The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-12661: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-12660: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-12170: Missing Authorization5.3 MediumN/A0%Nov 21, 2025
CVE-2025-12138: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Nov 21, 2025
CVE-2025-12135: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 21, 2025
CVE-2025-12086: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 21, 2025
CVE-2025-11985: Missing Authorization8.8 HighN/A0%Nov 21, 2025
CVE-2025-11885: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 21, 2025
CVE-2025-11815: Improper Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-11802: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11801: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11800: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11799: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11773: Missing Authorization4.3 MediumN/A0%Nov 21, 2025
CVE-2025-11771: Missing Authentication for Critical Function5.3 MediumN/A0%Nov 21, 2025
CVE-2025-11770: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11768: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11767: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11765: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11764: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11763: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 21, 2025
CVE-2025-11456: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Nov 21, 2025
CVE-2025-11003: Missing Authorization6.4 MediumN/A0%Nov 21, 2025
CVE-2025-10938: Missing Authorization6.5 MediumN/A0%Nov 21, 2025
CVE-2025-64695: Uncontrolled Search Path Element7.8 High8.4 High0%Nov 21, 2025
82076-82100 of 475154
‹›