The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-29267: Undefined Security Weakness5.3 MediumN/A1%Jun 12, 2024
CVE-2024-28762: Allocation of Resources Without Limits or Throttling5.3 MediumN/A1%Jun 12, 2024
CVE-2023-45188: Unrestricted Upload of File with Dangerous Type6.5 MediumN/A1%Jun 9, 2024
CVE-2024-31878: Observable Discrepancy5.3 MediumN/A0%Jun 7, 2024
CVE-2024-22326: Missing Authentication for Critical Function5.0 MediumN/A0%Jun 6, 2024
CVE-2023-45192: Improper Restriction of XML External Entity Reference8.2 HighN/A1%Jun 6, 2024
CVE-2024-36845: Uncontrolled Resource Consumption4.3 MediumN/A0%May 31, 2024
CVE-2024-36844: Use After Free7.5 HighN/A1%May 31, 2024
CVE-2024-36843: Heap-based Buffer Overflow7.5 HighN/A1%May 31, 2024
CVE-2024-35142: Execution with Unnecessary Privileges8.4 HighN/A0%May 31, 2024
CVE-2024-35140: Improper Certificate Validation7.7 HighN/A0%May 31, 2024
CVE-2024-31908: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 31, 2024
CVE-2024-31907: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 31, 2024
CVE-2024-31889: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 31, 2024
CVE-2024-22338: Improper Input Validation4.0 MediumN/A0%May 31, 2024
CVE-2024-36928: NULL Pointer Dereference7.8 HighN/A0%May 30, 2024
CVE-2024-36926: NULL Pointer Dereference5.5 MediumN/A0%May 30, 2024
CVE-2022-43841: Use of Web Browser Cache Containing Sensitive Information4.0 MediumN/A0%May 30, 2024
CVE-2022-43575: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 30, 2024
CVE-2022-43384: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%May 30, 2024
CVE-2023-42005: Undefined Security Weakness7.4 HighN/A0%May 29, 2024
CVE-2024-28793: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%May 28, 2024
CVE-2023-37411: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 28, 2024
CVE-2024-3933: Buffer Access with Incorrect Length Value5.3 MediumN/A0%May 27, 2024
CVE-2023-47710: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 24, 2024
2501-2525 of 9776
‹›