The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-12579: Missing Authorization5.3 MediumN/A0%Nov 27, 2025
CVE-2025-12578: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 27, 2025
CVE-2025-0658: Improper Input ValidationN/A8.7 High0%Nov 27, 2025
CVE-2025-0657: Improper Validation of Array IndexN/A8.8 High0%Nov 27, 2025
CVE-2024-5540: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Nov 27, 2025
CVE-2024-5539: Incorrect AuthorizationN/A9.2 Critical0%Nov 27, 2025
CVE-2025-66040: Improper Neutralization of Input During Web Page Generation3.6 LowN/A0%Nov 27, 2025
CVE-2025-66035: Insertion of Sensitive Information Into Sent DataN/A7.7 High0%Nov 26, 2025
CVE-2025-66031: Uncontrolled Recursion7.5 High8.7 High0%Nov 26, 2025
CVE-2025-66030: Integer Overflow or Wraparound5.3 Medium6.3 Medium0%Nov 26, 2025
CVE-2025-64344: Stack-based Buffer Overflow7.5 HighN/A0%Nov 26, 2025
CVE-2025-64335: NULL Pointer Dereference7.5 HighN/A0%Nov 26, 2025
CVE-2025-64334: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 26, 2025
CVE-2025-64333: Stack-based Buffer Overflow7.5 HighN/A0%Nov 26, 2025
CVE-2025-64332: Stack-based Buffer Overflow7.5 HighN/A0%Nov 26, 2025
CVE-2025-64331: Stack-based Buffer Overflow7.5 HighN/A0%Nov 26, 2025
CVE-2025-64330: Heap-based Buffer Overflow7.5 HighN/A0%Nov 26, 2025
CVE-2025-62593: Improper Control of Generation of Code8.8 High9.4 Critical0%Nov 26, 2025
CVE-2025-40934: Improper Verification of Cryptographic Signature9.3 CriticalN/A0%Nov 26, 2025
CVE-2020-36874: Missing Authentication for Critical FunctionN/A8.7 High0%Nov 26, 2025
CVE-2020-36871: Missing Authentication for Critical FunctionN/A8.7 High0%Nov 26, 2025
CVE-2019-25227: Missing Authentication for Critical FunctionN/A8.7 High0%Nov 26, 2025
CVE-2019-25226: Missing Authentication for Critical FunctionN/A8.7 High0%Nov 26, 2025
CVE-2020-36872: Uncontrolled Resource ConsumptionN/A8.7 High0%Nov 26, 2025
CVE-2020-36873: Missing Authentication for Critical FunctionN/A8.7 High1%Nov 26, 2025
81651-81675 of 742608