The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-4688: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Sep 16, 2025
CVE-2025-2404: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Sep 16, 2025
CVE-2025-10316: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%Sep 16, 2025
CVE-2025-5519: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Sep 16, 2025
CVE-2025-5518: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Sep 16, 2025
CVE-2024-12367: Exposure of Sensitive System Information to an Unauthorized Control Sphere8.6 HighN/A0%Sep 16, 2025
CVE-2023-53293: Undefined Security WeaknessN/AN/A0%Sep 16, 2025
CVE-2023-53292: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53283: Undefined Security WeaknessN/AN/AN/ASep 16, 2025
CVE-2023-53303: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53302: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53301: Undefined Security Weakness7.1 HighN/A0%Sep 16, 2025
CVE-2023-53300: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53299: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53298: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53297: Undefined Security Weakness8.8 HighN/A0%Sep 16, 2025
CVE-2023-53296: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53295: Undefined Security Weakness5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53294: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53291: Undefined Security Weakness5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53290: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53289: NULL Pointer Dereference5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53288: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53287: Undefined Security Weakness5.5 MediumN/A0%Sep 16, 2025
CVE-2023-53286: Undefined Security Weakness7.8 HighN/A0%Sep 16, 2025
86676-86700 of 775503