The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-49590: Incomplete Denylist to Cross-Site Scripting6.1 Medium2.9 Low0%Jun 18, 2025
CVE-2025-1349: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jun 18, 2025
CVE-2024-54183: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 18, 2025
CVE-2025-45526: Allocation of Resources Without Limits or Throttling2.9 LowN/A0%Jun 17, 2025
CVE-2025-45525: NULL Pointer Dereference2.9 LowN/A0%Jun 17, 2025
CVE-2025-6050: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Jun 17, 2025
CVE-2025-40674: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 17, 2025
CVE-2025-48993: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Jun 17, 2025
CVE-2025-48992: Improper Neutralization of Input During Web Page Generation4.8 Medium5.2 Medium0%Jun 16, 2025
CVE-2025-25264: Permissive Cross-domain Policy with Untrusted Domains6.5 MediumN/A0%Jun 16, 2025
CVE-2025-6109: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Jun 16, 2025
CVE-2025-6108: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Jun 16, 2025
CVE-2025-6106: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Jun 16, 2025
CVE-2025-6105: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Jun 16, 2025
CVE-2024-25573: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jun 15, 2025
CVE-2025-4417: Improper Neutralization of Input During Web Page Generation5.5 Medium6.9 Medium0%Jun 12, 2025
CVE-2025-2745: Improper Neutralization of Input During Web Page Generation6.5 Medium4.5 Medium0%Jun 12, 2025
CVE-2025-49193: Protection Mechanism Failure4.2 MediumN/A0%Jun 12, 2025
CVE-2025-49185: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jun 12, 2025
CVE-2025-32466: Improper Neutralization of Special Elements used in an SQL CommandN/A6.7 Medium0%Jun 11, 2025
CVE-2025-0917: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jun 11, 2025
CVE-2025-49710: Integer Overflow or Wraparound9.8 CriticalN/A0%Jun 11, 2025
CVE-2025-47117: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 10, 2025
CVE-2025-47116: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 10, 2025
CVE-2025-47115: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 10, 2025
5551-5575 of 16557
‹›