The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-63951: Deserialization of Untrusted Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-63950: Deserialization of Untrusted Data7.5 HighN/A0%Dec 18, 2025
CVE-2025-63949: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 18, 2025
CVE-2025-63948: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Dec 18, 2025
CVE-2025-63947: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 18, 2025
CVE-2025-62004: Time-of-check Time-of-use (TOCTOU) Race Condition7.5 High7.7 High0%Dec 18, 2025
CVE-2025-62003: Time-of-check Time-of-use (TOCTOU) Race Condition7.5 High7.7 High0%Dec 18, 2025
CVE-2025-62002: Improperly Implemented Security Check for Standard4.3 Medium5.3 Medium0%Dec 18, 2025
CVE-2025-62001: Unprotected Alternate Channel8.8 High8.7 High0%Dec 18, 2025
CVE-2025-62000: Incomplete Comparison with Missing Factors7.1 High6.9 Medium0%Dec 18, 2025
CVE-2025-53710: Improper Isolation or Compartmentalization7.5 HighN/A0%Dec 18, 2025
CVE-2025-46268: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 18, 2025
CVE-2025-14850: Improper Limitation of a Pathname to a Restricted Directory8.1 High7.2 High0%Dec 18, 2025
CVE-2025-14849: Unrestricted Upload of File with Dangerous Type9.8 Critical8.7 High0%Dec 18, 2025
CVE-2025-14848: Absolute Path Traversal4.3 Medium5.3 Medium0%Dec 18, 2025
CVE-2025-34450: Stack-based Buffer Overflow7.8 High6.9 Medium0%Dec 18, 2025
CVE-2025-59529: Uncontrolled Resource Consumption5.5 MediumN/A0%Dec 18, 2025
CVE-2025-13911: Execution with Unnecessary Privileges6.4 Medium7.3 High0%Dec 18, 2025
CVE-2025-67163: Improper Input Validation6.1 MediumN/A0%Dec 18, 2025
CVE-2025-65566: NULL Pointer Dereference7.5 HighN/A0%Dec 18, 2025
CVE-2025-64400: Improper Access Control4.1 MediumN/A0%Dec 18, 2025
CVE-2025-14889: Improper Authorization5.4 Medium2.1 Low0%Dec 18, 2025
CVE-2024-58323: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 18, 2025
CVE-2024-58322: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 18, 2025
CVE-2024-58321: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Dec 18, 2025
90751-90775 of 537999
‹›