The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-25196: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A0%Mar 28, 2023
CVE-2023-25195: Server-Side Request Forgery (SSRF)8.1 HighN/A0%Mar 28, 2023
CVE-2023-27296: Deserialization of Untrusted Data8.8 HighN/A0%Mar 27, 2023
CVE-2022-47502: Improper Input Validation7.8 HighN/A0%Mar 24, 2023
CVE-2022-38745: Improper Control of Generation of Code7.8 HighN/A0%Mar 24, 2023
CVE-2023-28708: Unprotected Transport of Credentials4.3 MediumN/A0%Mar 22, 2023
CVE-2023-26513: Excessive Iteration7.5 HighN/A1%Mar 20, 2023
CVE-2023-25804: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Mar 15, 2023
CVE-2023-25695: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Mar 15, 2023
CVE-2023-0100: Improper Input Validation8.8 HighN/A0%Mar 15, 2023
CVE-2023-23408: Improper Neutralization of Input During Web Page Generation4.5 MediumN/A2%Mar 14, 2023
CVE-2023-25802: Path Traversal: '/dir/../filename'7.5 HighN/A1%Mar 13, 2023
CVE-2023-25803: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Mar 13, 2023
CVE-2023-26464: Deserialization of Untrusted Data7.5 HighN/A0%Mar 10, 2023
CVE-2023-27901: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Mar 8, 2023
CVE-2023-27900: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Mar 8, 2023
CVE-2023-23638: Deserialization of Untrusted Data5.0 MediumN/A68%Mar 8, 2023
CVE-2023-27522: Inconsistent Interpretation of HTTP Requests7.5 HighN/A1%Mar 7, 2023
CVE-2023-25690: Inconsistent Interpretation of HTTP Requests9.8 CriticalN/A67%Mar 7, 2023
CVE-2023-25544: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Mar 1, 2023
CVE-2023-25956: Generation of Error Message Containing Sensitive Information7.5 HighN/A0%Feb 24, 2023
CVE-2023-25696: Improper Input Validation9.8 CriticalN/A1%Feb 24, 2023
CVE-2023-25693: Improper Input Validation9.8 CriticalN/A1%Feb 24, 2023
CVE-2023-25692: Improper Input Validation7.5 HighN/A0%Feb 24, 2023
CVE-2023-25691: Improper Input Validation9.8 CriticalN/A0%Feb 24, 2023
2201-2225 of 4467
‹›