The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-62070: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62069: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62068: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62063: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62062: Insertion of Sensitive Information Into Sent Data5.5 MediumN/A0%Oct 22, 2025
CVE-2025-62061: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62060: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62058: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62054: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 22, 2025
CVE-2025-62052: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62048: Missing Authorization5.4 MediumN/A0%Oct 22, 2025
CVE-2025-62042: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62029: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 22, 2025
CVE-2025-62027: Missing Authorization5.4 MediumN/A0%Oct 22, 2025
CVE-2025-62026: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62025: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 22, 2025
CVE-2025-62024: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62023: Improper Control of Generation of Code9.0 CriticalN/A0%Oct 22, 2025
CVE-2025-62022: Missing Authorization7.5 HighN/A0%Oct 22, 2025
CVE-2025-62021: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62020: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-62019: Missing Authorization6.5 MediumN/A0%Oct 22, 2025
CVE-2025-62015: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 22, 2025
CVE-2025-62013: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-62009: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 22, 2025
83701-83725 of 403358
‹›