The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-59937: Improper Neutralization of Argument Delimiters in a Command9.1 Critical8.2 High0%Sep 29, 2025
CVE-2025-43817: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Sep 29, 2025
CVE-2025-43813: Improper Limitation of a Pathname to a Restricted Directory8.2 High6.9 Medium0%Sep 29, 2025
CVE-2025-43812: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Sep 29, 2025
CVE-2025-36245: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 29, 2025
CVE-2025-59933: Buffer Over-read7.8 High5.1 Medium0%Sep 29, 2025
CVE-2025-59163: Reliance on Reverse DNS Resolution for a Security-Critical ActionN/A2.1 Low0%Sep 29, 2025
CVE-2025-57769: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Sep 29, 2025
CVE-2025-54875: Improper Access Control9.8 CriticalN/A0%Sep 29, 2025
CVE-2025-54592: Insufficient Session Expiration9.8 Critical8.8 High0%Sep 29, 2025
CVE-2025-43820: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Sep 29, 2025
CVE-2025-43818: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium0%Sep 29, 2025
CVE-2025-43815: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Sep 29, 2025
CVE-2025-43811: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Sep 29, 2025
CVE-2025-57266: Improper Access Control9.8 CriticalN/A0%Sep 29, 2025
CVE-2025-54591: Improper Access Control7.5 HighN/A0%Sep 29, 2025
CVE-2025-45376: Improper Handling of Insufficient Permissions or Privileges7.5 HighN/A0%Sep 29, 2025
CVE-2025-30247: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical2%Sep 29, 2025
CVE-2025-34235: Improper Certificate Validation7.8 High9.5 Critical1%Sep 29, 2025
CVE-2025-34221: Missing Authentication for Critical Function9.8 Critical10.0 Critical4%Sep 29, 2025
CVE-2025-34215: Missing Authentication for Critical Function9.8 Critical9.4 Critical1%Sep 29, 2025
CVE-2025-34224: Missing Authentication for Critical Function9.1 Critical10.0 Critical1%Sep 29, 2025
CVE-2025-34220: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Sep 29, 2025
CVE-2025-34222: Missing Authentication for Critical Function9.1 Critical10.0 Critical0%Sep 29, 2025
CVE-2025-34228: Missing Authentication for Critical Function8.6 High8.8 High0%Sep 29, 2025
85451-85475 of 566702