The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-34303: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34302: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-34301: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 28, 2025
CVE-2025-53855: Out-of-bounds Write7.8 HighN/A0%Oct 28, 2025
CVE-2025-53814: Use After Free7.8 HighN/A0%Oct 28, 2025
CVE-2025-12380: Use After FreeN/AN/A0%Oct 28, 2025
CVE-2025-12103: Incorrect Privilege Assignment5.0 MediumN/A0%Oct 28, 2025
CVE-2025-12390: Session Fixation6.0 MediumN/A0%Oct 28, 2025
CVE-2025-1038: Improper Neutralization of Special Elements used in an OS CommandN/A7.5 High0%Oct 28, 2025
CVE-2025-1037: Improper Privilege ManagementN/A7.5 High0%Oct 28, 2025
CVE-2025-1036: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High1%Oct 28, 2025
CVE-2025-9313: Authentication Bypass Using an Alternate Path or ChannelN/A9.3 Critical0%Oct 28, 2025
CVE-2025-40074: Undefined Security Weakness9.8 CriticalN/A0%Oct 28, 2025
CVE-2025-40064: Undefined Security Weakness7.8 HighN/A0%Oct 28, 2025
CVE-2025-40054: Undefined Security Weakness7.8 HighN/A0%Oct 28, 2025
CVE-2025-40082: Out-of-bounds Read7.1 HighN/A0%Oct 28, 2025
CVE-2025-40081: Undefined Security Weakness7.8 HighN/A0%Oct 28, 2025
CVE-2025-40080: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
CVE-2025-40079: Undefined Security Weakness7.8 HighN/A0%Oct 28, 2025
CVE-2025-40078: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
CVE-2025-40077: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
CVE-2025-40076: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
CVE-2025-40075: Undefined Security Weakness8.1 HighN/A0%Oct 28, 2025
CVE-2025-40073: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
CVE-2025-40072: Undefined Security WeaknessN/AN/A0%Oct 28, 2025
83476-83500 of 580342