The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-51489: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2025
CVE-2025-51488: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Aug 19, 2025
CVE-2025-51487: Improper Neutralization of Input During Web Page Generation4.5 MediumN/A0%Aug 19, 2025
CVE-2025-43740: Improper Neutralization of Input During Web Page Generation5.4 Medium4.6 Medium0%Aug 19, 2025
CVE-2025-53192: Improper Neutralization of Expression/Command Delimiters8.8 HighN/A0%Aug 18, 2025
CVE-2025-43731: Improper Neutralization of Input During Web Page Generation5.4 Medium6.9 Medium0%Aug 18, 2025
CVE-2025-55296: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Aug 18, 2025
CVE-2025-55288: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Aug 18, 2025
CVE-2025-55287: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 18, 2025
CVE-2025-43733: Improper Neutralization of Input During Web Page Generation5.4 Medium2.3 Low0%Aug 18, 2025
CVE-2025-9092: Uncontrolled Resource ConsumptionN/A1.0 Low0%Aug 16, 2025
CVE-2025-36088: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 15, 2025
CVE-2025-55203: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 15, 2025
CVE-2025-8991: Undefined Security Weakness4.3 Medium2.1 Low0%Aug 15, 2025
CVE-2025-8974: Use of Hard-coded Credentials3.7 Low2.9 Low0%Aug 14, 2025
CVE-2025-8965: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Aug 14, 2025
CVE-2025-53631: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Aug 14, 2025
CVE-2025-3703: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Aug 14, 2025
CVE-2025-8047: Undefined Security Weakness9.8 CriticalN/A0%Aug 14, 2025
CVE-2025-7761: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 14, 2025
CVE-2025-8931: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 14, 2025
CVE-2025-8930: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 14, 2025
CVE-2025-8929: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 13, 2025
CVE-2025-8928: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 13, 2025
CVE-2025-45313: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2025
5301-5325 of 16555
‹›