The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-56143: Authorization Bypass Through User-Controlled Key8.2 HighN/A0%Oct 16, 2025
CVE-2025-61543: Improper Access Control7.1 HighN/A0%Oct 16, 2025
CVE-2025-61541: Improper Access Control7.1 HighN/A0%Oct 16, 2025
CVE-2025-61540: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 16, 2025
CVE-2025-61539: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 16, 2025
CVE-2025-61536: Unverified Password Change8.2 HighN/A0%Oct 16, 2025
CVE-2025-41254: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 16, 2025
CVE-2025-41253: Improper Neutralization of Special Elements used in an Expression Language Statement7.5 HighN/A0%Oct 16, 2025
CVE-2025-36002: Password in Configuration File5.5 MediumN/A0%Oct 16, 2025
CVE-2025-22381: Unverified Password Change8.2 HighN/A1%Oct 16, 2025
CVE-2025-53950: Exposure of Private Personal Information to an Unauthorized Actor5.5 MediumN/A0%Oct 16, 2025
CVE-2025-46752: Insertion of Sensitive Information into Log File4.4 MediumN/A0%Oct 16, 2025
CVE-2025-11839: Unchecked Return Value3.3 Low1.9 Low0%Oct 16, 2025
CVE-2025-53951: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A0%Oct 16, 2025
CVE-2025-54658: Improper Limitation of a Pathname to a Restricted Directory7.2 HighN/A0%Oct 16, 2025
CVE-2025-9955: Incorrect Authorization5.7 MediumN/A0%Oct 16, 2025
CVE-2025-9804: Improper Access Control6.5 MediumN/A1%Oct 16, 2025
CVE-2025-9152: Missing Authentication for Critical Function9.8 CriticalN/A1%Oct 16, 2025
CVE-2025-10611: Incorrect Authorization9.8 CriticalN/A1%Oct 16, 2025
CVE-2025-3930: Insufficient Session ExpirationN/A6.3 Medium1%Oct 16, 2025
CVE-2025-6338: Incomplete CleanupN/A9.2 Critical0%Oct 16, 2025
CVE-2025-58426: Use of Hard-coded Cryptographic Key4.3 Medium5.3 Medium0%Oct 16, 2025
CVE-2025-58079: Improper Protection of Alternate Path4.3 Medium5.3 Medium0%Oct 16, 2025
CVE-2025-55072: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Oct 16, 2025
CVE-2025-54859: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Oct 16, 2025
84101-84125 of 764060