The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-27738: Server-Side Request Forgery (SSRF)7.5 HighN/A2%Jan 6, 2022
CVE-2021-36739: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Jan 6, 2022
CVE-2021-36738: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Jan 6, 2022
CVE-2021-36737: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Jan 6, 2022
CVE-2021-40525: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A3%Jan 4, 2022
CVE-2021-40111: Loop with Unreachable Exit Condition6.5 MediumN/A1%Jan 4, 2022
CVE-2021-40110: Undefined Security Weakness7.5 HighN/A0%Jan 4, 2022
CVE-2021-38542: Improper Neutralization of Special Elements used in a Command5.9 MediumN/A1%Jan 4, 2022
CVE-2021-34797: Insertion of Sensitive Information into Log File7.5 HighN/A0%Jan 4, 2022
CVE-2021-44832: Improper Input Validation6.6 MediumN/A54%Dec 28, 2021
CVE-2021-45232: Missing Authentication for Critical Function9.8 CriticalN/A94%Dec 27, 2021
CVE-2021-44548: Path Traversal: '\\UNC\share\name\' (Windows UNC Share)9.8 CriticalN/A7%Dec 23, 2021
CVE-2021-44224: NULL Pointer Dereference8.2 HighN/A11%Dec 20, 2021
CVE-2021-41561: Improper Input Validation7.5 HighN/A0%Dec 20, 2021
CVE-2021-44790: Out-of-bounds Write9.8 CriticalN/A87%Dec 20, 2021
CVE-2021-43083: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A2%Dec 19, 2021
CVE-2021-45105: Improper Input Validation5.9 MediumN/A75%Dec 18, 2021
CVE-2021-44145: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Dec 17, 2021
CVE-2021-45046: Improper Neutralization of Special Elements used in an Expression Language Statement9.0 CriticalN/A94%Dec 14, 2021
CVE-2021-44549: Improper Certificate Validation7.4 HighN/A0%Dec 14, 2021
CVE-2021-4104: Deserialization of Untrusted Data7.5 HighN/A72%Dec 14, 2021
CVE-2021-44228: Deserialization of Untrusted Data10.0 CriticalN/A94%Dec 10, 2021
CVE-2021-43410: Improper Output Neutralization for Logs5.3 MediumN/A4%Dec 9, 2021
CVE-2021-20038: Stack-based Buffer Overflow9.8 CriticalN/A94%Dec 8, 2021
CVE-2021-43034: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Dec 6, 2021
2501-2525 of 4467
‹›