The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-49542: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A0%Jul 8, 2025
CVE-2025-49541: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jul 8, 2025
CVE-2025-49540: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jul 8, 2025
CVE-2023-43039: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 8, 2025
CVE-2025-7363: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 8, 2025
CVE-2025-53479: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 8, 2025
CVE-2025-53372: Improper Neutralization of Special Elements used in a Command7.5 HighN/A0%Jul 8, 2025
CVE-2025-3630: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 8, 2025
CVE-2025-2793: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 8, 2025
CVE-2025-40721: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jul 8, 2025
CVE-2025-40720: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jul 8, 2025
CVE-2025-40719: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jul 8, 2025
CVE-2025-42978: Improper Verification of Source of a Communication Channel3.5 LowN/A0%Jul 8, 2025
CVE-2025-42966: Deserialization of Untrusted Data9.1 CriticalN/A0%Jul 8, 2025
CVE-2025-42963: Deserialization of Untrusted Data9.1 CriticalN/A0%Jul 8, 2025
CVE-2025-53487: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 7, 2025
CVE-2025-53486: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 7, 2025
CVE-2025-4779: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 7, 2025
CVE-2025-3466: Insufficient Isolation of System-Dependent Functions7.2 HighN/A0%Jul 7, 2025
CVE-2025-7108: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Jul 7, 2025
CVE-2025-27446: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Jul 6, 2025
CVE-2025-53484: Improper Neutralization of Input During Web Page Generation9.8 CriticalN/A0%Jul 4, 2025
CVE-2025-53569: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jul 4, 2025
CVE-2025-53599: Improper Neutralization of Input During Web Page Generation9.8 CriticalN/A0%Jul 4, 2025
CVE-2025-2537: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 3, 2025
5476-5500 of 16557
‹›