The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-34242: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium8.6 High0%Nov 6, 2025
CVE-2025-34241: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium5.3 Medium0%Nov 6, 2025
CVE-2025-34240: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium8.6 High0%Nov 6, 2025
CVE-2025-34239: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High0%Nov 6, 2025
CVE-2025-34238: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium6.9 Medium0%Nov 6, 2025
CVE-2025-34237: Improper Neutralization of Input During Web Page Generation5.4 Medium6.3 Medium0%Nov 6, 2025
CVE-2025-34236: Improper Neutralization of Input During Web Page Generation5.4 Medium6.2 Medium0%Nov 6, 2025
CVE-2025-12490: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A20%Nov 6, 2025
CVE-2022-50595: Improper Neutralization of Special Elements used in an SQL Command7.2 High9.3 Critical0%Nov 6, 2025
CVE-2022-50594: Improper Neutralization of Special Elements used in an SQL Command7.5 High8.8 High0%Nov 6, 2025
CVE-2022-50593: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical9.3 Critical0%Nov 6, 2025
CVE-2022-50592: Improper Neutralization of Special Elements used in an SQL Command7.2 High9.3 Critical0%Nov 6, 2025
CVE-2022-50591: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical8.8 High0%Nov 6, 2025
CVE-2022-50590: Access of Resource Using Incompatible Type5.3 Medium8.8 High0%Nov 6, 2025
CVE-2022-50589: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical9.3 Critical1%Nov 6, 2025
CVE-2022-50596: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical7%Nov 6, 2025
CVE-2025-63551: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Nov 6, 2025
CVE-2025-60541: Server-Side Request Forgery (SSRF)7.3 HighN/A0%Nov 6, 2025
CVE-2025-31133: UNIX Symbolic Link (Symlink) Following7.8 High7.3 High0%Nov 6, 2025
CVE-2025-22397: Improper Limitation of a Pathname to a Restricted Directory6.7 MediumN/A0%Nov 6, 2025
CVE-2024-25621: Incorrect Execution-Assigned Permissions7.3 HighN/A0%Nov 6, 2025
CVE-2025-27919: Improper Access Control8.2 HighN/A0%Nov 6, 2025
CVE-2025-27918: Integer Overflow or Wraparound9.8 CriticalN/A0%Nov 6, 2025
CVE-2025-27917: NULL Pointer Dereference7.5 HighN/A0%Nov 6, 2025
CVE-2025-27916: Authentication Bypass by Spoofing7.5 HighN/A0%Nov 6, 2025
82951-82975 of 715808
‹›