The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-54831: Exposure of Sensitive Information Due to Incompatible Policies6.5 MediumN/A1%Sep 26, 2025
CVE-2025-1396: Observable Discrepancy3.7 LowN/A0%Sep 26, 2025
CVE-2025-35027: Improper Neutralization of Special Elements used in an OS Command7.3 HighN/A3%Sep 26, 2025
CVE-2025-10490: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Sep 26, 2025
CVE-2025-10307: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Sep 26, 2025
CVE-2025-10180: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 26, 2025
CVE-2025-10137: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Sep 26, 2025
CVE-2025-10136: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 26, 2025
CVE-2025-9490: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 26, 2025
CVE-2025-10747: Unrestricted Upload of File with Dangerous Type7.2 HighN/A1%Sep 26, 2025
CVE-2025-9985: Insertion of Sensitive Information into Log File5.3 MediumN/A12%Sep 26, 2025
CVE-2025-9984: Missing Authorization5.3 MediumN/A0%Sep 26, 2025
CVE-2025-10037: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Sep 26, 2025
CVE-2025-10036: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Sep 26, 2025
CVE-2025-9044: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 26, 2025
CVE-2025-11000: NULL Pointer Dereference3.3 Low1.9 Low0%Sep 26, 2025
CVE-2025-10745: Use of Insufficiently Random Values5.3 MediumN/A0%Sep 26, 2025
CVE-2025-10377: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 26, 2025
CVE-2025-10173: Missing Authorization2.7 LowN/A0%Sep 26, 2025
CVE-2025-60033: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
CVE-2025-60032: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
CVE-2025-60031: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
CVE-2025-60030: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
CVE-2025-60029: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
CVE-2025-60028: Undefined Security WeaknessN/AN/AN/ASep 26, 2025
85751-85775 of 531951