The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-64383: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64382: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64381: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64380: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64379: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64370: Missing Authorization5.3 MediumN/A0%Nov 13, 2025
CVE-2025-64369: Missing Authorization6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64292: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64277: Missing Authorization5.3 MediumN/A0%Nov 13, 2025
CVE-2025-64276: Missing Authorization6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64275: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64274: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64271: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64269: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64267: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64265: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-64264: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Nov 13, 2025
CVE-2025-64263: Missing Authorization5.4 MediumN/A0%Nov 13, 2025
CVE-2025-64262: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Nov 13, 2025
CVE-2025-64261: Missing Authorization5.4 MediumN/A0%Nov 13, 2025
CVE-2025-64259: Missing Authorization5.3 MediumN/A0%Nov 13, 2025
CVE-2025-8397: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 13, 2025
CVE-2025-12015: Missing Authorization4.3 MediumN/A0%Nov 13, 2025
CVE-2025-11769: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 13, 2025
CVE-2025-11260: Protection Mechanism Failure5.3 MediumN/A0%Nov 13, 2025
82451-82475 of 726570