The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-66646: NULL Pointer Dereference7.5 High1.7 Low0%Dec 17, 2025
CVE-2025-66397: Improper Access Control8.3 HighN/A0%Dec 17, 2025
CVE-2025-66396: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Dec 17, 2025
CVE-2025-65233: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 17, 2025
CVE-2025-34438: Authorization Bypass Through User-Controlled Key8.1 High5.3 Medium0%Dec 17, 2025
CVE-2025-34437: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Dec 17, 2025
CVE-2025-14760: Use of a Broken or Risky Cryptographic Algorithm5.3 Medium6.0 Medium0%Dec 17, 2025
CVE-2025-14759: Use of a Broken or Risky Cryptographic Algorithm5.3 Medium6.0 Medium0%Dec 17, 2025
CVE-2025-34435: Authorization Bypass Through User-Controlled KeyN/A8.7 High0%Dec 17, 2025
CVE-2025-34436: Authorization Bypass Through User-Controlled KeyN/A8.7 High0%Dec 17, 2025
CVE-2025-34434: Missing Authentication for Critical FunctionN/A9.3 Critical0%Dec 17, 2025
CVE-2025-34439: URL Redirection to Untrusted SiteN/A4.8 Medium0%Dec 17, 2025
CVE-2025-34440: URL Redirection to Untrusted SiteN/A4.8 Medium0%Dec 17, 2025
CVE-2025-34442: Exposure of Sensitive System Information to an Unauthorized Control SphereN/A6.9 Medium41%Dec 17, 2025
CVE-2025-34441: Exposure of Private Personal Information to an Unauthorized ActorN/A6.9 Medium41%Dec 17, 2025
CVE-2025-67174: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Dec 17, 2025
CVE-2025-67173: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Dec 17, 2025
CVE-2025-67171: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Dec 17, 2025
CVE-2025-67170: Improper Input Validation6.1 MediumN/A0%Dec 17, 2025
CVE-2025-67168: Use of Password Hash With Insufficient Computational Effort5.3 MediumN/A0%Dec 17, 2025
CVE-2025-66953: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 17, 2025
CVE-2025-66395: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Dec 17, 2025
CVE-2025-62521: Improper Control of Generation of Code10.0 CriticalN/A0%Dec 17, 2025
CVE-2025-14828: Undefined Security WeaknessN/AN/AN/ADec 17, 2025
CVE-2025-14081: Incorrect Authorization4.3 MediumN/A0%Dec 17, 2025
80051-80075 of 598912
‹›