The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-50690: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2025
CVE-2025-32451: Access of Uninitialized Pointer8.8 HighN/A0%Aug 13, 2025
CVE-2025-8916: Allocation of Resources Without Limits or ThrottlingN/A6.3 Medium0%Aug 13, 2025
CVE-2025-8911: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2025
CVE-2025-8910: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2025
CVE-2025-36000: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Aug 12, 2025
CVE-2025-43734: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 12, 2025
CVE-2025-54800: Improper Neutralization of Input During Web Page Generation6.1 Medium7.1 High0%Aug 12, 2025
CVE-2025-43735: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Aug 12, 2025
CVE-2025-8885: Allocation of Resources Without Limits or ThrottlingN/A6.3 Medium0%Aug 12, 2025
CVE-2025-8841: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Aug 11, 2025
CVE-2025-8814: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Aug 10, 2025
CVE-2025-8813: URL Redirection to Untrusted Site3.5 Low2.0 Low0%Aug 10, 2025
CVE-2025-8764: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Aug 9, 2025
CVE-2025-8755: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium0%Aug 9, 2025
CVE-2025-8753: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Aug 9, 2025
CVE-2025-7726: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 9, 2025
CVE-2025-55006: Improper Input Validation4.3 MediumN/A0%Aug 9, 2025
CVE-2025-8737: URL Redirection to Untrusted Site3.5 Low2.0 Low0%Aug 8, 2025
CVE-2025-50927: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Aug 8, 2025
CVE-2025-4576: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Aug 8, 2025
CVE-2020-9322: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Aug 8, 2025
CVE-2025-8708: Deserialization of Untrusted Data5.0 Medium1.3 Low0%Aug 8, 2025
CVE-2025-54885: Insufficient EntropyN/A6.9 Medium0%Aug 7, 2025
CVE-2025-54783: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 7, 2025
5326-5350 of 16553