The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-60124: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60123: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60122: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60121: Missing Authorization5.3 MediumN/A0%Sep 26, 2025
CVE-2025-60120: Missing Authorization5.3 MediumN/A0%Sep 26, 2025
CVE-2025-60119: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Sep 26, 2025
CVE-2025-60118: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Sep 26, 2025
CVE-2025-60117: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60116: Missing Authorization5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60115: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60114: Improper Control of Generation of Code6.6 MediumN/A0%Sep 26, 2025
CVE-2025-60113: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60112: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60111: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Sep 26, 2025
CVE-2025-60110: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Sep 26, 2025
CVE-2025-60109: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Sep 26, 2025
CVE-2025-60108: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Sep 26, 2025
CVE-2025-60107: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Sep 26, 2025
CVE-2025-60106: Missing Authorization4.9 MediumN/A0%Sep 26, 2025
CVE-2025-60105: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60104: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60103: Missing Authorization5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60102: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60101: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60100: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Sep 26, 2025
85701-85725 of 543526