The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-43567: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%May 13, 2025
CVE-2025-30316: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 13, 2025
CVE-2025-30315: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 13, 2025
CVE-2025-30314: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 13, 2025
CVE-2025-32917: Uncontrolled Search Path Element8.8 High5.2 Medium0%May 13, 2025
CVE-2025-30012: Deserialization of Untrusted Data10.0 CriticalN/A1%May 13, 2025
CVE-2025-30011: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%May 13, 2025
CVE-2025-30010: URL Redirection to Untrusted Site6.1 MediumN/A0%May 13, 2025
CVE-2025-30009: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 13, 2025
CVE-2025-46825: Improper Neutralization of Input During Web Page Generation5.4 Medium1.3 Low0%May 12, 2025
CVE-2025-40627: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 12, 2025
CVE-2025-40626: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 12, 2025
CVE-2025-3649: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%May 12, 2025
CVE-2025-3597: Undefined Security Weakness5.9 MediumN/A0%May 12, 2025
CVE-2025-4542: Permissive Cross-domain Policy with Untrusted Domains3.1 Low2.3 Low0%May 11, 2025
CVE-2025-4530: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%May 11, 2025
CVE-2025-4514: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%May 10, 2025
CVE-2025-4511: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%May 10, 2025
CVE-2025-4495: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%May 10, 2025
CVE-2025-4494: Improper Authentication7.3 High6.9 Medium0%May 9, 2025
CVE-2025-1087: Improper Input ValidationN/A9.3 Critical1%May 9, 2025
CVE-2025-46392: Uncontrolled Resource Consumption6.5 MediumN/A0%May 9, 2025
CVE-2025-28074: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 8, 2025
CVE-2025-46812: Improper Neutralization of Input During Web Page GenerationN/A2.0 Low0%May 8, 2025
CVE-2025-28073: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 8, 2025
5901-5925 of 16560
‹›