The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-11441: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 20, 2025
CVE-2024-10727: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 20, 2025
CVE-2024-0640: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 20, 2025
CVE-2024-55009: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2025
CVE-2024-53970: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 19, 2025
CVE-2025-30196: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Mar 19, 2025
CVE-2025-29907: Uncontrolled Resource Consumption7.5 High8.7 High0%Mar 18, 2025
CVE-2025-25589: XML Injection (aka Blind XPath Injection)8.1 HighN/A0%Mar 18, 2025
CVE-2025-2491: Improper Neutralization of Input During Web Page Generation2.4 Low4.8 Medium0%Mar 18, 2025
CVE-2025-25585: Improper Access Control7.3 HighN/A0%Mar 18, 2025
CVE-2025-2490: Improper Neutralization of Input During Web Page Generation2.4 Low4.8 Medium0%Mar 18, 2025
CVE-2025-2495: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Mar 18, 2025
CVE-2025-30143: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 17, 2025
CVE-2025-25612: Improper Neutralization of Input During Web Page Generation7.1 HighN/A1%Mar 17, 2025
CVE-2025-2365: Improper Restriction of XML External Entity Reference6.3 Medium5.3 Medium0%Mar 17, 2025
CVE-2025-2364: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Mar 17, 2025
CVE-2025-2363: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Mar 17, 2025
CVE-2025-2322: Use of Hard-coded Credentials7.3 High6.9 Medium0%Mar 15, 2025
CVE-2025-1888: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Mar 14, 2025
CVE-2025-29776: Loop with Unreachable Exit ConditionN/A8.7 High0%Mar 14, 2025
CVE-2025-26626: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Mar 14, 2025
CVE-2025-25363: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A0%Mar 13, 2025
CVE-2025-27107: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A8.6 High1%Mar 13, 2025
CVE-2025-28010: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2025
CVE-2025-25625: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2025
6101-6125 of 16564
‹›