The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-31882: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A0%Aug 14, 2024
CVE-2023-50314: Improper Certificate Validation5.3 MediumN/A0%Aug 14, 2024
CVE-2023-50315: Improper Certificate Validation5.3 MediumN/A0%Aug 14, 2024
CVE-2024-28799: Invocation of Process Using Visible Sensitive Information5.6 MediumN/A0%Aug 14, 2024
CVE-2024-27267: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Aug 14, 2024
CVE-2024-35124: Authentication Bypass Using an Alternate Path or Channel7.5 HighN/A0%Aug 13, 2024
CVE-2024-41774: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 13, 2024
CVE-2024-40697: Weak Password Requirements7.5 HighN/A0%Aug 13, 2024
CVE-2022-38382: Insufficient Session Expiration4.7 MediumN/A0%Aug 13, 2024
CVE-2023-38018: Session Fixation6.3 MediumN/A0%Aug 12, 2024
CVE-2024-39751: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Aug 6, 2024
CVE-2024-35143: Missing Authentication for Critical Function6.7 MediumN/A0%Aug 4, 2024
CVE-2024-38321: Insertion of Sensitive Information into Log File5.3 MediumN/A0%Aug 3, 2024
CVE-2023-38001: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Jul 30, 2024
CVE-2023-26289: Improper Neutralization of HTTP Headers for Scripting Syntax5.4 MediumN/A0%Jul 30, 2024
CVE-2023-26288: Insufficient Session Expiration5.5 MediumN/A0%Jul 30, 2024
CVE-2022-33167: Sensitive Cookie Without 'HttpOnly' Flag3.7 LowN/A0%Jul 30, 2024
CVE-2024-41066: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Jul 29, 2024
CVE-2024-41065: Undefined Security Weakness5.5 MediumN/A0%Jul 29, 2024
CVE-2024-40689: Improper Neutralization of Special Elements used in an SQL Command6.0 MediumN/A0%Jul 26, 2024
CVE-2024-28772: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Jul 25, 2024
CVE-2022-32759: Insufficient Session Expiration5.3 MediumN/A0%Jul 25, 2024
CVE-2024-37533: Exposure of Private Personal Information to an Unauthorized Actor2.4 LowN/A0%Jul 24, 2024
CVE-2023-50304: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Jul 18, 2024
CVE-2024-28796: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 17, 2024
2401-2425 of 9776
‹›