The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2022-36909: Missing Authorization6.5 MediumN/A1%Jul 27, 2022
CVE-2022-36908: Cross-Site Request Forgery (CSRF)6.5 MediumN/A1%Jul 27, 2022
CVE-2022-36881: Improper Certificate Validation8.1 HighN/A1%Jul 27, 2022
CVE-2022-30269: Insufficient Verification of Data Authenticity8.8 HighN/A0%Jul 26, 2022
CVE-2022-30270: Improper Authentication9.8 CriticalN/A1%Jul 26, 2022
CVE-2022-30271: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 26, 2022
CVE-2022-30272: Insufficient Verification of Data Authenticity7.2 HighN/A0%Jul 26, 2022
CVE-2022-29964: Use of Hard-coded Credentials5.5 MediumN/A0%Jul 26, 2022
CVE-2022-24657: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 20, 2022
CVE-2022-36321: Insertion of Sensitive Information into Log File4.1 MediumN/A2%Jul 20, 2022
CVE-2022-32985: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 17, 2022
CVE-2022-28369: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A2%Jul 14, 2022
CVE-2022-34757: Use of a Broken or Risky Cryptographic Algorithm6.7 MediumN/A0%Jul 13, 2022
CVE-2022-32073: Integer Overflow or Wraparound9.8 CriticalN/A2%Jul 13, 2022
CVE-2022-34464: Files or Directories Accessible to External Parties6.3 Medium5.3 Medium0%Jul 12, 2022
CVE-2022-31124: Generation of Error Message Containing Sensitive Information7.7 HighN/A1%Jul 6, 2022
CVE-2022-31110: Uncontrolled Resource Consumption5.3 MediumN/A2%Jun 29, 2022
CVE-2022-28622: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A1%Jun 27, 2022
CVE-2022-1668: Weak Password Requirements9.8 CriticalN/A2%Jun 24, 2022
CVE-2017-20083: Hidden Functionality5.3 MediumN/A0%Jun 22, 2022
CVE-2022-32974: Undefined Security Weakness6.5 MediumN/A1%Jun 21, 2022
CVE-2022-27511: Improper Access Control8.1 HighN/A13%Jun 16, 2022
CVE-2022-29241: Exposure of Sensitive Information to an Unauthorized Actor7.1 HighN/A1%Jun 14, 2022
CVE-2022-29238: Direct Request4.3 MediumN/A1%Jun 14, 2022
CVE-2022-28704: Undefined Security Weakness7.2 HighN/A3%Jun 13, 2022
1151-1175 of 2138
‹›