The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2023-35793: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Sep 26, 2023
CVE-2023-43631: Insufficiently Protected Credentials8.8 HighN/A0%Sep 21, 2023
CVE-2023-43633: Insufficiently Protected Credentials8.8 HighN/A0%Sep 21, 2023
CVE-2023-43619: Unrestricted Upload of File with Dangerous Type7.8 HighN/A0%Sep 20, 2023
CVE-2023-41160: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Sep 14, 2023
CVE-2023-41939: Improper Preservation of Permissions8.8 HighN/A1%Sep 6, 2023
CVE-2023-39982: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Sep 2, 2023
CVE-2023-34039: Use of a Broken or Risky Cryptographic Algorithm9.8 CriticalN/A67%Aug 29, 2023
CVE-2023-41153: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Aug 29, 2023
CVE-2023-40371: Use of a Broken or Risky Cryptographic Algorithm6.2 MediumN/A0%Aug 24, 2023
CVE-2023-37426: Use of Hard-coded Credentials7.4 HighN/A0%Aug 22, 2023
CVE-2020-22218: Out-of-bounds WriteN/AN/A1%Aug 22, 2023
CVE-2023-39808: Use of Hard-coded Credentials9.8 CriticalN/A1%Aug 21, 2023
CVE-2023-40291: Undefined Security Weakness6.8 MediumN/A0%Aug 14, 2023
CVE-2023-28481: Authorization Bypass Through User-Controlled Key8.8 HighN/A1%Aug 14, 2023
CVE-2023-30702: Out-of-bounds Write6.7 MediumN/A0%Aug 10, 2023
CVE-2023-30695: Out-of-bounds Write6.7 MediumN/A0%Aug 10, 2023
CVE-2023-38951: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A3%Aug 3, 2023
CVE-2023-3603: NULL Pointer Dereference3.1 LowN/A1%Jul 21, 2023
CVE-2023-38408: Unquoted Search Path or Element9.8 CriticalN/A80%Jul 20, 2023
CVE-2023-37268: Improper Authentication6.4 MediumN/A1%Jul 14, 2023
CVE-2023-37462: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.9 CriticalN/A92%Jul 14, 2023
CVE-2023-38325: Improper Certificate Validation7.5 HighN/A1%Jul 14, 2023
CVE-2023-37948: Improper Input Validation3.7 LowN/A0%Jul 12, 2023
CVE-2020-20021: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 12, 2023
1026-1050 of 2138
‹›