The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-51437: Observable Discrepancy7.4 HighN/A0%Feb 7, 2024
CVE-2024-23673: Improper Limitation of a Pathname to a Restricted Directory8.5 HighN/A0%Feb 6, 2024
CVE-2021-4436: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A80%Feb 5, 2024
CVE-2024-0338: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A0%Feb 2, 2024
CVE-2023-44313: Server-Side Request Forgery (SSRF)7.6 HighN/A65%Jan 31, 2024
CVE-2023-44312: Exposure of Sensitive Information to an Unauthorized Actor5.8 MediumN/A0%Jan 31, 2024
CVE-2023-29055: Insufficiently Protected Credentials7.5 HighN/A0%Jan 29, 2024
CVE-2023-51702: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Jan 24, 2024
CVE-2023-50944: Missing Authorization6.5 MediumN/A0%Jan 24, 2024
CVE-2023-50943: Deserialization of Untrusted Data7.5 HighN/A0%Jan 24, 2024
CVE-2024-23636: Deserialization of Untrusted Data9.8 CriticalN/A1%Jan 23, 2024
CVE-2023-49657: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Jan 23, 2024
CVE-2024-21733: Generation of Error Message Containing Sensitive Information5.3 MediumN/A71%Jan 19, 2024
CVE-2023-46226: Improper Control of Generation of Code9.8 CriticalN/A6%Jan 15, 2024
CVE-2023-46749: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jan 15, 2024
CVE-2023-50290: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A93%Jan 15, 2024
CVE-2023-6554: Missing Authorization6.5 MediumN/A0%Jan 11, 2024
CVE-2023-49619: Concurrent Execution using Shared Resource with Improper Synchronization3.1 LowN/A1%Jan 10, 2024
CVE-2023-51441: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Jan 6, 2024
CVE-2023-51784: Improper Control of Generation of Code9.8 CriticalN/A7%Jan 3, 2024
CVE-2023-51785: Deserialization of Untrusted Data7.5 HighN/A0%Jan 3, 2024
CVE-2023-49299: Improper Input Validation8.8 HighN/A1%Dec 30, 2023
CVE-2023-47804: Improper Input Validation8.8 HighN/A3%Dec 29, 2023
CVE-2023-51467: Server-Side Request Forgery (SSRF)9.8 CriticalN/A94%Dec 26, 2023
CVE-2023-50968: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A82%Dec 26, 2023
1926-1950 of 4467
‹›