The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-63025: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63024: Missing Authorization5.4 MediumN/A0%Dec 9, 2025
CVE-2025-63023: Missing Authorization5.3 MediumN/A0%Dec 9, 2025
CVE-2025-63015: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63013: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63012: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63011: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 9, 2025
CVE-2025-63010: Server-Side Request Forgery (SSRF)4.9 MediumN/A0%Dec 9, 2025
CVE-2025-63009: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Dec 9, 2025
CVE-2025-63008: Missing Authorization5.3 MediumN/A0%Dec 9, 2025
CVE-2025-63007: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63006: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-63003: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
CVE-2025-62999: Missing Authorization5.4 MediumN/A0%Dec 9, 2025
CVE-2025-62997: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Dec 9, 2025
CVE-2025-62996: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62995: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62994: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62993: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62873: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62872: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62871: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62870: Missing Authorization5.3 MediumN/A0%Dec 9, 2025
CVE-2025-62869: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
CVE-2025-62867: Missing Authorization4.3 MediumN/A0%Dec 9, 2025
80951-80975 of 395129