The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-40548: Improper Privilege Management9.1 CriticalN/A0%Nov 18, 2025
CVE-2025-40547: Improper Encoding or Escaping of Output9.1 CriticalN/A0%Nov 18, 2025
CVE-2025-40545: URL Redirection to Untrusted Site4.8 MediumN/A0%Nov 18, 2025
CVE-2025-26391: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 18, 2025
CVE-2025-13088: Improper Control of Filename for Include/Require Statement in PHP Program8.8 HighN/A0%Nov 18, 2025
CVE-2025-12962: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Nov 18, 2025
CVE-2025-12961: Missing Authorization4.3 MediumN/A0%Nov 18, 2025
CVE-2025-12937: Missing Authorization6.5 MediumN/A0%Nov 18, 2025
CVE-2025-12827: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 18, 2025
CVE-2025-12823: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 18, 2025
CVE-2025-12775: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Nov 18, 2025
CVE-2025-12528: Unrestricted Upload of File with Dangerous Type8.1 HighN/A0%Nov 18, 2025
CVE-2025-12411: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 18, 2025
CVE-2025-12406: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Nov 18, 2025
CVE-2025-12404: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Nov 18, 2025
CVE-2025-12372: Missing Authorization4.3 MediumN/A0%Nov 18, 2025
CVE-2025-12173: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 18, 2025
CVE-2025-12078: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 18, 2025
CVE-2025-11868: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 18, 2025
CVE-2025-11620: Missing Authorization7.2 HighN/A0%Nov 18, 2025
CVE-2025-8727: Stack-based Buffer Overflow7.2 HighN/A0%Nov 18, 2025
CVE-2025-8404: Stack-based Buffer Overflow5.5 MediumN/A0%Nov 18, 2025
CVE-2025-8076: Stack-based Buffer Overflow7.2 HighN/A0%Nov 18, 2025
CVE-2025-11267: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%Nov 18, 2025
CVE-2025-11265: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%Nov 18, 2025
82276-82300 of 435847
‹›