The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-46175: Missing Authorization7.5 HighN/A0%Nov 26, 2025
CVE-2025-62354: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Nov 26, 2025
CVE-2025-56396: Improper Access Control8.8 HighN/A0%Nov 26, 2025
CVE-2025-50402: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Nov 26, 2025
CVE-2025-50399: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Nov 26, 2025
CVE-2025-46174: Missing Authorization7.5 HighN/A0%Nov 26, 2025
CVE-2025-45311: Incorrect Privilege Assignment8.8 HighN/A0%Nov 26, 2025
CVE-2025-3747: Undefined Security WeaknessN/AN/AN/ANov 26, 2025
CVE-2025-13601: Integer Overflow or Wraparound7.7 HighN/A0%Nov 26, 2025
CVE-2025-9191: Deserialization of Untrusted Data6.3 MediumN/A0%Nov 26, 2025
CVE-2025-9163: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 26, 2025
CVE-2025-13674: Access of Uninitialized Pointer5.5 MediumN/A0%Nov 26, 2025
CVE-2025-62728: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Nov 26, 2025
CVE-2025-59390: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.8 CriticalN/A0%Nov 26, 2025
CVE-2025-13735: Out-of-bounds Read7.4 HighN/A0%Nov 26, 2025
CVE-2025-9558: Buffer Copy without Checking Size of Input7.6 HighN/A0%Nov 26, 2025
CVE-2025-9557: Buffer Copy without Checking Size of Input7.6 HighN/A0%Nov 26, 2025
CVE-2025-59820: Improper Validation of Specified Quantity in Input6.7 MediumN/A0%Nov 26, 2025
CVE-2025-55174: Incorrect Provision of Specified Functionality3.2 LowN/A0%Nov 26, 2025
CVE-2025-12061: Cross-Site Request Forgery (CSRF)8.6 HighN/A0%Nov 26, 2025
CVE-2025-64983: Active Debug Code8.0 High8.6 High0%Nov 26, 2025
CVE-2025-66235: Undefined Security WeaknessN/AN/AN/ANov 26, 2025
CVE-2025-66234: Undefined Security WeaknessN/AN/AN/ANov 26, 2025
CVE-2025-66233: Undefined Security WeaknessN/AN/AN/ANov 26, 2025
CVE-2025-66232: Undefined Security WeaknessN/AN/AN/ANov 26, 2025
81676-81700 of 742608