The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-56091: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56090: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56089: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Dec 11, 2025
CVE-2025-56088: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56087: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56086: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56085: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Dec 11, 2025
CVE-2025-56084: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56083: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56082: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 11, 2025
CVE-2025-56079: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Dec 11, 2025
CVE-2025-56077: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Dec 11, 2025
CVE-2025-14530: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 Low0%Dec 11, 2025
CVE-2025-14529: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Dec 11, 2025
CVE-2025-14046: Improper Neutralization of Input During Web Page Generation6.1 Medium8.6 High0%Dec 11, 2025
CVE-2025-13912: Observable DiscrepancyN/A1.0 Low0%Dec 11, 2025
CVE-2025-66048: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-66047: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-66046: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-66045: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-66044: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-66043: Stack-based Buffer Overflow9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-65474: Use of Incorrectly-Resolved Name or Reference9.8 CriticalN/A0%Dec 11, 2025
CVE-2025-65473: External Control of File Name or Path9.1 CriticalN/A0%Dec 11, 2025
CVE-2025-65472: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 11, 2025
80751-80775 of 586239