The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-66294: Improper Control of Generation of Code8.8 High8.7 High38%Dec 1, 2025
CVE-2025-66206: Improper Limitation of a Pathname to a Restricted Directory6.8 MediumN/A0%Dec 1, 2025
CVE-2025-66205: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Dec 1, 2025
CVE-2025-65840: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 1, 2025
CVE-2025-65621: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 1, 2025
CVE-2025-58044: URL Redirection to Untrusted Site6.1 Medium5.5 Medium0%Dec 1, 2025
CVE-2025-55749: Improper Access Control7.5 High8.7 High2%Dec 1, 2025
CVE-2024-51999: Undefined Security WeaknessN/AN/A0%Dec 1, 2025
CVE-2025-65838: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Dec 1, 2025
CVE-2025-65836: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Dec 1, 2025
CVE-2025-63317: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 1, 2025
CVE-2025-51683: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 1, 2025
CVE-2025-51682: Client-Side Enforcement of Server-Side Security9.8 CriticalN/A0%Dec 1, 2025
CVE-2025-12756: Incorrect Authorization4.3 MediumN/A0%Dec 1, 2025
CVE-2025-65407: Use After Free6.5 MediumN/A0%Dec 1, 2025
CVE-2025-63365: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Dec 1, 2025
CVE-2025-34297: Integer Overflow or WraparoundN/A8.6 High0%Dec 1, 2025
CVE-2025-11772: Uncontrolled Search Path Element6.6 MediumN/A0%Dec 1, 2025
CVE-2025-13837: Uncontrolled Resource Consumption5.5 Medium2.1 Low0%Dec 1, 2025
CVE-2025-13836: Uncontrolled Resource Consumption7.5 High6.3 Medium0%Dec 1, 2025
CVE-2025-13835: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 1, 2025
CVE-2025-13653: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Dec 1, 2025
CVE-2025-7007: NULL Pointer Dereference7.5 HighN/A0%Dec 1, 2025
CVE-2025-65794: Undefined Security WeaknessN/AN/AN/ADec 1, 2025
CVE-2025-65793: Undefined Security WeaknessN/AN/AN/ADec 1, 2025
81476-81500 of 838837
‹›