The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-40182: Undefined Security Weakness7.8 HighN/A0%Nov 12, 2025
CVE-2025-40181: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-40180: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-40179: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-40178: Undefined Security WeaknessN/AN/A0%Nov 12, 2025
CVE-2025-64186: Improper Verification of Cryptographic Signature8.7 HighN/A0%Nov 12, 2025
CVE-2025-64170: Missing Password Field Masking3.8 LowN/A0%Nov 12, 2025
CVE-2025-63396: Improper Locking3.3 LowN/A0%Nov 12, 2025
CVE-2025-46608: Improper Access Control9.1 CriticalN/A0%Nov 12, 2025
CVE-2025-36223: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Nov 12, 2025
CVE-2025-13063: Missing Authorization7.3 High5.5 Medium0%Nov 12, 2025
CVE-2025-13061: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Nov 12, 2025
CVE-2025-8485: Incorrect Default Permissions7.3 High7.0 High0%Nov 12, 2025
CVE-2025-8421: Incorrect Default Permissions6.6 Medium5.2 Medium0%Nov 12, 2025
CVE-2025-64117: Cross-Site Request Forgery (CSRF)4.6 MediumN/A0%Nov 12, 2025
CVE-2025-46428: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Nov 12, 2025
CVE-2025-46427: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Nov 12, 2025
CVE-2025-27368: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 12, 2025
CVE-2025-13060: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 12, 2025
CVE-2025-13059: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Nov 12, 2025
CVE-2025-13058: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Nov 12, 2025
CVE-2025-12048: Unrestricted Upload of File with Dangerous Type7.5 High7.7 High0%Nov 12, 2025
CVE-2025-12047: Improper Certificate Validation5.3 Medium6.0 Medium0%Nov 12, 2025
CVE-2025-10495: Improper Certificate Validation7.5 High7.7 High0%Nov 12, 2025
CVE-2024-48829: Improper Control of Generation of Code6.7 MediumN/A0%Nov 12, 2025
82501-82525 of 594173