The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-30628: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 31, 2025
CVE-2025-28973: Path Traversal: '.../...//'6.5 MediumN/A0%Dec 31, 2025
CVE-2025-28949: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 31, 2025
CVE-2025-23757: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-23719: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-23707: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-23705: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-23667: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 31, 2025
CVE-2025-66153: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-66152: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-66151: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-66150: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-66149: Missing Authorization5.4 MediumN/A0%Dec 31, 2025
CVE-2025-34468: Stack-based Buffer Overflow9.8 Critical8.2 High0%Dec 31, 2025
CVE-2025-34467: Improper Locking4.3 Medium5.3 Medium0%Dec 31, 2025
CVE-2025-15394: Improper Control of Generation of Code7.2 High2.0 Low0%Dec 31, 2025
CVE-2025-15393: Improper Control of Generation of Code8.8 High2.1 Low0%Dec 31, 2025
CVE-2021-47747: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High0%Dec 31, 2025
CVE-2021-47745: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High0%Dec 31, 2025
CVE-2021-47744: Use of Hard-coded Credentials7.5 High9.3 Critical0%Dec 31, 2025
CVE-2021-47742: Incorrect Permission Assignment for Critical Resource8.8 High8.5 High0%Dec 31, 2025
CVE-2021-47741: Insufficiently Protected Credentials7.5 High8.7 High0%Dec 31, 2025
CVE-2021-47740: Insufficient Session Expiration7.5 High6.9 Medium0%Dec 31, 2025
CVE-2021-47726: Insufficiently Protected Credentials7.5 High8.7 High0%Dec 31, 2025
CVE-2020-36904: Missing Authentication for Critical Function7.5 High9.3 Critical0%Dec 31, 2025
91076-91100 of 413066