The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-53477: NULL Pointer Dereference7.5 HighN/A0%Jan 10, 2026
CVE-2025-53470: Out-of-bounds Read3.1 LowN/A0%Jan 10, 2026
CVE-2025-52435: J2EE Misconfiguration: Data Transmission Without Encryption7.5 HighN/A0%Jan 10, 2026
CVE-2025-12543: Improper Input Validation9.6 CriticalN/A1%Jan 7, 2026
CVE-2025-68280: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Jan 5, 2026
CVE-2025-66518: Path Traversal: 'dir/../../filename'8.8 High8.8 High0%Jan 5, 2026
CVE-2025-48769: Use After Free8.1 HighN/A0%Jan 1, 2026
CVE-2025-48768: Release of Invalid Pointer or Reference6.5 MediumN/A0%Jan 1, 2026
CVE-2025-47411: Improper Privilege Management8.1 HighN/A0%Jan 1, 2026
CVE-2025-66524: Deserialization of Untrusted Data8.8 High7.5 High0%Dec 19, 2025
CVE-2025-68161: Improper Validation of Certificate with Host Mismatch4.8 Medium6.3 Medium0%Dec 18, 2025
CVE-2025-66029: Insufficiently Protected Credentials7.6 HighN/A0%Dec 17, 2025
CVE-2025-67895: Incorrect Resource Transfer Between Spheres9.8 CriticalN/A0%Dec 17, 2025
CVE-2025-46295: Improper Control of Generation of Code9.8 CriticalN/A0%Dec 16, 2025
CVE-2025-66388: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Dec 15, 2025
CVE-2025-53960: Use of a Cryptographic Primitive with a Risky Implementation5.9 MediumN/A0%Dec 12, 2025
CVE-2025-54981: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A0%Dec 12, 2025
CVE-2025-54947: Use of Hard-coded Cryptographic Key9.8 CriticalN/A0%Dec 12, 2025
CVE-2025-58137: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Dec 12, 2025
CVE-2025-58130: Insufficiently Protected Credentials9.1 CriticalN/A0%Dec 12, 2025
CVE-2025-23408: Weak Password Requirements6.5 Medium8.5 High0%Dec 12, 2025
CVE-2025-66675: Incomplete Cleanup8.2 HighN/A0%Dec 10, 2025
CVE-2025-66623: Exposure of Sensitive Information to an Unauthorized Actor7.4 HighN/A0%Dec 5, 2025
CVE-2025-58098: Insertion of Sensitive Information Into Sent Data8.3 HighN/A0%Dec 5, 2025
CVE-2025-66200: Authentication Bypass Using an Alternate Path or Channel5.4 MediumN/A0%Dec 5, 2025
1401-1425 of 4466
‹›