The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-63298: Path Traversal: '../filedir'8.2 HighN/A0%Oct 30, 2025
CVE-2025-62265: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 30, 2025
CVE-2025-57109: Use After Free6.5 MediumN/A0%Oct 30, 2025
CVE-2025-52180: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-52179: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-36137: Execution with Unnecessary Privileges7.2 HighN/A0%Oct 30, 2025
CVE-2025-64118: Concurrent Execution using Shared Resource with Improper SynchronizationN/A6.1 Medium0%Oct 30, 2025
CVE-2025-64116: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Oct 30, 2025
CVE-2025-64115: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Oct 30, 2025
CVE-2025-64112: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Oct 30, 2025
CVE-2025-62266: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Oct 30, 2025
CVE-2025-56313: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-64096: Stack-based Buffer Overflow8.8 HighN/A0%Oct 30, 2025
CVE-2025-63885: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-62795: Incorrect Authorization7.1 HighN/A0%Oct 30, 2025
CVE-2025-62726: Inclusion of Functionality from Untrusted Control Sphere8.8 HighN/A0%Oct 30, 2025
CVE-2025-61196: Improper Control of Generation of Code8.8 HighN/A0%Oct 30, 2025
CVE-2025-61121: Unprotected Transport of Credentials7.5 HighN/A0%Oct 30, 2025
CVE-2025-61120: Improper Access Control7.5 HighN/A0%Oct 30, 2025
CVE-2025-61119: Improper Access Control7.5 HighN/A0%Oct 30, 2025
CVE-2025-61114: Improper Access Control7.5 HighN/A0%Oct 30, 2025
CVE-2025-60950: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 30, 2025
CVE-2025-60319: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Oct 30, 2025
CVE-2025-12060: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.9 High0%Oct 30, 2025
CVE-2025-62712: Missing Authorization9.6 CriticalN/A0%Oct 30, 2025
83251-83275 of 715156
‹›