The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-41704: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Oct 25, 2022
CVE-2021-42010: Improper Encoding or Escaping of Output9.8 CriticalN/A0%Oct 24, 2022
CVE-2022-42466: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A22%Oct 19, 2022
CVE-2022-42467: Initialization of a Resource with an Insecure Default5.3 MediumN/A0%Oct 19, 2022
CVE-2022-39198: Deserialization of Untrusted Data9.8 CriticalN/A10%Oct 18, 2022
CVE-2022-24697: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A14%Oct 13, 2022
CVE-2022-42889: Improper Control of Generation of Code9.8 CriticalN/A94%Oct 13, 2022
CVE-2022-40664: Improper Authentication9.8 CriticalN/A1%Oct 12, 2022
CVE-2022-41672: Insufficient Session Expiration8.1 HighN/A0%Oct 7, 2022
CVE-2021-43980: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Sep 28, 2022
CVE-2022-33683: Improper Certificate Validation5.9 MediumN/A0%Sep 23, 2022
CVE-2022-33682: Improper Certificate Validation5.9 MediumN/A0%Sep 23, 2022
CVE-2022-33681: Improper Certificate Validation5.9 MediumN/A0%Sep 23, 2022
CVE-2022-24280: Improper Input Validation6.5 MediumN/A0%Sep 23, 2022
CVE-2022-26112: Improper Control of Generation of Code9.8 CriticalN/A2%Sep 23, 2022
CVE-2022-40705: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Sep 22, 2022
CVE-2022-38648: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Sep 22, 2022
CVE-2022-40146: Server-Side Request Forgery (SSRF)7.5 HighN/A41%Sep 22, 2022
CVE-2022-38398: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Sep 22, 2022
CVE-2022-40754: URL Redirection to Untrusted Site6.1 MediumN/A2%Sep 21, 2022
CVE-2022-40604: Use of Externally-Controlled Format String7.5 HighN/A2%Sep 21, 2022
CVE-2022-40955: Deserialization of Untrusted Data8.8 HighN/A4%Sep 20, 2022
CVE-2022-34917: Memory Allocation with Excessive Size Value7.5 HighN/A0%Sep 20, 2022
CVE-2021-42597: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 16, 2022
CVE-2022-29240: Use of Uninitialized Resource8.1 HighN/A0%Sep 15, 2022
2326-2350 of 4467
‹›