The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-15234: Heap-based Buffer Overflow8.8 High7.4 High3%Dec 30, 2025
CVE-2025-15103: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A0%Dec 30, 2025
CVE-2025-15102: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A0%Dec 30, 2025
CVE-2025-15355: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 30, 2025
CVE-2025-15233: Heap-based Buffer Overflow8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15232: Stack-based Buffer Overflow8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15231: Stack-based Buffer Overflow8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15230: Heap-based Buffer Overflow8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15229: Improper Resource Shutdown or Release7.5 High5.5 Medium5%Dec 30, 2025
CVE-2025-15222: Deserialization of Untrusted Data5.0 Medium1.3 Low0%Dec 30, 2025
CVE-2025-14313: Undefined Security Weakness6.1 MediumN/A0%Dec 30, 2025
CVE-2025-14312: Undefined Security Weakness6.1 MediumN/A0%Dec 30, 2025
CVE-2025-15221: Improper Neutralization of Input During Web Page Generation5.4 Medium2.0 Low0%Dec 30, 2025
CVE-2025-15220: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Dec 30, 2025
CVE-2025-15219: Improper Neutralization of Input During Web Page Generation5.4 Medium2.0 Low0%Dec 30, 2025
CVE-2025-15218: Buffer Copy without Checking Size of Input8.8 High7.4 High3%Dec 30, 2025
CVE-2025-15217: Buffer Copy without Checking Size of Input8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15216: Stack-based Buffer Overflow8.8 High7.4 High1%Dec 30, 2025
CVE-2025-15215: Buffer Copy without Checking Size of Input8.8 High7.4 High1%Dec 30, 2025
CVE-2025-69235: Origin Validation Error7.5 HighN/A0%Dec 30, 2025
CVE-2025-69234: Improperly Implemented Security Check for Standard9.1 CriticalN/A0%Dec 30, 2025
CVE-2025-15214: Improper Neutralization of Input During Web Page Generation4.8 Medium1.9 Low0%Dec 30, 2025
CVE-2025-69217: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)7.7 HighN/A0%Dec 30, 2025
CVE-2025-15213: Improper Authorization4.3 Medium2.1 Low0%Dec 30, 2025
CVE-2025-15212: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical2.1 Low0%Dec 30, 2025
90976-91000 of 417011