The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-65082: Improper Neutralization of Escape, Meta, or Control Sequences6.5 MediumN/A1%Dec 5, 2025
CVE-2025-59775: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Dec 5, 2025
CVE-2025-55753: Integer Overflow or Wraparound7.5 HighN/A0%Dec 5, 2025
CVE-2025-66516: Improper Restriction of XML External Entity Reference8.4 High10.0 Critical89%Dec 4, 2025
CVE-2024-3884: Improper Input Validation7.5 HighN/A1%Dec 3, 2025
CVE-2025-13516: Unrestricted Upload of File with Dangerous Type8.1 HighN/A1%Dec 2, 2025
CVE-2025-64775: Incomplete Cleanup7.5 HighN/A2%Dec 1, 2025
CVE-2025-59789: Uncontrolled Recursion7.5 HighN/A2%Dec 1, 2025
CVE-2025-59792: Cleartext Storage of Sensitive Information5.3 MediumN/A0%Nov 28, 2025
CVE-2025-59790: Improper Privilege Management5.4 MediumN/A0%Nov 28, 2025
CVE-2025-59454: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 27, 2025
CVE-2025-59302: Improper Control of Generation of Code4.7 MediumN/A0%Nov 27, 2025
CVE-2025-54057: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A1%Nov 27, 2025
CVE-2025-62728: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Nov 26, 2025
CVE-2025-59390: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.8 CriticalN/A1%Nov 26, 2025
CVE-2025-65998: Use of Hard-coded Cryptographic Key7.5 HighN/A1%Nov 24, 2025
CVE-2025-10703: Improper Control of Generation of CodeN/A8.6 High0%Nov 19, 2025
CVE-2025-10702: Improper Control of Generation of CodeN/A8.6 High0%Nov 19, 2025
CVE-2025-64408: Deserialization of Untrusted Data6.3 MediumN/A12%Nov 19, 2025
CVE-2025-64407: Missing Authorization5.3 MediumN/A0%Nov 12, 2025
CVE-2025-61623: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A1%Nov 12, 2025
CVE-2025-59118: Unrestricted Upload of File with Dangerous Type7.3 HighN/A2%Nov 12, 2025
CVE-2025-64406: Out-of-bounds Write4.3 MediumN/A1%Nov 12, 2025
CVE-2025-64405: Missing Authorization7.5 HighN/A1%Nov 12, 2025
CVE-2025-64404: Missing Authorization7.5 HighN/A1%Nov 12, 2025
1426-1450 of 4466
‹›