The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2023-7305: Unrestricted Upload of File with Dangerous TypeN/A9.2 Critical1%Oct 15, 2025
CVE-2023-7304: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical4%Oct 15, 2025
CVE-2017-20205: Stack-based Buffer OverflowN/A9.2 Critical0%Oct 15, 2025
CVE-2017-20204: Inclusion of Undocumented Features or Chicken BitsN/A9.3 Critical1%Oct 15, 2025
CVE-2011-10033: Improper Neutralization of Directives in Dynamically Evaluated CodeN/A9.3 Critical0%Oct 15, 2025
CVE-2018-25117: Embedded Malicious CodeN/A9.3 Critical0%Oct 15, 2025
CVE-2025-61804: Heap-based Buffer Overflow7.8 HighN/A0%Oct 15, 2025
CVE-2025-54279: Use After Free7.8 HighN/A0%Oct 15, 2025
CVE-2025-54270: NULL Pointer Dereference5.5 MediumN/A0%Oct 15, 2025
CVE-2025-54269: Out-of-bounds Read5.5 MediumN/A0%Oct 15, 2025
CVE-2025-62376: Improper AuthenticationN/A9.5 Critical0%Oct 14, 2025
CVE-2025-61797: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-61796: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-54272: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 14, 2025
CVE-2025-54196: URL Redirection to Untrusted Site4.3 MediumN/A0%Oct 14, 2025
CVE-2025-49553: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 14, 2025
CVE-2025-49552: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Oct 14, 2025
CVE-2025-54277: Undefined Security WeaknessN/AN/A0%Oct 14, 2025
CVE-2025-54267: Incorrect Authorization6.5 MediumN/A0%Oct 14, 2025
CVE-2025-54266: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Oct 14, 2025
CVE-2025-54265: Incorrect Authorization5.9 MediumN/A1%Oct 14, 2025
CVE-2025-54264: Improper Neutralization of Input During Web Page Generation8.1 HighN/A1%Oct 14, 2025
CVE-2025-54263: Incorrect Authorization8.1 HighN/A1%Oct 14, 2025
CVE-2025-62374: Improperly Controlled Modification of Object Prototype Attributes6.4 MediumN/A0%Oct 14, 2025
CVE-2025-61807: Integer Overflow or Wraparound7.8 HighN/A0%Oct 14, 2025
84326-84350 of 677876