The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-53528: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jul 21, 2025
CVE-2025-7938: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Jul 21, 2025
CVE-2025-7936: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 21, 2025
CVE-2025-7935: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 21, 2025
CVE-2025-7934: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 21, 2025
CVE-2025-7920: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 21, 2025
CVE-2025-7906: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jul 20, 2025
CVE-2025-7902: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 20, 2025
CVE-2025-7888: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 20, 2025
CVE-2025-7865: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 20, 2025
CVE-2025-7864: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jul 20, 2025
CVE-2025-7863: URL Redirection to Untrusted Site3.5 Low5.1 Medium0%Jul 20, 2025
CVE-2025-7789: Use of Password Hash With Insufficient Computational Effort3.7 Low2.9 Low0%Jul 18, 2025
CVE-2025-54075: Improper Neutralization of Input During Web Page Generation8.3 HighN/A0%Jul 18, 2025
CVE-2025-7788: Improper Neutralization of Special Elements used in an OS Command6.3 Medium2.1 Low0%Jul 18, 2025
CVE-2025-7787: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 18, 2025
CVE-2025-7785: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Jul 18, 2025
CVE-2025-7763: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Jul 17, 2025
CVE-2025-7759: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 17, 2025
CVE-2025-47053: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 16, 2025
CVE-2025-46959: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 16, 2025
CVE-2025-53925: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 16, 2025
CVE-2025-40724: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jul 16, 2025
CVE-2025-52687: Improper Neutralization of Special Elements used in a Command2.4 LowN/A0%Jul 16, 2025
CVE-2025-30761: Deserialization of Untrusted Data5.9 MediumN/A0%Jul 15, 2025
5426-5450 of 16556
‹›