The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-35005: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Jun 19, 2023
CVE-2023-34396: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Jun 14, 2023
CVE-2023-34149: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Jun 14, 2023
CVE-2023-30631: Improper Input Validation7.5 HighN/A1%Jun 14, 2023
CVE-2023-33933: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jun 14, 2023
CVE-2022-47184: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jun 14, 2023
CVE-2023-34212: Deserialization of Untrusted Data6.5 MediumN/A1%Jun 12, 2023
CVE-2023-34468: Improper Control of Generation of Code8.8 HighN/A77%Jun 12, 2023
CVE-2023-30576: Use After Free6.8 MediumN/A0%Jun 7, 2023
CVE-2023-30575: Incorrect Calculation of Buffer Size6.5 MediumN/A0%Jun 7, 2023
CVE-2023-33234: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A0%May 30, 2023
CVE-2023-30601: Improper Privilege Management7.8 HighN/A0%May 30, 2023
CVE-2019-19791: Undefined Security Weakness9.8 CriticalN/A0%May 29, 2023
CVE-2023-32315: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/A94%May 26, 2023
CVE-2022-46907: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A4%May 25, 2023
CVE-2023-33246: Improper Control of Generation of Code9.8 CriticalN/A94%May 24, 2023
CVE-2023-31062: Improper Privilege Management9.8 CriticalN/A0%May 22, 2023
CVE-2023-31064: Files or Directories Accessible to External Parties7.5 HighN/A0%May 22, 2023
CVE-2023-31065: Insufficient Session Expiration9.1 CriticalN/A0%May 22, 2023
CVE-2023-31066: Files or Directories Accessible to External Parties9.1 CriticalN/A0%May 22, 2023
CVE-2023-31098: Weak Password Requirements9.8 CriticalN/A0%May 22, 2023
CVE-2023-31101: Initialization of a Resource with an Insecure Default6.5 MediumN/A0%May 22, 2023
CVE-2023-31103: Exposure of Resource to Wrong Sphere7.5 HighN/A0%May 22, 2023
CVE-2023-31206: Exposure of Resource to Wrong Sphere7.5 HighN/A0%May 22, 2023
CVE-2023-31453: Incorrect Permission Assignment for Critical Resource7.5 HighN/A0%May 22, 2023
2126-2150 of 4467
‹›