The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-0407: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Jan 13, 2025
CVE-2025-0406: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Jan 13, 2025
CVE-2025-0405: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Jan 13, 2025
CVE-2025-0404: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Jan 13, 2025
CVE-2025-0402: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Jan 13, 2025
CVE-2025-0401: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.9 Medium1%Jan 13, 2025
CVE-2025-0399: Unrestricted Upload of File with Dangerous Type4.7 Medium5.1 Medium0%Jan 12, 2025
CVE-2024-49785: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2025
CVE-2021-29669: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2025
CVE-2025-0391: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Jan 11, 2025
CVE-2025-23108: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jan 11, 2025
CVE-2025-0104: Improper Neutralization of Input During Web Page Generation6.1 Medium7.0 High0%Jan 11, 2025
CVE-2024-13212: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Jan 9, 2025
CVE-2024-13211: Improper Access Control6.3 Medium5.3 Medium0%Jan 9, 2025
CVE-2024-13210: Unrestricted Upload of File with Dangerous Type4.7 Medium5.1 Medium1%Jan 9, 2025
CVE-2024-13202: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Jan 9, 2025
CVE-2024-13201: Unrestricted Upload of File with Dangerous Type4.7 Medium5.1 Medium1%Jan 9, 2025
CVE-2024-13200: Improper Access Control7.3 High6.9 Medium0%Jan 9, 2025
CVE-2024-13197: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Jan 9, 2025
CVE-2024-13196: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Jan 9, 2025
CVE-2024-13195: Server-Side Request Forgery (SSRF)6.3 Medium5.3 Medium0%Jan 9, 2025
CVE-2024-13192: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Jan 8, 2025
CVE-2024-13191: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium1%Jan 8, 2025
CVE-2024-13189: Incorrect Privilege Assignment7.3 High6.9 Medium1%Jan 8, 2025
CVE-2025-22132: Improper Neutralization of Input During Web Page Generation8.3 HighN/A0%Jan 7, 2025
6426-6450 of 16633