The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-15044: Stack-based Buffer Overflow9.8 Critical8.9 High0%Dec 23, 2025
CVE-2025-14936: Stack-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
CVE-2025-14935: Heap-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
CVE-2025-14934: Stack-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
CVE-2025-14933: Integer Overflow or Wraparound7.8 HighN/A0%Dec 23, 2025
CVE-2025-14932: Stack-based Buffer Overflow7.8 HighN/A0%Dec 23, 2025
CVE-2025-14931: Deserialization of Untrusted Data10.0 CriticalN/A2%Dec 23, 2025
CVE-2025-14930: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14929: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14928: Improper Control of Generation of Code7.8 HighN/A0%Dec 23, 2025
CVE-2025-14927: Improper Control of Generation of Code7.8 HighN/A0%Dec 23, 2025
CVE-2025-14926: Improper Control of Generation of Code7.8 HighN/A0%Dec 23, 2025
CVE-2025-14925: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14924: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14922: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14921: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-14920: Deserialization of Untrusted Data7.8 HighN/A0%Dec 23, 2025
CVE-2025-11419: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Dec 23, 2025
CVE-2025-65354: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 23, 2025
CVE-2023-53982: Improper Neutralization of Special Elements used in an SQL Command7.5 High9.3 Critical0%Dec 23, 2025
CVE-2021-47739: Unquoted Search Path or Element8.4 High8.5 High0%Dec 23, 2025
CVE-2021-47738: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 23, 2025
CVE-2021-47737: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 23, 2025
CVE-2021-47736: Improper Control of Generation of Code7.2 High8.6 High1%Dec 23, 2025
CVE-2021-47735: Improper Control of Generation of Code8.8 High8.6 High0%Dec 23, 2025
90176-90200 of 530113