The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-14057: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jan 7, 2026
CVE-2025-14053: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-14028: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jan 7, 2026
CVE-2025-13990: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 7, 2026
CVE-2025-13974: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jan 7, 2026
CVE-2025-13887: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13849: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13848: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13847: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13841: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13801: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Jan 7, 2026
CVE-2025-13722: Missing Authorization5.3 MediumN/A0%Jan 7, 2026
CVE-2025-13694: Use of Less Trusted Source5.3 MediumN/A0%Jan 7, 2026
CVE-2025-13667: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13657: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 7, 2026
CVE-2025-13531: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13529: Missing Authorization5.3 MediumN/A0%Jan 7, 2026
CVE-2025-13527: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 7, 2026
CVE-2025-13521: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 7, 2026
CVE-2025-13520: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 7, 2026
CVE-2025-13519: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Jan 7, 2026
CVE-2025-13497: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 7, 2026
CVE-2025-13496: Missing Authorization5.3 MediumN/A0%Jan 7, 2026
CVE-2025-13493: Missing Authorization7.5 HighN/A0%Jan 7, 2026
CVE-2025-13419: Missing Authorization5.3 MediumN/A0%Jan 7, 2026
89826-89850 of 413066