The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-48588: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48586: Unintended Proxy or Intermediary7.8 HighN/A0%Dec 8, 2025
CVE-2025-48584: Uncontrolled Resource Consumption5.5 MediumN/A0%Dec 8, 2025
CVE-2025-48583: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48580: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-48576: Uncontrolled Resource Consumption5.5 MediumN/A0%Dec 8, 2025
CVE-2025-48575: Missing Authorization7.8 HighN/A0%Dec 8, 2025
CVE-2025-48573: Execution with Unnecessary Privileges7.8 HighN/A0%Dec 8, 2025
CVE-2025-48555: Unintended Proxy or Intermediary7.8 HighN/A0%Dec 8, 2025
CVE-2025-48536: Unintended Proxy or Intermediary7.8 HighN/A0%Dec 8, 2025
CVE-2025-48525: Improper Input Validation7.8 HighN/A0%Dec 8, 2025
CVE-2025-32329: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-32328: Undefined Security Weakness7.8 HighN/A0%Dec 8, 2025
CVE-2025-32319: Missing Authorization6.7 MediumN/A0%Dec 8, 2025
CVE-2025-22432: Improper Input Validation6.7 MediumN/A0%Dec 8, 2025
CVE-2025-42620: Improper Neutralization of Input During Web Page GenerationN/A8.3 High0%Dec 8, 2025
CVE-2025-13308: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 6, 2025
CVE-2025-13426: Improper Control of Dynamically-Managed Code ResourcesN/A8.7 High0%Dec 5, 2025
CVE-2025-66566: Insertion of Sensitive Information Into Sent DataN/A8.2 High1%Dec 5, 2025
CVE-2025-66562: Improper Neutralization of Input During Web Page Generation9.6 Critical8.9 High1%Dec 5, 2025
CVE-2025-66554: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Dec 5, 2025
CVE-2025-66514: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Dec 5, 2025
CVE-2025-66563: Improper Neutralization of Input During Web Page Generation6.1 Medium7.1 High0%Dec 4, 2025
CVE-2025-66561: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 4, 2025
CVE-2025-6946: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Dec 4, 2025
4576-4600 of 16528
‹›