The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-39135: Improper Restriction of XML External Entity Reference9.8 CriticalN/A0%Sep 11, 2022
CVE-2022-28220: Improper Neutralization of Special Elements used in a Command7.5 HighN/A2%Sep 8, 2022
CVE-2022-38370: Missing Authorization7.5 HighN/A1%Sep 5, 2022
CVE-2022-38369: Session Fixation8.8 HighN/A2%Sep 5, 2022
CVE-2022-38054: Session Fixation9.8 CriticalN/A2%Sep 2, 2022
CVE-2022-38170: Incorrect Permission Assignment for Critical Resource4.7 MediumN/A0%Sep 2, 2022
CVE-2022-29158: Inefficient Regular Expression Complexity7.5 HighN/A1%Sep 2, 2022
CVE-2022-29063: Deserialization of Untrusted Data9.8 CriticalN/A15%Sep 2, 2022
CVE-2022-25813: Improper Neutralization of Special Elements Used in a Template Engine7.5 HighN/A58%Sep 2, 2022
CVE-2022-25371: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A2%Sep 2, 2022
CVE-2022-25370: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Sep 2, 2022
CVE-2022-37435: Incorrect Permission Assignment for Critical Resource8.8 HighN/A0%Sep 1, 2022
CVE-2022-37023: Deserialization of Untrusted Data6.5 MediumN/A0%Aug 31, 2022
CVE-2022-37022: Deserialization of Untrusted Data8.8 HighN/A0%Aug 31, 2022
CVE-2022-37021: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 31, 2022
CVE-2021-25642: Deserialization of Untrusted Data8.8 HighN/A2%Aug 25, 2022
CVE-2022-22728: Buffer Copy without Checking Size of Input7.5 HighN/A2%Aug 25, 2022
CVE-2022-35278: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A7%Aug 23, 2022
CVE-2022-34916: Improper Input Validation9.8 CriticalN/A3%Aug 21, 2022
CVE-2022-38362: Undefined Security Weakness8.8 HighN/A1%Aug 16, 2022
CVE-2022-2838: Improper Restriction of XML External Entity Reference5.3 MediumN/A0%Aug 16, 2022
CVE-2022-37401: Insufficient Entropy8.8 HighN/A0%Aug 13, 2022
CVE-2022-37400: Use of Insufficiently Random Values8.8 HighN/A0%Aug 13, 2022
CVE-2022-31779: Improper Input Validation7.5 HighN/A0%Aug 10, 2022
CVE-2022-25763: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Aug 10, 2022
2351-2375 of 4467
‹›