2025
CVE-2025-59539: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 23, 2025
CVE-2025-0209: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 23, 2025
CVE-2025-5717: Improper Control of Generation of Code7.2 HighN/A1%Sep 23, 2025
CVE-2025-4760: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 23, 2025
CVE-2025-57205: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 22, 2025
CVE-2025-57204: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 22, 2025
CVE-2025-59528: Improper Control of Generation of Code10.0 CriticalN/A84%Sep 22, 2025
CVE-2025-59434: Exposure of Sensitive Information to an Unauthorized Actor9.6 CriticalN/A0%Sep 22, 2025
CVE-2025-59432: Observable Timing DiscrepancyN/A6.6 Medium0%Sep 22, 2025
CVE-2025-57203: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 22, 2025
CVE-2025-59430: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Sep 22, 2025
CVE-2025-55887: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 22, 2025
CVE-2025-55888: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Sep 22, 2025
CVE-2025-9541: Undefined Security Weakness4.7 MediumN/A0%Sep 22, 2025
CVE-2025-9540: Undefined Security Weakness4.7 MediumN/A0%Sep 22, 2025
CVE-2024-13990: Improper Certificate ValidationN/A9.3 Critical0%Sep 19, 2025
CVE-2025-36248: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 19, 2025
CVE-2025-57644: Improper Input Validation9.1 CriticalN/A1%Sep 19, 2025
CVE-2025-59424: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Sep 18, 2025
CVE-2025-36139: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Sep 18, 2025
CVE-2025-10671: Use of Insufficiently Random Values3.7 Low2.9 Low0%Sep 18, 2025
5001-5025 of 16536
‹›