The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-10301: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 15, 2025
CVE-2025-10300: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 15, 2025
CVE-2025-10299: Missing Authorization8.8 HighN/A0%Oct 15, 2025
CVE-2025-10294: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A1%Oct 15, 2025
CVE-2025-10293: Improper Authentication8.8 HighN/A0%Oct 15, 2025
CVE-2025-10194: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10186: Missing Authorization5.3 MediumN/A0%Oct 15, 2025
CVE-2025-10141: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10140: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10139: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10135: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10133: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10132: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2025
CVE-2025-10056: Server-Side Request Forgery (SSRF)4.4 MediumN/A0%Oct 15, 2025
CVE-2025-10051: Unrestricted Upload of File with Dangerous Type7.2 HighN/A1%Oct 15, 2025
CVE-2025-10045: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Oct 15, 2025
CVE-2025-10041: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Oct 15, 2025
CVE-2025-10038: Incorrect Privilege Assignment6.5 MediumN/A0%Oct 15, 2025
CVE-2025-61941: Improper Limitation of a Pathname to a Restricted Directory7.2 High8.6 High1%Oct 15, 2025
CVE-2025-55039: Improper Verification of Cryptographic Signature6.5 MediumN/A0%Oct 15, 2025
CVE-2025-39997: Undefined Security WeaknessN/AN/A0%Oct 15, 2025
CVE-2025-39991: Undefined Security WeaknessN/AN/A0%Oct 15, 2025
CVE-2025-11501: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Oct 15, 2025
CVE-2025-40000: Undefined Security Weakness8.8 HighN/A0%Oct 15, 2025
CVE-2025-39999: Undefined Security WeaknessN/AN/A0%Oct 15, 2025
84251-84275 of 677876