The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-45648: Improper Input Validation5.3 MediumN/A1%Oct 10, 2023
CVE-2023-42795: Incomplete Cleanup5.3 MediumN/A1%Oct 10, 2023
CVE-2023-42794: Incomplete CleanupN/AN/A2%Oct 10, 2023
CVE-2023-36419: Improper Restriction of XML External Entity Reference8.8 HighN/A1%Oct 10, 2023
CVE-2023-45303: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.4 HighN/A1%Oct 6, 2023
CVE-2023-39410: Deserialization of Untrusted Data7.5 HighN/A0%Sep 29, 2023
CVE-2023-33972: Improper Privilege Management7.2 HighN/A0%Sep 27, 2023
CVE-2023-42457: Uncontrolled Resource Consumption7.5 HighN/A0%Sep 21, 2023
CVE-2023-41834: Improper Neutralization of CRLF Sequences in HTTP Headers6.1 MediumN/A1%Sep 19, 2023
CVE-2023-41267: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/A0%Sep 14, 2023
CVE-2023-42503: Improper Input Validation5.5 MediumN/A0%Sep 14, 2023
CVE-2023-41081: Undefined Security Weakness7.5 HighN/A0%Sep 13, 2023
CVE-2023-38156: Improper Input Validation7.2 HighN/A0%Sep 12, 2023
CVE-2023-40712: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Sep 12, 2023
CVE-2023-40611: Incorrect Authorization4.3 MediumN/A0%Sep 12, 2023
CVE-2014-5329: Undefined Security Weakness7.5 HighN/A2%Sep 8, 2023
CVE-2023-32672: Incorrect Authorization4.3 MediumN/A0%Sep 6, 2023
CVE-2023-37941: Deserialization of Untrusted Data6.6 MediumN/A84%Sep 6, 2023
CVE-2023-39265: Improper Input Validation3.8 LowN/A73%Sep 6, 2023
CVE-2023-39264: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Sep 6, 2023
CVE-2023-27523: Incorrect Authorization5.0 MediumN/A0%Sep 6, 2023
CVE-2023-36388: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Sep 6, 2023
CVE-2023-27526: Incorrect Authorization4.3 MediumN/A0%Sep 6, 2023
CVE-2023-36387: Incorrect Authorization5.4 MediumN/A0%Sep 6, 2023
CVE-2023-40743: Improper Input Validation9.8 CriticalN/A1%Sep 5, 2023
2026-2050 of 4467
‹›