The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-68385: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Dec 18, 2025
CVE-2025-68279: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Dec 18, 2025
CVE-2025-68388: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Dec 18, 2025
CVE-2025-68384: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Dec 18, 2025
CVE-2025-68383: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Dec 18, 2025
CVE-2025-68382: Out-of-bounds Read6.5 MediumN/A0%Dec 18, 2025
CVE-2025-68381: Out-of-bounds Write6.5 MediumN/A0%Dec 18, 2025
CVE-2025-65046: User Interface (UI) Misrepresentation of Critical Information3.1 LowN/A0%Dec 18, 2025
CVE-2025-65041: Improper Authorization10.0 CriticalN/A0%Dec 18, 2025
CVE-2025-65037: Improper Control of Generation of Code10.0 CriticalN/A0%Dec 18, 2025
CVE-2025-64677: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Dec 18, 2025
CVE-2025-64676: Path Traversal: '.../...//'7.2 HighN/A0%Dec 18, 2025
CVE-2025-64663: Server-Side Request Forgery (SSRF)9.9 CriticalN/A0%Dec 18, 2025
CVE-2025-34452: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High1%Dec 18, 2025
CVE-2025-34449: Deserialization of Untrusted Data9.1 Critical6.9 Medium0%Dec 18, 2025
CVE-2025-13427: Improper AuthenticationN/A6.9 Medium0%Dec 18, 2025
CVE-2025-34451: Stack-based Buffer Overflow7.8 High6.9 Medium0%Dec 18, 2025
CVE-2025-68161: Improper Validation of Certificate with Host Mismatch4.8 Medium6.3 Medium0%Dec 18, 2025
CVE-2025-67653: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Dec 18, 2025
CVE-2025-63951: Deserialization of Untrusted Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-63950: Deserialization of Untrusted Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-63949: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 18, 2025
CVE-2025-63948: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Dec 18, 2025
CVE-2025-63947: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 18, 2025
CVE-2025-62004: Time-of-check Time-of-use (TOCTOU) Race Condition7.5 High7.7 High0%Dec 18, 2025
90701-90725 of 537999
‹›