The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-52196: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Dec 16, 2025
CVE-2025-46296: Improper Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-46295: Improper Control of Generation of Code9.8 CriticalN/A1%Dec 16, 2025
CVE-2025-46294: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Dec 16, 2025
CVE-2025-33235: Concurrent Execution using Shared Resource with Improper Synchronization7.8 HighN/A0%Dec 16, 2025
CVE-2025-33226: Deserialization of Untrusted Data7.8 HighN/A0%Dec 16, 2025
CVE-2025-33225: UNIX Symbolic Link (Symlink) Following8.4 HighN/A0%Dec 16, 2025
CVE-2025-33212: Deserialization of Untrusted Data7.3 HighN/A0%Dec 16, 2025
CVE-2025-33210: Deserialization of Untrusted Data9.0 CriticalN/A1%Dec 16, 2025
CVE-2023-53900: Improper Neutralization of Input During Web Page Generation8.8 High4.8 Medium0%Dec 16, 2025
CVE-2023-53896: Missing Authentication for Critical Function7.5 High8.7 High1%Dec 16, 2025
CVE-2025-68130: Improperly Controlled Modification of Object Prototype AttributesN/A8.5 High0%Dec 16, 2025
CVE-2025-68116: Improper Neutralization of Input During Web Page Generation8.9 HighN/A0%Dec 16, 2025
CVE-2025-63414: Improper Limitation of a Pathname to a Restricted Directory10.0 CriticalN/A2%Dec 16, 2025
CVE-2025-62862: Out-of-bounds Read4.6 MediumN/A0%Dec 16, 2025
CVE-2025-59935: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-50401: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Dec 16, 2025
CVE-2025-50398: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Dec 16, 2025
CVE-2025-37164: Improper Control of Generation of Code10.0 CriticalN/A90%Dec 16, 2025
CVE-2025-29231: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 16, 2025
CVE-2023-53903: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
CVE-2023-53902: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.0 High1%Dec 16, 2025
CVE-2023-53901: URL Redirection to Untrusted Site5.4 Medium7.1 High0%Dec 16, 2025
CVE-2023-53899: Server-Side Request Forgery (SSRF)9.8 Critical5.1 Medium1%Dec 16, 2025
CVE-2023-53898: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 16, 2025
90426-90450 of 413183
‹›