The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-58227: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58228: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58229: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58230: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58232: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58233: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58234: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58235: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58236: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58237: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58238: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58239: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58240: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58241: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58244: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Sep 22, 2025
CVE-2025-58245: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 22, 2025
CVE-2025-58248: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58249: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58250: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Sep 22, 2025
CVE-2025-58251: Missing Authorization4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58252: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Sep 22, 2025
CVE-2025-58254: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58255: Cross-Site Request Forgery (CSRF)9.6 CriticalN/A0%Sep 22, 2025
CVE-2025-58257: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
CVE-2025-58260: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 22, 2025
86001-86025 of 552652