The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-15459: Buffer Copy without Checking Size of Input8.8 High7.4 High0%Jan 5, 2026
CVE-2025-14124: Undefined Security Weakness8.6 HighN/A0%Jan 5, 2026
CVE-2025-15458: Improper Authentication9.8 Critical5.5 Medium0%Jan 5, 2026
CVE-2025-15457: Improper Authentication9.8 Critical5.5 Medium0%Jan 5, 2026
CVE-2025-15456: Improper Authentication7.5 High5.5 Medium0%Jan 5, 2026
CVE-2025-15455: Improper Authentication6.5 Medium5.5 Medium0%Jan 5, 2026
CVE-2025-15454: Improper Neutralization of Input During Web Page Generation3.1 Low1.3 Low0%Jan 5, 2026
CVE-2025-15453: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Jan 5, 2026
CVE-2025-15452: Improper Neutralization of Input During Web Page Generation4.8 Medium1.9 Low0%Jan 5, 2026
CVE-2025-15451: Improper Neutralization of Input During Web Page Generation4.8 Medium1.9 Low0%Jan 5, 2026
CVE-2025-15450: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jan 5, 2026
CVE-2025-5591: Improper Neutralization of Input During Web Page Generation5.4 Medium7.7 High0%Jan 5, 2026
CVE-2025-15449: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical5.3 Medium0%Jan 5, 2026
CVE-2025-15448: Unrestricted Upload of File with Dangerous Type9.8 Critical5.3 Medium0%Jan 5, 2026
CVE-2025-15447: Undefined Security WeaknessN/A6.9 Medium0%Jan 5, 2026
CVE-2025-15446: Undefined Security WeaknessN/A6.9 Medium0%Jan 4, 2026
CVE-2026-0579: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jan 4, 2026
CVE-2026-0578: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical5.5 Medium0%Jan 4, 2026
CVE-2025-15443: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 4, 2026
CVE-2025-15442: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 4, 2026
CVE-2026-0577: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jan 4, 2026
CVE-2025-14830: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Jan 4, 2026
CVE-2026-0576: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jan 4, 2026
CVE-2026-0575: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jan 4, 2026
CVE-2026-0574: Improper Authorization6.3 Medium2.1 Low0%Jan 4, 2026
89876-89900 of 417096