The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-12602: Out-of-bounds Write9.8 Critical2.3 Low0%Nov 1, 2025
CVE-2025-12601: Undefined Security Weakness7.5 High10.0 Critical0%Nov 1, 2025
CVE-2025-12600: Undefined Security Weakness9.8 Critical10.0 Critical0%Nov 1, 2025
CVE-2025-12599: Use of Hard-coded Cryptographic Key9.8 Critical10.0 Critical0%Nov 1, 2025
CVE-2025-36367: Missing Authorization8.8 HighN/A0%Nov 1, 2025
CVE-2025-6990: Improper Control of Generation of Code8.8 HighN/A0%Nov 1, 2025
CVE-2025-6988: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 1, 2025
CVE-2025-6574: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Nov 1, 2025
CVE-2025-12171: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Nov 1, 2025
CVE-2025-12137: External Control of File Name or Path4.9 MediumN/A0%Nov 1, 2025
CVE-2025-11755: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Nov 1, 2025
CVE-2025-11499: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%Nov 1, 2025
CVE-2025-10487: Improper Control of Generation of Code7.3 HighN/A0%Nov 1, 2025
CVE-2025-12180: Missing Authorization4.3 MediumN/A0%Nov 1, 2025
CVE-2025-12090: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 1, 2025
CVE-2025-12038: Incorrect Authorization4.3 MediumN/A0%Nov 1, 2025
CVE-2025-11983: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 1, 2025
CVE-2025-11740: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Nov 1, 2025
CVE-2025-11502: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 1, 2025
CVE-2025-5949: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Nov 1, 2025
CVE-2025-12118: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 1, 2025
CVE-2025-11995: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 1, 2025
CVE-2025-11927: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Nov 1, 2025
CVE-2025-11377: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 1, 2025
CVE-2025-12367: Improper Authorization4.3 MediumN/A0%Nov 1, 2025
83076-83100 of 396383
‹›