The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-28517: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 13, 2024
CVE-2022-43855: Undefined Security Weakness6.2 MediumN/A0%Mar 8, 2024
CVE-2023-46169: Improper Resolution of Path Equivalence6.5 MediumN/A0%Mar 7, 2024
CVE-2023-46172: Improper Authentication5.6 MediumN/A0%Mar 7, 2024
CVE-2023-46170: Observable Response Discrepancy6.5 MediumN/A0%Mar 7, 2024
CVE-2023-46171: Insertion of Sensitive Information into Log File4.3 MediumN/A0%Mar 7, 2024
CVE-2022-22399: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Mar 5, 2024
CVE-2023-25681: Use of Single-factor Authentication5.3 MediumN/A0%Mar 5, 2024
CVE-2023-26282: External Control of File Name or Path4.2 MediumN/A0%Mar 5, 2024
CVE-2023-35899: Improper Neutralization of Formula Elements in a CSV File7.0 HighN/A0%Mar 5, 2024
CVE-2024-22352: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Mar 5, 2024
CVE-2023-32331: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 HighN/A0%Mar 4, 2024
CVE-2023-38360: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 4, 2024
CVE-2023-38362: Observable Response Discrepancy5.3 MediumN/A0%Mar 4, 2024
CVE-2022-43890: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Mar 4, 2024
CVE-2023-28512: External Control of Assumed-Immutable Web Parameter5.9 MediumN/A0%Mar 3, 2024
CVE-2023-27291: Cleartext Transmission of Sensitive Information4.5 MediumN/A0%Mar 3, 2024
CVE-2022-43880: Uncontrolled Resource Consumption4.4 MediumN/A0%Mar 3, 2024
CVE-2024-22355: Weak Password Requirements5.9 MediumN/A0%Mar 3, 2024
CVE-2023-47742: Improper Certificate Validation5.9 MediumN/A0%Mar 3, 2024
CVE-2023-43054: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Mar 3, 2024
CVE-2023-47745: Cleartext Transmission of Sensitive Information6.2 MediumN/A0%Mar 3, 2024
CVE-2024-27255: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Mar 3, 2024
CVE-2024-25016: Improper Input Validation7.5 HighN/A0%Mar 3, 2024
CVE-2023-52499: Undefined Security Weakness5.5 MediumN/A0%Mar 2, 2024
2651-2675 of 9776
‹›