The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-68944: Unintended Proxy or Intermediary5.3 MediumN/A0%Dec 26, 2025
CVE-2025-68943: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Dec 26, 2025
CVE-2025-15099: Improper Authentication9.8 Critical5.5 Medium1%Dec 26, 2025
CVE-2025-68942: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 26, 2025
CVE-2025-68941: Incorrect Authorization5.3 MediumN/A0%Dec 26, 2025
CVE-2025-68940: Incorrect Authorization5.3 MediumN/A0%Dec 26, 2025
CVE-2025-68939: Improper Protection of Alternate Path5.3 MediumN/A0%Dec 26, 2025
CVE-2025-15098: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Dec 26, 2025
CVE-2025-15097: Improper Authentication7.3 High5.5 Medium1%Dec 26, 2025
CVE-2025-15095: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 26, 2025
CVE-2025-68938: Incorrect Authorization5.3 MediumN/A0%Dec 26, 2025
CVE-2025-15094: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 26, 2025
CVE-2025-15093: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 26, 2025
CVE-2025-15092: Buffer Copy without Checking Size of Input9.8 Critical7.4 High1%Dec 26, 2025
CVE-2025-68937: UNIX Symbolic Link (Symlink) FollowingN/A9.5 Critical1%Dec 26, 2025
CVE-2025-15091: Buffer Copy without Checking Size of Input9.8 Critical7.4 High1%Dec 26, 2025
CVE-2025-14913: Missing Authorization5.3 MediumN/A0%Dec 26, 2025
CVE-2025-15090: Buffer Copy without Checking Size of Input9.8 Critical7.4 High1%Dec 25, 2025
CVE-2025-15089: Buffer Copy without Checking Size of Input9.8 Critical7.4 High1%Dec 25, 2025
CVE-2025-14820: Undefined Security WeaknessN/AN/AN/ADec 25, 2025
CVE-2025-14715: Undefined Security WeaknessN/AN/AN/ADec 25, 2025
CVE-2025-15088: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15087: Improper Authorization4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-15086: Improper Access Control4.3 Medium2.1 Low0%Dec 25, 2025
CVE-2025-68936: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 25, 2025
89026-89050 of 412205
‹›