The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-25824: Loop with Unreachable Exit Condition7.5 HighN/A1%Feb 23, 2023
CVE-2023-25621: Undefined Security Weakness6.5 MediumN/A0%Feb 23, 2023
CVE-2023-24998: Allocation of Resources Without Limits or Throttling7.5 HighN/A49%Feb 20, 2023
CVE-2023-25613: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A0%Feb 20, 2023
CVE-2022-42735: Improper Privilege Management8.8 HighN/A0%Feb 15, 2023
CVE-2023-25141: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A1%Feb 14, 2023
CVE-2023-22832: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Feb 10, 2023
CVE-2023-25194: Deserialization of Untrusted Data8.8 HighN/A94%Feb 7, 2023
CVE-2023-24814: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Feb 7, 2023
CVE-2022-45786: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A0%Feb 4, 2023
CVE-2023-22849: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 4, 2023
CVE-2023-24997: Deserialization of Untrusted Data9.8 CriticalN/A0%Feb 1, 2023
CVE-2023-24977: Out-of-bounds Read7.5 HighN/A0%Feb 1, 2023
CVE-2022-28331: Integer Overflow or Wraparound9.8 CriticalN/A0%Jan 31, 2023
CVE-2022-25147: Integer Overflow or Wraparound6.5 MediumN/A0%Jan 31, 2023
CVE-2022-24963: Integer Overflow or Wraparound9.8 CriticalN/A0%Jan 31, 2023
CVE-2022-44644: Improper Input Validation6.5 MediumN/A0%Jan 31, 2023
CVE-2022-44645: Deserialization of Untrusted Data8.8 HighN/A4%Jan 31, 2023
CVE-2023-24829: Incorrect Authorization8.8 HighN/A0%Jan 31, 2023
CVE-2023-24830: Improper Authentication7.5 HighN/A2%Jan 30, 2023
CVE-2020-36658: Improper Certificate Validation8.1 HighN/A0%Jan 27, 2023
CVE-2020-36659: Improper Certificate Validation8.1 HighN/A0%Jan 27, 2023
CVE-2023-22884: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A65%Jan 21, 2023
CVE-2022-47966: Improper Input Validation9.8 CriticalN/A100%Jan 18, 2023
CVE-2022-37436: Improper Neutralization of CRLF Sequences in HTTP Headers5.3 MediumN/A1%Jan 17, 2023
2226-2250 of 4467
‹›