The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-51503: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jul 31, 2025
CVE-2025-50866: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 31, 2025
CVE-2025-52203: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jul 31, 2025
CVE-2025-51569: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 31, 2025
CVE-2025-34146: Improperly Controlled Modification of Object Prototype AttributesN/A7.0 High0%Jul 31, 2025
CVE-2025-8192: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A6.9 Medium0%Jul 31, 2025
CVE-2025-24854: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 31, 2025
CVE-2025-24853: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Jul 31, 2025
CVE-2025-8344: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jul 31, 2025
CVE-2025-8343: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Jul 31, 2025
CVE-2024-45515: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2025
CVE-2025-47001: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 30, 2025
CVE-2025-8319: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2025
CVE-2025-44136: Improper Neutralization of Input During Web Page Generation9.8 CriticalN/A10%Jul 29, 2025
CVE-2025-52358: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Jul 29, 2025
CVE-2025-40686: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Jul 29, 2025
CVE-2025-40685: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Jul 29, 2025
CVE-2025-40684: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Jul 29, 2025
CVE-2025-40683: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Jul 29, 2025
CVE-2025-54423: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 28, 2025
CVE-2025-32731: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 28, 2025
CVE-2025-40730: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Jul 28, 2025
CVE-2025-27802: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Jul 28, 2025
CVE-2025-27801: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Jul 28, 2025
CVE-2025-27800: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Jul 28, 2025
5376-5400 of 16555
‹›