The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2023-51384: Improper Access Control5.5 MediumN/A0%Dec 18, 2023
CVE-2023-48795: Improper Validation of Integrity Check Value5.9 MediumN/A94%Dec 18, 2023
CVE-2023-28053: Use of a Broken or Risky Cryptographic Algorithm5.3 MediumN/A0%Dec 18, 2023
CVE-2023-36654: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Dec 12, 2023
CVE-2023-45285: Undefined Security Weakness7.5 HighN/A1%Dec 6, 2023
CVE-2023-6269: Improper Neutralization of Argument Delimiters in a Command10.0 CriticalN/A2%Dec 5, 2023
CVE-2023-48712: Incorrect Authorization7.1 HighN/A1%Nov 24, 2023
CVE-2023-6174: Out-of-bounds Read6.3 MediumN/A1%Nov 16, 2023
CVE-2023-34060: Missing Authentication for Critical Function9.8 CriticalN/A1%Nov 14, 2023
CVE-2023-46446: Authorization Bypass Through User-Controlled Key6.8 MediumN/A1%Nov 14, 2023
CVE-2023-46445: Insufficient Verification of Data Authenticity5.9 MediumN/A1%Nov 14, 2023
CVE-2023-45140: Missing Authentication for Critical Function4.8 MediumN/A0%Nov 8, 2023
CVE-2023-38994: Exposure of Resource to Wrong Sphere7.9 HighN/A0%Oct 31, 2023
CVE-2023-35794: Improper Authentication8.8 HighN/A1%Oct 27, 2023
CVE-2023-46122: Improper Limitation of a Pathname to a Restricted Directory3.9 LowN/A0%Oct 23, 2023
CVE-2023-46322: Improper Output Neutralization for Logs9.8 CriticalN/A1%Oct 22, 2023
CVE-2023-44184: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A1%Oct 12, 2023
CVE-2023-45226: Use of Hard-coded Credentials7.4 HighN/A0%Oct 10, 2023
CVE-2023-36380: Use of Hard-coded Credentials9.8 CriticalN/A0%Oct 10, 2023
CVE-2023-43068: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A1%Oct 5, 2023
CVE-2023-43809: Improper Authentication7.5 HighN/A1%Oct 4, 2023
CVE-2023-43660: Improper Authentication4.8 MediumN/A0%Sep 27, 2023
CVE-2023-42818: Improper Authentication5.4 MediumN/A1%Sep 27, 2023
CVE-2023-43652: Missing Authorization8.2 HighN/A1%Sep 27, 2023
CVE-2023-20262: Undefined Security Weakness5.3 MediumN/A1%Sep 27, 2023
1001-1025 of 2138
‹›