The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-31325: Improper Neutralization of Input During Web Page Generation5.8 MediumN/A0%Jun 10, 2025
CVE-2025-49137: Improper Neutralization of Input During Web Page Generation8.5 HighN/A0%Jun 9, 2025
CVE-2025-5887: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jun 9, 2025
CVE-2025-46041: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jun 9, 2025
CVE-2025-46178: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 9, 2025
CVE-2025-45055: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2025
CVE-2025-5879: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jun 9, 2025
CVE-2025-49130: Improper Neutralization of Input During Web Page GenerationN/A6.0 Medium0%Jun 9, 2025
CVE-2025-40675: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 9, 2025
CVE-2025-41367: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Jun 6, 2025
CVE-2025-41364: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 6, 2025
CVE-2025-5680: Deserialization of Untrusted Data6.3 Medium5.3 Medium0%Jun 5, 2025
CVE-2025-5679: Deserialization of Untrusted Data6.3 Medium5.3 Medium0%Jun 5, 2025
CVE-2025-49009: Insertion of Sensitive Information into Log File6.2 MediumN/A0%Jun 5, 2025
CVE-2025-30084: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 5, 2025
CVE-2025-27754: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jun 5, 2025
CVE-2025-48935: Incorrect Authorization9.1 Critical5.5 Medium0%Jun 4, 2025
CVE-2025-48934: Insertion of Sensitive Information Into Sent Data5.3 Medium5.5 Medium0%Jun 4, 2025
CVE-2025-48888: Incorrect Authorization5.3 Medium5.5 Medium0%Jun 4, 2025
CVE-2025-31136: Improper Neutralization of Input During Web Page Generation6.7 MediumN/A0%Jun 4, 2025
CVE-2025-20276: Deserialization of Untrusted Data3.8 LowN/A1%Jun 4, 2025
CVE-2025-20275: Deserialization of Untrusted Data5.3 MediumN/A0%Jun 4, 2025
CVE-2025-27444: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jun 4, 2025
CVE-2025-5545: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Jun 4, 2025
CVE-2025-5544: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Jun 3, 2025
5801-5825 of 16560
‹›