The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2023-37415: Improper Input Validation8.8 HighN/A0%Jul 13, 2023
CVE-2022-45855: Improper Neutralization of Special Elements used in an Expression Language Statement8.0 HighN/A0%Jul 12, 2023
CVE-2022-42009: Improper Neutralization of Special Elements used in an Expression Language Statement8.0 HighN/A0%Jul 12, 2023
CVE-2023-37582: Improper Control of Generation of Code9.8 CriticalN/A94%Jul 12, 2023
CVE-2023-22888: Improper Input Validation6.5 MediumN/A0%Jul 12, 2023
CVE-2023-36543: Inefficient Regular Expression Complexity6.5 MediumN/A1%Jul 12, 2023
CVE-2022-46651: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Jul 12, 2023
CVE-2023-22887: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jul 12, 2023
CVE-2023-35908: Incorrect Authorization6.5 MediumN/A0%Jul 12, 2023
CVE-2023-30428: Incorrect Authorization8.2 HighN/A0%Jul 12, 2023
CVE-2023-30429: Incorrect Authorization9.6 CriticalN/A0%Jul 12, 2023
CVE-2023-31007: Improper Authentication0.0 NoneN/A0%Jul 12, 2023
CVE-2023-37579: Incorrect Authorization8.2 HighN/A0%Jul 12, 2023
CVE-2023-32200: Improper Neutralization of Special Elements used in an Expression Language Statement8.8 HighN/A1%Jul 12, 2023
CVE-2023-34442: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Jul 10, 2023
CVE-2023-35887: Improper Limitation of a Pathname to a Restricted Directory5.0 MediumN/A0%Jul 10, 2023
CVE-2023-33008: Deserialization of Untrusted Data5.3 MediumN/A0%Jul 7, 2023
CVE-2023-34150: Improper Input Validation6.5 MediumN/A0%Jul 5, 2023
CVE-2023-35797: Improper Input Validation9.8 CriticalN/A1%Jul 3, 2023
CVE-2023-22886: Improper Input Validation8.8 HighN/A0%Jun 29, 2023
CVE-2023-35798: Improper Input Validation4.3 MediumN/A0%Jun 27, 2023
CVE-2023-34395: Improper Neutralization of Argument Delimiters in a Command7.8 HighN/A0%Jun 27, 2023
CVE-2023-31469: Improper Privilege Management8.8 HighN/A0%Jun 23, 2023
CVE-2023-34981: Incorrect Permission Assignment for Critical Resource7.5 HighN/A0%Jun 21, 2023
CVE-2023-34340: Improper Authentication9.8 CriticalN/A0%Jun 21, 2023
2101-2125 of 4467