The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2022-25757: Improper Input Validation9.8 CriticalN/A0%Mar 28, 2022
CVE-2021-44759: Improper Authentication8.1 HighN/A1%Mar 23, 2022
CVE-2021-44040: Improper Input Validation7.5 HighN/A4%Mar 23, 2022
CVE-2022-26779: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)7.5 HighN/A1%Mar 15, 2022
CVE-2022-23943: Out-of-bounds Write9.8 CriticalN/A68%Mar 14, 2022
CVE-2022-22721: Integer Overflow or Wraparound9.1 CriticalN/A19%Mar 14, 2022
CVE-2022-22720: Inconsistent Interpretation of HTTP Requests9.8 CriticalN/A32%Mar 14, 2022
CVE-2022-22719: Improper Initialization7.5 HighN/A32%Mar 14, 2022
CVE-2021-38296: Authentication Bypass by Capture-replay7.5 HighN/A1%Mar 10, 2022
CVE-2021-44216: Incorrect Default Permissions5.5 MediumN/A0%Mar 7, 2022
CVE-2022-25312: Improper Restriction of XML External Entity Reference9.1 CriticalN/A2%Mar 4, 2022
CVE-2022-26336: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Mar 4, 2022
CVE-2022-23640: Improper Restriction of XML External Entity Reference9.8 CriticalN/A0%Mar 2, 2022
CVE-2022-24948: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A7%Feb 25, 2022
CVE-2022-24947: Cross-Site Request Forgery (CSRF)8.8 HighN/A2%Feb 25, 2022
CVE-2022-24288: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A90%Feb 25, 2022
CVE-2021-45229: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Feb 25, 2022
CVE-2022-24289: Deserialization of Untrusted Data8.8 HighN/A3%Feb 11, 2022
CVE-2022-24112: Authentication Bypass by Spoofing9.8 CriticalN/A94%Feb 11, 2022
CVE-2021-44521: Improper Control of Generation of Code9.1 CriticalN/A92%Feb 11, 2022
CVE-2022-22931: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A3%Feb 7, 2022
CVE-2022-23206: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Feb 6, 2022
CVE-2022-23913: Allocation of Resources Without Limits or Throttling7.5 HighN/A2%Feb 4, 2022
CVE-2021-36152: Undefined Security Weakness9.8 CriticalN/A1%Feb 4, 2022
CVE-2021-36151: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Feb 4, 2022
2451-2475 of 4467
‹›