The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-25048: Heap-based Buffer Overflow7.5 HighN/A1%Apr 27, 2024
CVE-2024-25026: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Apr 25, 2024
CVE-2023-47731: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 23, 2024
CVE-2022-40745: Inadequate Encryption Strength5.5 MediumN/A0%Apr 19, 2024
CVE-2023-37397: Inadequate Encryption Strength3.6 LowN/A0%Apr 19, 2024
CVE-2023-27279: Improper Control of Interaction Frequency6.5 MediumN/A0%Apr 19, 2024
CVE-2023-37396: Use of a Broken or Risky Cryptographic Algorithm2.5 LowN/A0%Apr 19, 2024
CVE-2023-22869: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Apr 19, 2024
CVE-2023-37400: Insufficiently Protected Credentials7.8 HighN/A0%Apr 19, 2024
CVE-2024-26847: Undefined Security Weakness5.1 MediumN/A0%Apr 17, 2024
CVE-2024-22329: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Apr 17, 2024
CVE-2024-22354: Improper Restriction of XML External Entity Reference7.0 HighN/A0%Apr 17, 2024
CVE-2024-31887: Exposure of Sensitive System Information to an Unauthorized Control Sphere7.5 HighN/A0%Apr 16, 2024
CVE-2024-22358: Insufficient Session Expiration6.3 MediumN/A0%Apr 12, 2024
CVE-2024-22339: Insertion of Sensitive Information into Log File4.3 MediumN/A0%Apr 12, 2024
CVE-2024-22334: Incorrect Permission Assignment for Critical Resource4.4 MediumN/A0%Apr 12, 2024
CVE-2024-22359: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 12, 2024
CVE-2023-47714: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Apr 12, 2024
CVE-2024-27261: Exposed Dangerous Method or Function6.4 MediumN/A0%Apr 12, 2024
CVE-2023-45186: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Apr 12, 2024
CVE-2023-50307: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 12, 2024
CVE-2024-22357: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 12, 2024
CVE-2023-50949: Improper Certificate Validation5.9 MediumN/A0%Apr 11, 2024
CVE-2024-31874: Use of Uninitialized Variable6.2 MediumN/A0%Apr 10, 2024
CVE-2024-31873: Use of Hard-coded Credentials7.5 HighN/A0%Apr 10, 2024
2576-2600 of 9776
‹›