The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-15150: Stack-based Buffer Overflow7.8 High4.8 Medium0%Dec 28, 2025
CVE-2025-15149: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Dec 28, 2025
CVE-2025-15148: Improper Control of Generation of Code7.2 High2.0 Low0%Dec 28, 2025
CVE-2025-15146: Improper Neutralization of Input During Web Page Generation4.8 Medium1.9 Low0%Dec 28, 2025
CVE-2025-68973: Multiple Operations on Resource in Single-Operation Context7.8 HighN/A0%Dec 28, 2025
CVE-2025-15145: Improper Neutralization of Input During Web Page Generation6.1 Medium1.9 Low0%Dec 28, 2025
CVE-2025-15144: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 28, 2025
CVE-2025-15143: Improper Neutralization of Special Elements used in an SQL Command4.7 Medium2.0 Low0%Dec 28, 2025
CVE-2025-15142: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Dec 28, 2025
CVE-2025-15141: Exposure of Sensitive Information to an Unauthorized Actor3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15140: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Dec 28, 2025
CVE-2025-15139: Improper Neutralization of Special Elements used in a Command8.8 High2.1 Low13%Dec 28, 2025
CVE-2025-15138: Improper Limitation of a Pathname to a Restricted Directory7.2 High2.0 Low1%Dec 28, 2025
CVE-2025-15137: Improper Neutralization of Special Elements used in a Command8.8 High7.4 High11%Dec 28, 2025
CVE-2025-15136: Improper Neutralization of Special Elements used in a Command8.8 High7.4 High11%Dec 28, 2025
CVE-2025-15135: Improper Authentication6.3 Medium2.1 Low0%Dec 28, 2025
CVE-2025-15134: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 28, 2025
CVE-2025-15133: Improper Neutralization of Special Elements used in a Command8.8 High2.1 Low8%Dec 28, 2025
CVE-2025-15132: Improper Neutralization of Special Elements used in a Command8.8 High2.1 Low8%Dec 28, 2025
CVE-2025-15131: Improper Neutralization of Special Elements used in a Command8.8 High2.1 Low8%Dec 28, 2025
CVE-2025-15130: Improper Control of Generation of Code4.7 Medium2.0 Low0%Dec 28, 2025
CVE-2025-15129: Improper Control of Generation of Code6.3 Medium2.1 Low0%Dec 28, 2025
CVE-2025-15128: Plaintext Storage of a Password5.3 Medium5.5 Medium0%Dec 28, 2025
CVE-2025-15127: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical5.5 Medium0%Dec 28, 2025
CVE-2025-15126: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
79151-79175 of 402816
‹›