The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-20860: Undefined Security Weakness7.5 HighN/A4%Mar 27, 2023
CVE-2023-20861: Uncontrolled Resource Consumption6.5 MediumN/A1%Mar 23, 2023
CVE-2022-43484: Improper Input Validation7.8 HighN/A0%Dec 5, 2022
CVE-2022-22971: Allocation of Resources Without Limits or ThrottlingN/AN/A3%May 12, 2022
CVE-2022-22970: Allocation of Resources Without Limits or ThrottlingN/AN/A2%May 12, 2022
CVE-2022-22968: Improper Handling of Case SensitivityN/AN/A6%Apr 14, 2022
CVE-2022-22950: Allocation of Resources Without Limits or ThrottlingN/AN/A36%Apr 1, 2022
CVE-2022-22965: Improper Control of Generation of Code9.8 CriticalN/A100%Apr 1, 2022
CVE-2021-22060: Undefined Security Weakness4.3 MediumN/A1%Jan 7, 2022
CVE-2021-22096: Improper Output Neutralization for Logs4.3 MediumN/A1%Oct 28, 2021
CVE-2021-29500: Improper Verification of Cryptographic Signature7.5 HighN/A1%Jun 4, 2021
CVE-2021-22118: Improper Privilege Management7.8 HighN/A0%May 27, 2021
CVE-2020-5421: Undefined Security Weakness8.7 HighN/A12%Sep 19, 2020
CVE-2020-5397: Cross-Site Request Forgery (CSRF)5.3 MediumN/A3%Jan 17, 2020
CVE-2020-5398: Improper Neutralization of Input During Web Page Generation8.0 HighN/A89%Jan 16, 2020
CVE-2013-6430: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Jan 10, 2020
CVE-2016-1000027: Deserialization of Untrusted Data9.8 CriticalN/A33%Jan 2, 2020
CVE-2018-15756: Undefined Security Weakness7.5 HighN/A9%Oct 18, 2018
CVE-2018-11039: Undefined Security WeaknessN/AN/A3%Jun 25, 2018
CVE-2018-11040: Inclusion of Functionality from Untrusted Control SphereN/AN/A3%Jun 25, 2018
CVE-2018-1258: Incorrect Authorization8.8 HighN/A2%May 11, 2018
CVE-2018-1257: Undefined Security WeaknessN/AN/A3%May 11, 2018
CVE-2018-1274: Allocation of Resources Without Limits or Throttling7.5 HighN/A2%Apr 18, 2018
CVE-2018-1273: Improper Control of Generation of CodeN/AN/A97%Apr 11, 2018
CVE-2018-1275: Improper Control of Generation of Code9.8 CriticalN/A57%Apr 11, 2018
51-75 of 97
‹›