The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-15088: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15087: Improper Authorization4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15086: Improper Access Control4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-68936: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 25, 2025
CVE-2025-68935: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 25, 2025
CVE-2025-15085: Improper Authorization8.1 High2.1 Low0%Dec 25, 2025
CVE-2025-15084: Improper Access Control3.1 Low1.3 Low0%Dec 25, 2025
CVE-2025-15083: On-Chip Debug and Test Interface With Improper Access Control4.6 Medium0.3 Low0%Dec 25, 2025
CVE-2025-15082: Exposure of Sensitive Information to an Unauthorized Actor7.5 High5.5 Medium0%Dec 25, 2025
CVE-2025-15081: Improper Neutralization of Special Elements used in a Command6.3 Medium2.1 Low2%Dec 25, 2025
CVE-2025-2406: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Dec 25, 2025
CVE-2025-2405: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Dec 25, 2025
CVE-2025-2307: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Dec 25, 2025
CVE-2025-66443: Reachable Assertion5.3 MediumN/A0%Dec 25, 2025
CVE-2025-66379: Reachable Assertion7.5 HighN/A0%Dec 25, 2025
CVE-2025-66378: Incorrect Authorization7.5 HighN/A0%Dec 25, 2025
CVE-2025-66377: Missing Authentication for Critical Function7.5 HighN/A0%Dec 25, 2025
CVE-2025-59683: Incorrect Authorization9.1 CriticalN/A0%Dec 25, 2025
CVE-2025-49088: Reachable Assertion5.9 MediumN/A0%Dec 25, 2025
CVE-2025-48704: Reachable Assertion7.5 HighN/A0%Dec 25, 2025
CVE-2025-32096: Reachable Assertion7.5 HighN/A0%Dec 25, 2025
CVE-2025-32095: Reachable Assertion7.5 HighN/A0%Dec 25, 2025
CVE-2025-15078: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical5.5 Medium0%Dec 25, 2025
CVE-2025-15077: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical5.5 Medium0%Dec 25, 2025
CVE-2025-15076: Improper Limitation of a Pathname to a Restricted Directory7.3 High5.5 Medium0%Dec 25, 2025
89001-89025 of 418797
‹›