The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-63388: Origin Validation Error9.1 CriticalN/A0%Dec 18, 2025
CVE-2025-63386: Origin Validation Error9.1 CriticalN/A0%Dec 18, 2025
CVE-2025-14878: Stack-based Buffer Overflow9.8 Critical8.9 High1%Dec 18, 2025
CVE-2025-14877: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Dec 18, 2025
CVE-2025-14823: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Dec 18, 2025
CVE-2025-9787: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 18, 2025
CVE-2025-7358: Use of Hard-coded Credentials7.5 HighN/A0%Dec 18, 2025
CVE-2025-7047: Missing Authorization4.3 MediumN/A0%Dec 18, 2025
CVE-2025-65011: Direct RequestN/A7.1 High0%Dec 18, 2025
CVE-2025-65010: Missing Authentication for Critical FunctionN/A7.1 High0%Dec 18, 2025
CVE-2025-65009: Plaintext Storage of a PasswordN/A7.1 High0%Dec 18, 2025
CVE-2025-65008: Improper Neutralization of Special Elements used in an OS CommandN/A9.4 Critical3%Dec 18, 2025
CVE-2025-65007: Missing Authentication for Critical FunctionN/A8.7 High0%Dec 18, 2025
CVE-2025-64469: Stack-based Buffer Overflow7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64468: Use After Free7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64467: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64466: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64465: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64464: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64463: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64462: Out-of-bounds Read7.8 High8.5 High0%Dec 18, 2025
CVE-2025-64461: Out-of-bounds Write7.8 High8.5 High0%Dec 18, 2025
CVE-2025-63757: Integer Overflow or Wraparound7.5 HighN/A0%Dec 18, 2025
CVE-2025-1031: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Dec 18, 2025
CVE-2025-1030: Exposure of Private Personal Information to an Unauthorized Actor7.5 HighN/A0%Dec 18, 2025
79826-79850 of 403146