The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-59991: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59990: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59989: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59988: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59987: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59986: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59985: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59984: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59983: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59982: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59981: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 9, 2025
CVE-2025-59980: Authentication Bypass by Primary Weakness6.5 Medium6.9 Medium0%Oct 9, 2025
CVE-2025-59978: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Oct 9, 2025
CVE-2025-11549: Stack-based Buffer Overflow8.8 High7.4 High0%Oct 9, 2025
CVE-2017-20203: Embedded Malicious CodeN/A9.3 Critical1%Oct 9, 2025
CVE-2025-11371: Files or Directories Accessible to External PartiesN/AN/A92%Oct 9, 2025
CVE-2025-61577: Stack-based Buffer Overflow7.5 HighN/A0%Oct 9, 2025
CVE-2025-61532: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 9, 2025
CVE-2025-60302: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 9, 2025
CVE-2025-60265: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 9, 2025
CVE-2025-59976: Files or Directories Accessible to External Parties6.5 Medium7.1 High0%Oct 9, 2025
CVE-2025-59975: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 9, 2025
CVE-2025-59974: Improper Neutralization of Input During Web Page Generation8.4 High9.3 Critical0%Oct 9, 2025
CVE-2025-59968: Undefined Security Weakness8.6 High7.7 High0%Oct 9, 2025
CVE-2025-59967: NULL Pointer Dereference6.5 Medium7.1 High0%Oct 9, 2025
85001-85025 of 571263