The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-64437: Improper Link Resolution Before File Access5.0 MediumN/A0%Nov 7, 2025
CVE-2025-64436: Improper Privilege Management5.3 Medium6.9 Medium0%Nov 7, 2025
CVE-2025-64435: Improper Check or Handling of Exceptional Conditions5.3 MediumN/A0%Nov 7, 2025
CVE-2025-64434: Improper Authentication4.7 MediumN/A0%Nov 7, 2025
CVE-2025-64433: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Nov 7, 2025
CVE-2025-37736: Incorrect Authorization8.8 HighN/A0%Nov 7, 2025
CVE-2025-63420: Improper Neutralization of Input During Web Page Generation4.1 MediumN/A0%Nov 7, 2025
CVE-2025-60574: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Nov 7, 2025
CVE-2025-12418: Improper Link Resolution Before File AccessN/A5.6 Medium0%Nov 7, 2025
CVE-2020-36870: Improper Control of Generation of CodeN/A9.2 Critical0%Nov 7, 2025
CVE-2025-64481: URL Redirection to Untrusted SiteN/A2.7 Low0%Nov 7, 2025
CVE-2025-64442: Improper Neutralization of Input During Web Page Generation6.1 Medium7.1 High0%Nov 7, 2025
CVE-2025-64439: Deserialization of Untrusted DataN/A7.4 High1%Nov 7, 2025
CVE-2025-63544: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63543: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-12902: Improper Initialization4.4 MediumN/A0%Nov 7, 2025
CVE-2025-12896: Improper Restriction of Excessive Authentication Attempts4.4 MediumN/A0%Nov 7, 2025
CVE-2025-12875: Out-of-bounds Write5.3 Medium1.9 Low0%Nov 7, 2025
CVE-2025-12863: Undefined Security WeaknessN/AN/A0%Nov 7, 2025
CVE-2025-63640: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63639: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-63638: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 7, 2025
CVE-2025-10230: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A39%Nov 7, 2025
CVE-2025-7700: NULL Pointer Dereference5.3 MediumN/A0%Nov 7, 2025
CVE-2025-64432: Improper Authentication4.7 MediumN/A0%Nov 7, 2025
82876-82900 of 715808