The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-46819: Missing Authentication for Critical Function5.3 MediumN/A0%Nov 7, 2023
CVE-2023-46851: Improper Input Validation4.9 MediumN/A0%Nov 7, 2023
CVE-2023-1713: Unrestricted Upload of File with Dangerous Type8.8 HighN/A4%Nov 1, 2023
CVE-2023-46237: Improper Limitation of a Pathname to a Restricted Directory5.8 MediumN/A0%Oct 31, 2023
CVE-2023-46236: Server-Side Request Forgery (SSRF)8.6 HighN/A0%Oct 31, 2023
CVE-2023-46215: Insertion of Sensitive Information into Log File7.5 HighN/A0%Oct 28, 2023
CVE-2023-46604: Deserialization of Untrusted Data10.0 CriticalN/A94%Oct 27, 2023
CVE-2023-46288: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Oct 23, 2023
CVE-2023-31122: Out-of-bounds Read7.5 HighN/A0%Oct 23, 2023
CVE-2023-43622: Uncontrolled Resource Consumption7.5 HighN/A59%Oct 23, 2023
CVE-2023-45802: Improper Resource Shutdown or Release5.9 MediumN/A2%Oct 23, 2023
CVE-2023-44483: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Oct 20, 2023
CVE-2023-46227: Deserialization of Untrusted Data7.5 HighN/A0%Oct 19, 2023
CVE-2023-25753: Server-Side Request Forgery (SSRF)6.5 MediumN/A1%Oct 19, 2023
CVE-2023-39456: Improper Input Validation7.5 HighN/A7%Oct 17, 2023
CVE-2023-41752: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 17, 2023
CVE-2023-43666: Insufficient Verification of Data Authenticity6.5 MediumN/A1%Oct 16, 2023
CVE-2023-43667: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A2%Oct 16, 2023
CVE-2023-43668: Authorization Bypass Through User-Controlled Key9.8 CriticalN/A0%Oct 16, 2023
CVE-2023-45757: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A4%Oct 16, 2023
CVE-2023-42663: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Oct 14, 2023
CVE-2023-42792: Exposure of Resource to Wrong Sphere6.5 MediumN/A1%Oct 14, 2023
CVE-2023-45348: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 14, 2023
CVE-2023-42780: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 14, 2023
CVE-2023-44981: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Oct 11, 2023
2001-2025 of 4467
‹›