The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2023-50327: Trusting HTTP Permission Methods on the Server Side5.3 MediumN/A0%Feb 2, 2024
CVE-2023-50937: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 2, 2024
CVE-2023-50933: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 2, 2024
CVE-2023-50326: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Feb 2, 2024
CVE-2023-50939: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 1, 2024
CVE-2024-1019: Improper Input Validation8.6 HighN/A0%Jan 30, 2024
CVE-2024-23622: Incorrect Calculation of Buffer Size10.0 CriticalN/A1%Jan 25, 2024
CVE-2024-23621: Incorrect Calculation of Buffer Size10.0 CriticalN/A1%Jan 25, 2024
CVE-2024-23620: Improper Privilege Management8.8 HighN/A0%Jan 25, 2024
CVE-2024-23619: Use of Hard-coded Credentials9.8 CriticalN/A1%Jan 25, 2024
CVE-2023-47141: Improper Input Validation5.3 MediumN/A0%Jan 22, 2024
CVE-2023-47158: Improper Input Validation5.3 MediumN/A0%Jan 22, 2024
CVE-2023-47152: Generation of Error Message Containing Sensitive Information5.9 MediumN/A0%Jan 22, 2024
CVE-2023-27859: Uncontrolled Search Path Element6.5 MediumN/A0%Jan 22, 2024
CVE-2023-47747: Improper Input Validation5.3 MediumN/A0%Jan 22, 2024
CVE-2023-45193: Improper Input Validation5.9 MediumN/A0%Jan 22, 2024
CVE-2023-50308: Improper Input Validation6.5 MediumN/A0%Jan 22, 2024
CVE-2023-47746: Improper Input Validation5.3 MediumN/A0%Jan 22, 2024
CVE-2023-50963: URL Redirection to Untrusted Site6.5 MediumN/A0%Jan 19, 2024
CVE-2023-32337: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Jan 19, 2024
CVE-2023-47718: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 19, 2024
CVE-2023-35020: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Jan 19, 2024
CVE-2023-40683: Improper Authorization8.8 HighN/A0%Jan 19, 2024
CVE-2023-38738: Storing Passwords in a Recoverable Format6.8 MediumN/A0%Jan 19, 2024
CVE-2024-22317: Improper Restriction of Excessive Authentication Attempts9.1 CriticalN/A0%Jan 18, 2024
2776-2800 of 9781