The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-14035: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Dec 12, 2025
CVE-2025-14032: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13989: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13988: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 12, 2025
CVE-2025-13987: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 12, 2025
CVE-2025-13975: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Dec 12, 2025
CVE-2025-13972: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A0%Dec 12, 2025
CVE-2025-13971: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Dec 12, 2025
CVE-2025-13969: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13966: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13963: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13962: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13961: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13960: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13906: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13904: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13889: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13885: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13884: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13866: Missing Authorization6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13850: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13846: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13843: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13840: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
CVE-2025-13747: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 12, 2025
80626-80650 of 744285
‹›