The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-34230: Missing Authentication for Critical Function5.8 Medium6.9 Medium0%Sep 29, 2025
CVE-2025-34231: Missing Authentication for Critical Function8.6 High8.8 High0%Sep 29, 2025
CVE-2025-34225: Missing Authentication for Critical Function8.6 High8.8 High0%Sep 29, 2025
CVE-2025-34216: Missing Authentication for Critical Function9.8 Critical10.0 Critical1%Sep 29, 2025
CVE-2025-34233: Server-Side Request Forgery (SSRF)6.8 Medium8.5 High0%Sep 29, 2025
CVE-2025-34207: Insufficiently Protected Credentials9.8 Critical7.9 High0%Sep 29, 2025
CVE-2025-34223: Use of Hard-coded Credentials9.8 Critical10.0 Critical2%Sep 29, 2025
CVE-2025-34212: Download of Code Without Integrity Check9.8 Critical8.7 High1%Sep 29, 2025
CVE-2025-34211: Use of Hard-coded Cryptographic Key4.9 Medium9.3 Critical0%Sep 29, 2025
CVE-2025-34209: Use of Hard-coded Credentials7.2 High9.4 Critical0%Sep 29, 2025
CVE-2025-34234: Use of Hard-coded Cryptographic Key7.5 High9.2 Critical0%Sep 29, 2025
CVE-2025-34218: Missing Authentication for Critical Function9.8 Critical10.0 Critical1%Sep 29, 2025
CVE-2025-34232: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Sep 29, 2025
CVE-2025-56764: Observable Response Discrepancy5.3 MediumN/A0%Sep 29, 2025
CVE-2025-35034: Improper Neutralization of Input During Web Page Generation4.3 Medium5.1 Medium0%Sep 29, 2025
CVE-2025-35033: Improper Neutralization of Formula Elements in a CSV File4.1 Medium6.3 Medium0%Sep 29, 2025
CVE-2025-35032: Unrestricted Upload of File with Dangerous Type3.4 Low6.2 Medium0%Sep 29, 2025
CVE-2025-35031: Debug Messages Revealing Unnecessary Information3.3 Low4.6 Medium0%Sep 29, 2025
CVE-2025-35030: Cross-Site Request Forgery (CSRF)8.1 High8.6 High0%Sep 29, 2025
CVE-2025-57879: URL Redirection to Untrusted Site6.1 MediumN/A0%Sep 29, 2025
CVE-2025-57878: URL Redirection to Untrusted Site6.1 MediumN/A0%Sep 29, 2025
CVE-2025-57877: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 29, 2025
CVE-2025-57876: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 29, 2025
CVE-2025-57875: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 29, 2025
CVE-2025-57874: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 29, 2025
85476-85500 of 566702