The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-30973: Undefined Security Weakness5.5 MediumN/A0%May 31, 2022
CVE-2022-29405: Undefined Security Weakness6.5 MediumN/A1%May 25, 2022
CVE-2022-29599: Improper Encoding or Escaping of Output9.8 CriticalN/A0%May 23, 2022
CVE-2022-26650: Inefficient Regular Expression Complexity7.5 HighN/A1%May 17, 2022
CVE-2022-30126: Undefined Security Weakness5.5 MediumN/A1%May 16, 2022
CVE-2022-25169: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%May 16, 2022
CVE-2022-25762: Improper Resource Shutdown or ReleaseN/AN/A8%May 13, 2022
CVE-2022-29885: Uncontrolled Resource ConsumptionN/AN/A73%May 12, 2022
CVE-2021-43010: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%May 10, 2022
CVE-2022-28890: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%May 5, 2022
CVE-2022-29265: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Apr 30, 2022
CVE-2022-23942: Use of Hard-coded Credentials7.5 HighN/A2%Apr 26, 2022
CVE-2022-24706: Initialization of a Resource with an Insecure Default9.8 CriticalN/A94%Apr 26, 2022
CVE-2022-29266: Generation of Error Message Containing Sensitive Information7.5 HighN/A36%Apr 20, 2022
CVE-2022-0070: Execution with Unnecessary Privileges8.8 HighN/A0%Apr 19, 2022
CVE-2021-3100: Execution with Unnecessary Privileges8.8 HighN/A0%Apr 19, 2022
CVE-2022-27479: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A5%Apr 13, 2022
CVE-2022-24070: Use After Free7.5 HighN/A1%Apr 12, 2022
CVE-2021-28544: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Apr 12, 2022
CVE-2021-31805: Improper Neutralization of Special Elements used in an Expression Language Statement9.8 CriticalN/A94%Apr 12, 2022
CVE-2022-26612: Improper Link Resolution Before File Access9.8 CriticalN/A0%Apr 7, 2022
CVE-2022-26850: Exposure of Resource to Wrong Sphere4.3 MediumN/A1%Apr 6, 2022
CVE-2022-23974: Uncontrolled Recursion7.5 HighN/A4%Apr 5, 2022
CVE-2020-19229: Deserialization of Untrusted Data9.8 CriticalN/A0%Apr 5, 2022
CVE-2022-25598: Inefficient Regular Expression Complexity7.5 HighN/A1%Mar 30, 2022
2426-2450 of 4467
‹›