The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-28129: Improper Input Validation7.5 HighN/A5%Aug 10, 2022
CVE-2022-31780: Improper Input Validation7.5 HighN/A8%Aug 10, 2022
CVE-2022-31778: Improper Input Validation7.5 HighN/A0%Aug 10, 2022
CVE-2021-37150: Improper Input Validation7.5 HighN/A1%Aug 10, 2022
CVE-2022-36124: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 9, 2022
CVE-2022-36125: Improper Input Validation7.5 HighN/A1%Aug 9, 2022
CVE-2022-35724: Improper Input Validation7.5 HighN/A1%Aug 9, 2022
CVE-2022-25168: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A3%Aug 4, 2022
CVE-2022-34158: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Aug 4, 2022
CVE-2022-28732: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A9%Aug 4, 2022
CVE-2022-28731: Cross-Site Request Forgery (CSRF)6.5 MediumN/A7%Aug 4, 2022
CVE-2022-28730: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A11%Aug 4, 2022
CVE-2022-27166: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A9%Aug 4, 2022
CVE-2022-36364: Improper Initialization8.8 HighN/A12%Jul 28, 2022
CVE-2022-24294: Uncontrolled Resource Consumption7.5 HighN/A5%Jul 24, 2022
CVE-2022-34169: Incorrect Conversion between Numeric Types7.5 HighN/A11%Jul 19, 2022
CVE-2022-35741: Improper Restriction of XML External Entity Reference9.8 CriticalN/A34%Jul 18, 2022
CVE-2022-36127: Undefined Security Weakness7.5 HighN/A5%Jul 18, 2022
CVE-2022-33891: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A94%Jul 18, 2022
CVE-2021-34538: Missing Authentication for Critical Function7.5 HighN/A0%Jul 16, 2022
CVE-2022-31781: Inefficient Regular Expression Complexity7.5 HighN/A1%Jul 13, 2022
CVE-2022-31137: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A94%Jul 8, 2022
CVE-2022-28889: Improper Restriction of Rendered UI Layers or Frames4.3 MediumN/A2%Jul 7, 2022
CVE-2021-44791: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A6%Jul 7, 2022
CVE-2022-31126: Improper Neutralization of Special Elements in Output Used by a Downstream Component10.0 CriticalN/A91%Jul 6, 2022
2376-2400 of 4467
‹›