The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-24842: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-24838: Improper Privilege Management8.8 High7.7 High0%Nov 11, 2025
CVE-2025-24834: Protection Mechanism Failure6.5 Medium6.0 Medium0%Nov 11, 2025
CVE-2025-24519: Buffer Copy without Checking Size of Input6.5 Medium6.8 Medium0%Nov 11, 2025
CVE-2025-24516: Improper Access Control4.5 Medium6.8 Medium0%Nov 11, 2025
CVE-2025-24512: Improper Input Validation5.6 Medium5.7 Medium0%Nov 11, 2025
CVE-2025-24491: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-24327: Insecure Inherited Permissions6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-24314: Improper Access Control2.2 Low2.1 Low0%Nov 11, 2025
CVE-2025-24307: Improper Privilege Management2.0 Low2.3 Low0%Nov 11, 2025
CVE-2025-24299: Improper Input Validation8.8 High8.7 High0%Nov 11, 2025
CVE-2025-23361: Improper Control of Generation of Code7.8 HighN/A0%Nov 11, 2025
CVE-2025-23357: Improper Control of Generation of Code7.8 HighN/A0%Nov 11, 2025
CVE-2025-22391: Improper Access Control6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-20622: Sensitive Information in Resource Not Removed Before Reuse3.8 Low2.0 Low0%Nov 11, 2025
CVE-2025-20614: External Control of File Name or Path6.7 Medium5.6 Medium0%Nov 11, 2025
CVE-2025-20065: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-20056: Improper Input Validation4.4 Medium4.8 Medium0%Nov 11, 2025
CVE-2025-20050: Uncontrolled Search Path Element6.7 Medium5.4 Medium0%Nov 11, 2025
CVE-2025-20010: Use of Unmaintained Third Party Components7.8 High8.5 High0%Nov 11, 2025
CVE-2025-13032: Time-of-check Time-of-use (TOCTOU) Race Condition9.9 CriticalN/A0%Nov 11, 2025
CVE-2025-12944: Improper Input Validation8.8 High6.8 Medium0%Nov 11, 2025
CVE-2025-12943: Improper Certificate Validation7.5 High5.2 Medium0%Nov 11, 2025
CVE-2025-12942: Improper Input Validation7.5 High4.8 Medium0%Nov 11, 2025
CVE-2025-12940: Insertion of Sensitive Information into Log File5.5 Medium0.5 Low0%Nov 11, 2025
82701-82725 of 596643