The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2023-29011: Uncontrolled Search Path Element7.5 HighN/A0%Apr 25, 2023
CVE-2023-25555: Improper Neutralization of Special Elements used in an OS Command5.6 MediumN/A1%Apr 18, 2023
CVE-2023-22948: Missing Encryption of Sensitive Data4.9 MediumN/A0%Apr 13, 2023
CVE-2023-29054: Inadequate Encryption Strength7.4 HighN/A0%Apr 11, 2023
CVE-2023-24182: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Apr 11, 2023
CVE-2023-28368: Use of Weak Credentials5.7 MediumN/A0%Apr 11, 2023
CVE-2023-23761: Improper Authentication7.7 HighN/A0%Apr 7, 2023
CVE-2023-0344: Undefined Security Weakness9.1 CriticalN/A1%Mar 31, 2023
CVE-2023-27538: Authentication Bypass by Primary Weakness5.5 MediumN/A1%Mar 30, 2023
CVE-2022-48428: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A68%Mar 27, 2023
CVE-2023-0494: Use After Free7.8 HighN/A1%Mar 27, 2023
CVE-2023-28436: Improper Privilege Management5.7 MediumN/A0%Mar 23, 2023
CVE-2023-27100: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A10%Mar 22, 2023
CVE-2023-28531: Improper Access Control9.8 CriticalN/A3%Mar 17, 2023
CVE-2023-28110: Improper Neutralization of Special Elements used in a Command5.7 MediumN/A1%Mar 16, 2023
CVE-2023-28113: Improper Input Validation5.9 MediumN/A1%Mar 16, 2023
CVE-2023-25804: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Mar 15, 2023
CVE-2023-0345: Undefined Security Weakness9.8 CriticalN/A1%Mar 13, 2023
CVE-2023-27486: Incorrect Authorization8.1 HighN/A1%Mar 8, 2023
CVE-2023-26491: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 3, 2023
CVE-2023-25823: Use of Hard-coded Credentials5.4 MediumN/A1%Feb 23, 2023
CVE-2023-25152: Improper Link Resolution Before File Access8.4 HighN/A1%Feb 8, 2023
CVE-2023-25136: Double Free6.5 MediumN/A90%Feb 3, 2023
CVE-2023-24022: Improper Access Control10.0 CriticalN/A2%Jan 24, 2023
CVE-2023-23314: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Jan 23, 2023
1076-1100 of 2138
‹›