The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-43043: Undefined Security Weakness6.5 MediumN/A0%Dec 6, 2021
CVE-2021-44140: Incorrect Default Permissions9.1 CriticalN/A6%Nov 24, 2021
CVE-2021-40369: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Nov 24, 2021
CVE-2021-43557: Improper Neutralization of Special Elements used in a Command7.5 HighN/A58%Nov 22, 2021
CVE-2021-41532: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A1%Nov 19, 2021
CVE-2021-39236: Missing Authorization8.8 HighN/A1%Nov 19, 2021
CVE-2021-39235: Incorrect Permission Assignment for Critical Resource6.5 MediumN/A0%Nov 19, 2021
CVE-2021-39234: Improper Input Validation6.8 MediumN/A0%Nov 19, 2021
CVE-2021-39233: Missing Authentication for Critical Function9.1 CriticalN/A1%Nov 19, 2021
CVE-2021-39232: Missing Authorization8.8 HighN/A1%Nov 19, 2021
CVE-2021-39231: Missing Authorization9.1 CriticalN/A1%Nov 19, 2021
CVE-2021-36372: Improper Check for Dropped Privileges9.8 CriticalN/A1%Nov 19, 2021
CVE-2021-42250: Improper Output Neutralization for Logs6.5 MediumN/A1%Nov 17, 2021
CVE-2021-37580: Improper Authentication9.8 CriticalN/A94%Nov 16, 2021
CVE-2021-41972: Insufficiently Protected Credentials6.5 MediumN/A0%Nov 12, 2021
CVE-2021-43350: Improper Neutralization of Special Elements used in an LDAP Query9.8 CriticalN/A1%Nov 11, 2021
CVE-2021-26558: Deserialization of Untrusted Data7.5 HighN/A2%Nov 11, 2021
CVE-2021-43082: Buffer Copy without Checking Size of Input9.8 CriticalN/A1%Nov 3, 2021
CVE-2021-41585: Improper Input Validation7.5 HighN/A1%Nov 3, 2021
CVE-2021-38161: Improper Authentication8.1 HighN/A1%Nov 3, 2021
CVE-2021-37149: Improper Input Validation7.5 HighN/A1%Nov 3, 2021
CVE-2021-37148: Improper Input Validation7.5 HighN/A1%Nov 3, 2021
CVE-2021-37147: Improper Input Validation7.5 HighN/A1%Nov 3, 2021
CVE-2021-27644: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Nov 1, 2021
CVE-2021-41973: Loop with Unreachable Exit Condition6.5 MediumN/A1%Nov 1, 2021
2526-2550 of 4467
‹›