The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-41186: Uncontrolled Resource Consumption5.9 MediumN/A2%Oct 29, 2021
CVE-2021-40865: Deserialization of Untrusted Data9.8 CriticalN/A64%Oct 25, 2021
CVE-2021-38294: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A84%Oct 25, 2021
CVE-2021-41159: Out-of-bounds Write5.8 MediumN/A1%Oct 21, 2021
CVE-2021-41160: Out-of-bounds Write5.3 MediumN/A2%Oct 21, 2021
CVE-2021-41971: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Oct 18, 2021
CVE-2021-32609: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Oct 18, 2021
CVE-2021-42340: Missing Release of Resource after Effective Lifetime7.5 HighN/A12%Oct 14, 2021
CVE-2021-38295: Improper Neutralization of Input During Web Page Generation7.3 HighN/A3%Oct 14, 2021
CVE-2021-3882: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute6.8 MediumN/A1%Oct 14, 2021
CVE-2021-41136: Inconsistent Interpretation of HTTP Requests3.7 LowN/A1%Oct 12, 2021
CVE-2021-42009: Improper Input Validation4.3 MediumN/A3%Oct 12, 2021
CVE-2021-29005: Incorrect Default Permissions8.8 HighN/A2%Oct 11, 2021
CVE-2021-41832: Improper Verification of Cryptographic Signature7.5 HighN/A1%Oct 11, 2021
CVE-2021-41831: Improper Verification of Cryptographic Signature5.3 MediumN/A2%Oct 11, 2021
CVE-2021-41830: Improper Verification of Cryptographic Signature7.5 HighN/A1%Oct 11, 2021
CVE-2021-42013: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A100%Oct 7, 2021
CVE-2021-40439: Improper Restriction of XML External Entity Reference6.5 MediumN/A4%Oct 7, 2021
CVE-2021-28129: Improper Access Control7.8 HighN/A1%Oct 7, 2021
CVE-2021-41773: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A100%Oct 5, 2021
CVE-2021-41524: NULL Pointer Dereference7.5 HighN/A25%Oct 5, 2021
CVE-2021-41616: Deserialization of Untrusted Data9.8 CriticalN/A3%Sep 30, 2021
CVE-2021-36749: Incorrect Authorization6.5 MediumN/A81%Sep 24, 2021
CVE-2021-33035: Buffer Copy without Checking Size of Input7.8 HighN/A51%Sep 23, 2021
CVE-2021-38153: Observable Discrepancy5.9 MediumN/A6%Sep 22, 2021
2551-2575 of 4467
‹›