The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-44451: Insufficiently Protected Credentials6.5 MediumN/A75%Feb 1, 2022
CVE-2021-41571: Incorrect Authorization6.5 MediumN/A1%Feb 1, 2022
CVE-2022-23181: Time-of-check Time-of-use (TOCTOU) Race Condition7.0 HighN/A0%Jan 27, 2022
CVE-2022-22932: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Jan 26, 2022
CVE-2021-41766: Deserialization of Untrusted Data8.1 HighN/A1%Jan 26, 2022
CVE-2022-23945: Missing Authorization7.5 HighN/A1%Jan 25, 2022
CVE-2022-23944: Missing Authorization9.1 CriticalN/A90%Jan 25, 2022
CVE-2022-23223: Insufficiently Protected Credentials7.5 HighN/A5%Jan 25, 2022
CVE-2021-45029: Improper Control of Generation of Code9.8 CriticalN/A4%Jan 25, 2022
CVE-2022-23437: Loop with Unreachable Exit ConditionN/AN/A12%Jan 24, 2022
CVE-2022-22733: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A86%Jan 20, 2022
CVE-2021-45230: Undefined Security Weakness6.5 MediumN/A1%Jan 20, 2022
CVE-2022-23305: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A9%Jan 18, 2022
CVE-2022-23307: Deserialization of Untrusted Data8.8 HighN/A3%Jan 18, 2022
CVE-2022-23302: Deserialization of Untrusted Data8.8 HighN/A1%Jan 18, 2022
CVE-2021-42357: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Jan 17, 2022
CVE-2021-43999: Improper Authentication8.8 HighN/A1%Jan 11, 2022
CVE-2021-41767: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Jan 11, 2022
CVE-2021-43297: Deserialization of Untrusted Data9.8 CriticalN/A46%Jan 10, 2022
CVE-2021-43045: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jan 6, 2022
CVE-2021-45458: Use of Hard-coded Credentials7.5 HighN/A1%Jan 6, 2022
CVE-2021-45457: Incorrect Authorization7.5 HighN/A1%Jan 6, 2022
CVE-2021-45456: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A48%Jan 6, 2022
CVE-2021-36774: Undefined Security Weakness6.5 MediumN/A1%Jan 6, 2022
CVE-2021-31522: Use of Externally-Controlled Input to Select Classes or Code9.8 CriticalN/A3%Jan 6, 2022
2476-2500 of 4467
‹›