The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-15125: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15124: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15123: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15122: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15121: Exposure of Sensitive Information to an Unauthorized Actor2.4 Low4.8 Medium0%Dec 28, 2025
CVE-2025-15120: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15119: Improper Authorization3.1 Low1.3 Low0%Dec 28, 2025
CVE-2025-15118: Improper Authorization4.3 Medium2.1 Low0%Dec 28, 2025
CVE-2025-15117: Deserialization of Untrusted Data3.1 Low2.3 Low0%Dec 28, 2025
CVE-2025-15116: Concurrent Execution using Shared Resource with Improper Synchronization3.7 Low2.9 Low0%Dec 28, 2025
CVE-2025-68972: Improper Verification of Cryptographic Signature5.9 MediumN/A0%Dec 27, 2025
CVE-2025-15110: Unrestricted Upload of File with Dangerous Type7.2 High2.0 Low0%Dec 27, 2025
CVE-2025-14180: NULL Pointer Dereference7.5 High8.2 High1%Dec 27, 2025
CVE-2025-14178: Out-of-bounds Write6.5 MediumN/A0%Dec 27, 2025
CVE-2025-14177: Out-of-bounds Read7.5 High6.3 Medium1%Dec 27, 2025
CVE-2025-15109: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Dec 27, 2025
CVE-2025-15108: Use of Hard-coded Cryptographic Key3.7 Low2.9 Low0%Dec 27, 2025
CVE-2025-54322: Improper Neutralization of Directives in Dynamically Evaluated Code9.8 CriticalN/A15%Dec 27, 2025
CVE-2025-15107: Use of Hard-coded Cryptographic Key8.1 High2.9 Low1%Dec 27, 2025
CVE-2025-15106: Improper Authorization4.3 Medium2.1 Low0%Dec 27, 2025
CVE-2025-15105: Use of Hard-coded Cryptographic Key5.9 Medium2.9 Low1%Dec 27, 2025
CVE-2025-68952: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Dec 27, 2025
CVE-2025-68948: Use of Hard-coded Cryptographic Key8.1 High6.9 Medium0%Dec 27, 2025
CVE-2025-68927: Improper Neutralization of Input During Web Page Generation6.1 Medium7.3 High0%Dec 27, 2025
CVE-2025-59946: Use After Free7.5 HighN/A0%Dec 27, 2025
79176-79200 of 402816