The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-27801: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Jul 28, 2025
CVE-2025-27800: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Jul 28, 2025
CVE-2025-8223: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Jul 27, 2025
CVE-2025-8222: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 27, 2025
CVE-2025-8221: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Jul 27, 2025
CVE-2025-8211: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 26, 2025
CVE-2025-54414: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A5.1 Medium0%Jul 26, 2025
CVE-2025-45893: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 25, 2025
CVE-2025-45892: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 25, 2025
CVE-2016-15046: Unrestricted Upload of File with Dangerous TypeN/A8.6 High0%Jul 25, 2025
CVE-2025-52360: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Jul 25, 2025
CVE-2025-51411: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 25, 2025
CVE-2025-53084: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Jul 24, 2025
CVE-2025-50128: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Jul 24, 2025
CVE-2025-47061: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 24, 2025
CVE-2025-46996: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 24, 2025
CVE-2025-46993: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 24, 2025
CVE-2025-46410: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Jul 24, 2025
CVE-2025-41420: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Jul 24, 2025
CVE-2025-36548: Improper Neutralization of Input During Web Page Generation8.3 HighN/A0%Jul 24, 2025
CVE-2025-40598: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 23, 2025
CVE-2025-8033: NULL Pointer Dereference6.5 MediumN/A0%Jul 22, 2025
CVE-2025-8029: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)8.1 HighN/A0%Jul 22, 2025
CVE-2025-51462: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 22, 2025
CVE-2025-51464: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Jul 22, 2025
5401-5425 of 16557
‹›