The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-49958: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49957: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49956: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49955: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49954: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49953: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49952: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49951: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49950: Missing Authorization7.2 HighN/A0%Oct 22, 2025
CVE-2025-49949: Missing Authorization5.4 MediumN/A0%Oct 22, 2025
CVE-2025-49948: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49947: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49946: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49945: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49944: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2025
CVE-2025-49940: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49939: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49938: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49937: Missing Authorization4.3 MediumN/A0%Oct 22, 2025
CVE-2025-49936: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49935: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 22, 2025
CVE-2025-49934: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49933: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49932: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 22, 2025
CVE-2025-49931: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 22, 2025
83776-83800 of 703397