The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-46936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 20, 2025
CVE-2025-46932: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 20, 2025
CVE-2025-46856: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 20, 2025
CVE-2025-46852: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 20, 2025
CVE-2025-46849: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 20, 2025
CVE-2011-10030: External Control of File Name or PathN/A8.4 High3%Aug 20, 2025
CVE-2025-51990: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 20, 2025
CVE-2025-54175: Improper Neutralization of Input During Web Page Generation6.1 Medium4.6 Medium0%Aug 20, 2025
CVE-2025-43742: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Aug 20, 2025
CVE-2025-43741: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 20, 2025
CVE-2024-39954: Server-Side Request Forgery (SSRF)6.3 MediumN/A0%Aug 20, 2025
CVE-2025-9225: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Aug 20, 2025
CVE-2025-9181: Use of Uninitialized Variable6.5 MediumN/A0%Aug 19, 2025
CVE-2025-55033: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 19, 2025
CVE-2025-55028: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 19, 2025
CVE-2025-43744: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 19, 2025
CVE-2025-43737: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 19, 2025
CVE-2025-33008: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2025
CVE-2025-9148: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 19, 2025
CVE-2025-54881: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 19, 2025
CVE-2025-54880: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 19, 2025
CVE-2025-52478: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 19, 2025
CVE-2025-43738: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 19, 2025
CVE-2025-51489: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2025
CVE-2025-51488: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Aug 19, 2025
5276-5300 of 16553
‹›