The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-14434: Undefined Security Weakness5.3 MediumN/A0%Dec 31, 2025
CVE-2025-13029: Undefined Security Weakness7.5 HighN/A0%Dec 31, 2025
CVE-2025-49342: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 31, 2025
CVE-2025-59137: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 31, 2025
CVE-2025-15375: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Dec 31, 2025
CVE-2025-15374: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Dec 31, 2025
CVE-2025-49346: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 31, 2025
CVE-2025-15373: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Dec 31, 2025
CVE-2025-15372: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Dec 31, 2025
CVE-2025-15223: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Dec 31, 2025
CVE-2025-68131: Improper Removal of Sensitive Information Before Storage or Transfer7.5 High5.5 Medium0%Dec 31, 2025
CVE-2025-15371: Use of Hard-coded Credentials7.8 High7.1 High0%Dec 31, 2025
CVE-2025-11964: Out-of-bounds Write1.9 LowN/A0%Dec 31, 2025
CVE-2025-11961: Buffer Over-read1.9 LowN/A0%Dec 31, 2025
CVE-2025-62753: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-59131: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 30, 2025
CVE-2025-15114: Exposure of File Descriptor to Unintended Control Sphere9.8 Critical9.3 Critical1%Dec 30, 2025
CVE-2025-15113: Plaintext Storage of a Password9.3 Critical8.5 High0%Dec 30, 2025
CVE-2025-15112: URL Redirection to Untrusted Site5.4 Medium5.1 Medium0%Dec 30, 2025
CVE-2025-15111: Use of Hard-coded Password9.8 Critical9.3 Critical1%Dec 30, 2025
CVE-2024-58338: Improper Neutralization of Special Elements used in an OS Command10.0 Critical8.6 High1%Dec 30, 2025
CVE-2024-58337: Missing Authorization4.3 Medium8.7 High0%Dec 30, 2025
CVE-2024-58336: Missing Authentication for Critical Function5.3 Medium8.7 High0%Dec 30, 2025
CVE-2024-58315: Unquoted Search Path or Element7.8 High8.5 High0%Dec 30, 2025
CVE-2023-54327: Missing Authorization9.8 Critical9.3 Critical1%Dec 30, 2025
89951-89975 of 522616