The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-6702: Improper Authorization4.3 Medium2.1 Low0%Jun 26, 2025
CVE-2025-52902: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jun 26, 2025
CVE-2025-49003: Improper Neutralization of Substitution Characters9.8 Critical8.9 High1%Jun 26, 2025
CVE-2025-2566: Deserialization of Untrusted DataN/A9.3 Critical0%Jun 24, 2025
CVE-2024-56916: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 24, 2025
CVE-2025-47943: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Jun 24, 2025
CVE-2025-6552: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Jun 24, 2025
CVE-2025-6551: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jun 24, 2025
CVE-2025-6534: Improper Control of Resource Identifiers4.2 Medium1.3 Low0%Jun 24, 2025
CVE-2025-34039: Missing Authentication for Critical FunctionN/A10.0 Critical1%Jun 24, 2025
CVE-2025-34032: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 24, 2025
CVE-2025-6533: Authentication Bypass by Capture-replay5.6 Medium2.9 Low0%Jun 24, 2025
CVE-2025-52561: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jun 23, 2025
CVE-2025-49574: Exposure of Resource to Wrong Sphere6.4 MediumN/A0%Jun 23, 2025
CVE-2025-6517: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jun 23, 2025
CVE-2025-6509: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jun 23, 2025
CVE-2025-48700: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A35%Jun 23, 2025
CVE-2025-6466: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jun 22, 2025
CVE-2025-6453: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Jun 22, 2025
CVE-2025-1987: Improper Neutralization of Input During Web Page Generation6.1 Medium9.3 Critical0%Jun 21, 2025
CVE-2025-52552: URL Redirection to Untrusted Site6.1 Medium5.5 Medium0%Jun 21, 2025
CVE-2025-52557: Improper Handling of Physical or Environmental ConditionsN/A8.6 High0%Jun 21, 2025
CVE-2025-50183: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jun 19, 2025
CVE-2025-50182: URL Redirection to Untrusted Site5.3 MediumN/A0%Jun 19, 2025
CVE-2025-24291: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.1 MediumN/A0%Jun 19, 2025
5526-5550 of 16557
‹›