The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-53899: Server-Side Request Forgery (SSRF)9.8 Critical5.1 Medium0%Dec 16, 2025
CVE-2023-53898: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
CVE-2023-53897: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
CVE-2023-53895: Improper Authorization9.8 Critical9.3 Critical1%Dec 16, 2025
CVE-2023-53894: Weak Authentication9.8 Critical9.3 Critical0%Dec 16, 2025
CVE-2025-68313: Undefined Security Weakness7.1 HighN/A0%Dec 16, 2025
CVE-2025-68307: Undefined Security WeaknessN/AN/A0%Dec 16, 2025
CVE-2025-68305: Undefined Security WeaknessN/AN/A0%Dec 16, 2025
CVE-2025-68299: Undefined Security WeaknessN/AN/A0%Dec 16, 2025
CVE-2025-68296: Undefined Security WeaknessN/AN/A0%Dec 16, 2025
CVE-2025-68269: Acceptance of Extraneous Untrusted Data With Trusted Data5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68268: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68267: Least Privilege Violation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68166: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68165: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68164: Observable Discrepancy2.7 LowN/A0%Dec 16, 2025
CVE-2025-68163: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Dec 16, 2025
CVE-2025-68162: Inclusion of Functionality from Untrusted Control Sphere2.7 LowN/A0%Dec 16, 2025
CVE-2025-65427: Improper Restriction of Excessive Authentication Attempts6.5 MediumN/A0%Dec 16, 2025
CVE-2025-65319: Protection Mechanism Failure9.1 CriticalN/A0%Dec 16, 2025
CVE-2025-65318: Protection Mechanism Failure9.1 CriticalN/A0%Dec 16, 2025
CVE-2025-64012: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Dec 16, 2025
CVE-2025-62329: Insufficient Session Expiration5.0 MediumN/A0%Dec 16, 2025
CVE-2025-14432: Insertion of Sensitive Information into Log File4.9 Medium8.1 High0%Dec 16, 2025
CVE-2025-10450: Exposure of Private Personal Information to an Unauthorized Actor7.5 High8.3 High0%Dec 16, 2025
80151-80175 of 598912
‹›