The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-36760: Inconsistent Interpretation of HTTP Requests9.0 CriticalN/A0%Jan 17, 2023
CVE-2006-20001: Out-of-bounds Write7.5 HighN/A1%Jan 17, 2023
CVE-2022-41703: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A1%Jan 16, 2023
CVE-2022-45438: Exposure of Resource to Wrong Sphere5.3 MediumN/A3%Jan 16, 2023
CVE-2022-43721: URL Redirection to Untrusted Site5.4 MediumN/A1%Jan 16, 2023
CVE-2022-43720: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.4 MediumN/A2%Jan 16, 2023
CVE-2022-43719: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jan 16, 2023
CVE-2022-43718: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 16, 2023
CVE-2022-43717: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jan 16, 2023
CVE-2023-22602: Interpretation Conflict7.5 HighN/A0%Jan 14, 2023
CVE-2022-46769: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 9, 2023
CVE-2022-45935: Exposure of Resource to Wrong Sphere5.5 MediumN/A0%Jan 6, 2023
CVE-2022-45787: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Jan 6, 2023
CVE-2022-45875: Improper Input Validation9.8 CriticalN/A3%Jan 4, 2023
CVE-2022-45143: Improper Encoding or Escaping of Output7.5 HighN/A1%Jan 3, 2023
CVE-2021-32824: Deserialization of Untrusted Data9.8 CriticalN/A6%Jan 3, 2023
CVE-2022-44621: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A9%Dec 30, 2022
CVE-2022-43396: Incomplete List of Disallowed Inputs8.8 HighN/A0%Dec 30, 2022
CVE-2020-10650: Deserialization of Untrusted Data8.1 HighN/A10%Dec 26, 2022
CVE-2022-45347: Incomplete Cleanup9.8 CriticalN/A0%Dec 22, 2022
CVE-2022-40145: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A5%Dec 21, 2022
CVE-2022-4641: Insecure Temporary File2.5 LowN/A0%Dec 21, 2022
CVE-2022-46421: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A34%Dec 20, 2022
CVE-2022-40743: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 19, 2022
CVE-2022-37392: Improper Check for Unusual or Exceptional Conditions5.3 MediumN/A1%Dec 19, 2022
2251-2275 of 4467
‹›