The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-11171: Missing Authentication for Critical Function5.3 MediumN/A0%Oct 8, 2025
CVE-2025-10635: Undefined Security Weakness7.7 HighN/A0%Oct 8, 2025
CVE-2025-11434: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-11433: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Oct 8, 2025
CVE-2025-11432: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-11204: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Oct 8, 2025
CVE-2025-11431: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 8, 2025
CVE-2025-11430: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-10587: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 8, 2025
CVE-2025-10494: External Control of File Name or Path8.1 HighN/A0%Oct 8, 2025
CVE-2025-11426: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Oct 8, 2025
CVE-2025-11425: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Oct 8, 2025
CVE-2025-61787: Improper Neutralization of Special Elements used in a Command8.1 HighN/A0%Oct 8, 2025
CVE-2025-11424: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-11423: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 Critical8.9 High0%Oct 8, 2025
CVE-2025-11422: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-11421: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Oct 8, 2025
CVE-2025-61786: Improper Privilege Management3.3 LowN/A0%Oct 8, 2025
CVE-2025-61785: Incorrect Privilege Assignment3.3 LowN/A0%Oct 8, 2025
CVE-2025-48981: Missing Encryption of Sensitive Data8.6 HighN/A0%Oct 8, 2025
CVE-2025-11420: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 8, 2025
CVE-2025-11418: Stack-based Buffer Overflow9.8 Critical8.9 High0%Oct 8, 2025
CVE-2025-61999: Improper Neutralization of Input During Web Page Generation4.3 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-61998: Improper Neutralization of Input During Web Page Generation4.3 Medium4.8 Medium0%Oct 8, 2025
CVE-2025-61997: Improper Neutralization of Input During Web Page Generation4.3 Medium4.8 Medium0%Oct 8, 2025
85126-85150 of 397000