The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-64233: Deserialization of Untrusted Data9.8 CriticalN/A0%Dec 18, 2025
CVE-2025-64231: Unrestricted Upload of File with Dangerous Type9.9 CriticalN/A0%Dec 18, 2025
CVE-2025-64230: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Dec 18, 2025
CVE-2025-64227: Deserialization of Untrusted Data9.8 CriticalN/A0%Dec 18, 2025
CVE-2025-64225: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A0%Dec 18, 2025
CVE-2025-64223: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Dec 18, 2025
CVE-2025-64222: Missing Authorization7.5 HighN/A0%Dec 18, 2025
CVE-2025-64221: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64218: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-64217: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64214: Missing Authorization7.5 HighN/A0%Dec 18, 2025
CVE-2025-64213: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-64209: Missing Authorization7.5 HighN/A0%Dec 18, 2025
CVE-2025-64207: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64206: Deserialization of Untrusted Data9.8 CriticalN/A0%Dec 18, 2025
CVE-2025-64205: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Dec 18, 2025
CVE-2025-64203: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64193: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 18, 2025
CVE-2025-64192: Missing Authorization6.3 MediumN/A0%Dec 18, 2025
CVE-2025-64191: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64189: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-64188: Incorrect Privilege Assignment9.8 CriticalN/A0%Dec 18, 2025
CVE-2025-63039: Missing Authorization6.5 MediumN/A0%Dec 18, 2025
CVE-2025-60182: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2025
CVE-2025-60180: Deserialization of Untrusted Data9.8 CriticalN/A0%Dec 18, 2025
79851-79875 of 407675
‹›