The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-59146: Server-Side Request Forgery (SSRF)8.5 HighN/A0%Oct 9, 2025
CVE-2025-55200: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 9, 2025
CVE-2025-4615: Improper Neutralization of Script in Attributes in a Web Page7.2 High5.5 Medium0%Oct 9, 2025
CVE-2025-4614: Exposure of Sensitive System Information to an Unauthorized Control Sphere2.7 Low4.8 Medium0%Oct 9, 2025
CVE-2025-11552: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 9, 2025
CVE-2025-60267: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 9, 2025
CVE-2025-11573: Improper Validation of Syntactic Correctness of Input7.5 High8.7 High0%Oct 9, 2025
CVE-2025-11551: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 9, 2025
CVE-2025-11550: NULL Pointer Dereference6.5 Medium5.7 Medium0%Oct 9, 2025
CVE-2025-60304: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 9, 2025
CVE-2025-60266: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 9, 2025
CVE-2025-60010: Not Using Password Aging5.4 Medium5.3 Medium0%Oct 9, 2025
CVE-2025-60009: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-60006: Improper Neutralization of Special Elements used in an OS Command5.3 Medium4.8 Medium0%Oct 9, 2025
CVE-2025-60004: Improper Check for Unusual or Exceptional Conditions7.5 High8.7 High0%Oct 9, 2025
CVE-2025-60002: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-60001: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-60000: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59999: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59998: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59997: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59996: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59995: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59994: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59993: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
84976-85000 of 399626