The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2022-38714: Insufficiently Protected Credentials4.9 MediumN/A1%Feb 12, 2024
CVE-2024-22313: Use of Hard-coded Credentials6.2 MediumN/A0%Feb 10, 2024
CVE-2024-22312: Plaintext Storage of a Password4.4 MediumN/A0%Feb 10, 2024
CVE-2023-50957: Cleartext Storage of Sensitive Information8.0 HighN/A0%Feb 10, 2024
CVE-2024-22361: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 10, 2024
CVE-2023-42016: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Feb 9, 2024
CVE-2023-32341: Uncontrolled Resource Consumption6.5 MediumN/A1%Feb 9, 2024
CVE-2024-22332: Uncontrolled Resource Consumption6.5 MediumN/A1%Feb 9, 2024
CVE-2023-45191: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A1%Feb 9, 2024
CVE-2023-45190: Improper Restriction of Excessive Authentication Attempts5.1 MediumN/A0%Feb 9, 2024
CVE-2023-45187: Insufficient Session Expiration6.3 MediumN/A0%Feb 9, 2024
CVE-2024-22318: Use of a Broken or Risky Cryptographic Algorithm5.1 MediumN/A1%Feb 9, 2024
CVE-2023-47700: Improper Certificate Validation5.9 MediumN/A1%Feb 7, 2024
CVE-2023-38369: Weak Password Requirements6.2 MediumN/A1%Feb 7, 2024
CVE-2023-31002: Cleartext Storage of Sensitive Information5.1 MediumN/A0%Feb 7, 2024
CVE-2023-43017: Improper Certificate Validation8.2 HighN/A1%Feb 7, 2024
CVE-2023-32330: Improper Certificate Validation7.5 HighN/A1%Feb 7, 2024
CVE-2023-32328: Cleartext Transmission of Sensitive Information7.5 HighN/A1%Feb 7, 2024
CVE-2024-22331: Exposure of Sensitive Information to an Unauthorized Actor6.2 MediumN/A0%Feb 6, 2024
CVE-2023-46183: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Feb 6, 2024
CVE-2023-33851: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Feb 4, 2024
CVE-2023-50947: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 4, 2024
CVE-2023-31006: Uncontrolled Resource Consumption6.5 MediumN/A1%Feb 3, 2024
CVE-2023-31004: Channel Accessible by Non-Endpoint8.3 HighN/A1%Feb 3, 2024
CVE-2023-32329: Insufficient Verification of Data Authenticity6.2 MediumN/A0%Feb 3, 2024
2726-2750 of 9781