The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-7984: Use of Uninitialized Variable7.8 HighN/A0%Sep 17, 2025
CVE-2025-7983: Heap-based Buffer Overflow7.8 HighN/A0%Sep 17, 2025
CVE-2025-7982: Integer Overflow or Wraparound7.8 HighN/A0%Sep 17, 2025
CVE-2025-7981: Use of Uninitialized Variable7.8 HighN/A0%Sep 17, 2025
CVE-2025-7980: Out-of-bounds Write7.8 HighN/A0%Sep 17, 2025
CVE-2025-7979: Stack-based Buffer Overflow7.8 HighN/A0%Sep 17, 2025
CVE-2025-7978: Use of Uninitialized Variable7.8 HighN/A0%Sep 17, 2025
CVE-2025-7977: Out-of-bounds Read7.8 HighN/A0%Sep 17, 2025
CVE-2025-59415: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Sep 17, 2025
CVE-2025-10644: Incorrect Privilege Assignment9.4 CriticalN/A3%Sep 17, 2025
CVE-2025-10643: Incorrect Permission Assignment for Critical Resource9.1 CriticalN/A3%Sep 17, 2025
CVE-2025-10619: Improper Neutralization of Special Elements used in an OS Command6.3 Medium2.1 Low2%Sep 17, 2025
CVE-2025-10618: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Sep 17, 2025
CVE-2025-10617: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Sep 17, 2025
CVE-2025-10616: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Sep 17, 2025
CVE-2025-59410: Missing Encryption of Sensitive Data3.7 Low5.5 Medium0%Sep 17, 2025
CVE-2025-59354: Use of Weak Hash5.3 Medium5.5 Medium0%Sep 17, 2025
CVE-2025-59353: Improper Certificate Validation7.5 High7.7 High0%Sep 17, 2025
CVE-2025-59352: Exposure of Sensitive Information Through Data Queries9.8 Critical6.9 Medium1%Sep 17, 2025
CVE-2025-59351: NULL Pointer Dereference5.3 Medium2.7 Low0%Sep 17, 2025
CVE-2025-59350: Observable Timing Discrepancy5.3 Medium2.7 Low0%Sep 17, 2025
CVE-2025-59349: Incorrect Permission Assignment for Critical Resource3.3 Low2.0 Low0%Sep 17, 2025
CVE-2025-59348: Use of Uninitialized Variable7.5 High5.5 Medium0%Sep 17, 2025
CVE-2025-59347: Improper Certificate Validation6.5 Medium2.7 Low0%Sep 17, 2025
CVE-2025-59346: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Sep 17, 2025
86476-86500 of 395809