The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-57934: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 22, 2025
CVE-2025-57942: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 22, 2025
CVE-2025-57949: Missing Authorization5.4 MediumN/A0%Sep 22, 2025
CVE-2025-57982: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-57983: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Sep 22, 2025
CVE-2025-57988: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-57997: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58015: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Sep 22, 2025
CVE-2025-58016: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58017: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58018: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58019: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58020: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58022: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58025: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58026: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58027: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58028: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58029: Missing Authorization5.3 MediumN/A0%Sep 22, 2025
CVE-2025-58030: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58031: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58033: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58199: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58200: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58220: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
85976-86000 of 552652