The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-11924: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Dec 17, 2025
CVE-2025-14154: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 17, 2025
CVE-2025-64700: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Dec 17, 2025
CVE-2025-59374: Embedded Malicious Code9.8 Critical9.3 Critical1%Dec 17, 2025
CVE-2025-14385: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 17, 2025
CVE-2025-13880: Missing Authorization6.5 MediumN/A0%Dec 17, 2025
CVE-2025-13861: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 17, 2025
CVE-2025-11901: Improper Access ControlN/A7.0 High0%Dec 17, 2025
CVE-2025-11775: Out-of-bounds ReadN/A4.8 Medium0%Dec 17, 2025
CVE-2025-14305: Incorrect Authorization7.8 High8.5 High0%Dec 17, 2025
CVE-2025-14304: Protection Mechanism Failure6.8 Medium7.0 High0%Dec 17, 2025
CVE-2025-13977: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 17, 2025
CVE-2025-14303: Protection Mechanism Failure6.8 Medium7.0 High0%Dec 17, 2025
CVE-2025-14302: Protection Mechanism Failure6.8 Medium7.0 High0%Dec 17, 2025
CVE-2025-14801: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Dec 17, 2025
CVE-2025-11369: Missing Authorization4.3 MediumN/A0%Dec 17, 2025
CVE-2025-11009: Cleartext Storage of Sensitive Information5.1 MediumN/A0%Dec 17, 2025
CVE-2025-53524: Out-of-bounds Write7.8 High8.4 High0%Dec 17, 2025
CVE-2025-14701: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 17, 2025
CVE-2025-14700: Improper Neutralization of Special Elements Used in a Template Engine9.9 CriticalN/A7%Dec 17, 2025
CVE-2025-14766: Out-of-bounds Read8.8 HighN/A3%Dec 16, 2025
CVE-2025-14765: Use After Free8.8 HighN/A3%Dec 16, 2025
CVE-2025-34288: Incorrect Permission Assignment for Critical Resource6.7 Medium8.6 High2%Dec 16, 2025
CVE-2025-68274: NULL Pointer Dereference7.5 High8.7 High1%Dec 16, 2025
CVE-2025-64520: Missing Authorization4.3 MediumN/A0%Dec 16, 2025
90376-90400 of 413183
‹›