The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-31454: Incorrect Permission Assignment for Critical Resource7.5 HighN/A0%May 22, 2023
CVE-2023-31058: Deserialization of Untrusted Data7.5 HighN/A0%May 22, 2023
CVE-2023-28709: Off-by-one Error7.5 HighN/A0%May 22, 2023
CVE-2022-47937: Improper Input Validation9.8 CriticalN/A0%May 15, 2023
CVE-2023-28936: Incorrect Comparison5.3 MediumN/A0%May 12, 2023
CVE-2023-29032: Improper Authentication8.1 HighN/A0%May 12, 2023
CVE-2023-29246: Improper Input Validation7.2 HighN/A0%May 12, 2023
CVE-2023-25754: Privilege Context Switching Error9.8 CriticalN/A0%May 8, 2023
CVE-2023-31039: Improper Input Validation9.8 CriticalN/A1%May 8, 2023
CVE-2023-29247: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 8, 2023
CVE-2023-31038: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%May 8, 2023
CVE-2021-40331: Incorrect Permission Assignment for Critical Resource8.1 HighN/A0%May 5, 2023
CVE-2022-45048: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.4 HighN/A0%May 5, 2023
CVE-2023-26268: Exposure of Sensitive Information to an Unauthorized Actor4.4 MediumN/A0%May 2, 2023
CVE-2023-31207: Insertion of Sensitive Information into Log File4.4 MediumN/A0%May 2, 2023
CVE-2023-32007: Improper Neutralization of Special Elements used in a Command8.8 HighN/A92%May 2, 2023
CVE-2022-46365: Improper Input Validation9.1 CriticalN/A0%May 1, 2023
CVE-2022-45801: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.4 MediumN/A0%May 1, 2023
CVE-2022-45802: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%May 1, 2023
CVE-2022-41398: Use of Hard-coded Credentials7.5 HighN/A0%Apr 28, 2023
CVE-2022-25277: Unrestricted Upload of File with Dangerous Type7.2 HighN/A0%Apr 26, 2023
CVE-2023-22665: Improper Neutralization of Special Elements used in an Expression Language Statement5.4 MediumN/A1%Apr 25, 2023
CVE-2023-30776: Insufficiently Protected Credentials4.9 MediumN/A0%Apr 24, 2023
CVE-2023-27524: Initialization of a Resource with an Insecure Default8.9 HighN/A84%Apr 24, 2023
CVE-2023-25601: Improper Authentication4.3 MediumN/A0%Apr 20, 2023
2151-2175 of 4467
‹›