The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-67965: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-67962: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Dec 16, 2025
CVE-2025-67951: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-67950: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 16, 2025
CVE-2025-67948: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Dec 16, 2025
CVE-2025-67929: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-67912: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-66167: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66166: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66165: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66164: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66163: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66162: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66161: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66147: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66134: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-66133: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66132: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66131: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66130: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66129: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66128: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66127: Missing Authorization5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66126: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Dec 16, 2025
CVE-2025-66125: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Dec 16, 2025
80301-80325 of 582654