The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-66150: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-66149: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-34468: Stack-based Buffer Overflow9.8 Critical8.2 High0%Dec 31, 2025
CVE-2025-34467: Improper Locking4.3 Medium5.3 Medium0%Dec 31, 2025
CVE-2025-15394: Improper Control of Generation of Code7.2 High2.0 Low0%Dec 31, 2025
CVE-2025-15393: Improper Control of Generation of Code8.8 High2.1 Low0%Dec 31, 2025
CVE-2021-47747: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High0%Dec 31, 2025
CVE-2021-47745: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High0%Dec 31, 2025
CVE-2021-47744: Use of Hard-coded Credentials7.5 High9.3 Critical0%Dec 31, 2025
CVE-2021-47742: Incorrect Permission Assignment for Critical Resource8.8 High8.5 High0%Dec 31, 2025
CVE-2021-47741: Insufficiently Protected Credentials7.5 High8.7 High0%Dec 31, 2025
CVE-2021-47740: Insufficient Session Expiration7.5 High6.9 Medium0%Dec 31, 2025
CVE-2021-47726: Insufficiently Protected Credentials7.5 High8.7 High0%Dec 31, 2025
CVE-2020-36904: Missing Authentication for Critical Function7.5 High9.3 Critical0%Dec 31, 2025
CVE-2020-36903: Unquoted Search Path or Element8.4 High8.5 High0%Dec 31, 2025
CVE-2021-47743: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Dec 31, 2025
CVE-2021-47725: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Dec 31, 2025
CVE-2025-62989: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 31, 2025
CVE-2025-59135: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 31, 2025
CVE-2025-49355: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 31, 2025
CVE-2025-49337: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 31, 2025
CVE-2025-23608: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-15392: Improper Neutralization of Special Elements used in an SQL Command8.8 High2.1 Low0%Dec 31, 2025
CVE-2025-15391: Improper Neutralization of Special Elements used in a Command9.8 Critical2.1 Low0%Dec 31, 2025
CVE-2025-66160: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
91051-91075 of 413066