The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2023-32327: Improper Restriction of XML External Entity Reference7.1 HighN/A1%Feb 3, 2024
CVE-2023-43016: Empty Password in Configuration File7.3 HighN/A1%Feb 3, 2024
CVE-2023-30999: Uncontrolled Resource Consumption7.5 HighN/A1%Feb 3, 2024
CVE-2023-31005: Improper Privilege Management6.2 MediumN/A0%Feb 3, 2024
CVE-2023-38273: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A1%Feb 2, 2024
CVE-2023-47142: Incorrect Authorization7.5 HighN/A0%Feb 2, 2024
CVE-2023-47144: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 2, 2024
CVE-2023-47143: Improper Neutralization of HTTP Headers for Scripting Syntax10.0 CriticalN/A1%Feb 2, 2024
CVE-2023-47148: Missing Authorization5.3 MediumN/A1%Feb 2, 2024
CVE-2023-38020: Improper Output Neutralization for Logs4.3 MediumN/A0%Feb 2, 2024
CVE-2023-38019: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A1%Feb 2, 2024
CVE-2023-38263: Improper Access Control6.5 MediumN/A0%Feb 2, 2024
CVE-2022-40744: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 2, 2024
CVE-2023-46159: Improper Input Validation2.6 LowN/A1%Feb 2, 2024
CVE-2024-22320: Deserialization of Untrusted Data9.8 CriticalN/A73%Feb 2, 2024
CVE-2024-22319: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A76%Feb 2, 2024
CVE-2023-32333: Improper Access Control6.5 MediumN/A1%Feb 2, 2024
CVE-2023-50962: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Feb 2, 2024
CVE-2023-50328: Use of GET Request Method With Sensitive Query Strings3.7 LowN/A1%Feb 2, 2024
CVE-2023-50938: User Interface (UI) Misrepresentation of Critical Information6.5 MediumN/A0%Feb 2, 2024
CVE-2023-50935: Direct Request6.5 MediumN/A0%Feb 2, 2024
CVE-2023-50941: Session Fixation6.3 MediumN/A0%Feb 2, 2024
CVE-2023-50934: Use of Single-factor Authentication5.3 MediumN/A0%Feb 2, 2024
CVE-2023-50940: Permissive Cross-domain Policy with Untrusted Domains5.3 MediumN/A0%Feb 2, 2024
CVE-2023-50936: Insufficient Session Expiration6.3 MediumN/A0%Feb 2, 2024
2751-2775 of 9781