The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-62913: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62912: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62911: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62910: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62909: Missing Authorization4.3 MediumN/A0%Oct 27, 2025
CVE-2025-62908: Undefined Security WeaknessN/AN/A0%Oct 27, 2025
CVE-2025-62907: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62906: Missing Authorization4.3 MediumN/A0%Oct 27, 2025
CVE-2025-62905: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62904: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62903: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62902: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Oct 27, 2025
CVE-2025-62900: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62899: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Oct 27, 2025
CVE-2025-62898: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62897: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Oct 27, 2025
CVE-2025-62896: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Oct 27, 2025
CVE-2025-62895: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Oct 27, 2025
CVE-2025-62894: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62893: Undefined Security WeaknessN/AN/A0%Oct 27, 2025
CVE-2025-62892: Missing Authorization5.3 MediumN/A0%Oct 27, 2025
CVE-2025-62891: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 27, 2025
CVE-2025-62890: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 27, 2025
CVE-2025-62889: Missing Authorization6.5 MediumN/A0%Oct 27, 2025
CVE-2025-62887: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 27, 2025
83551-83575 of 594533