The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2019-19500: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Apr 15, 2020
CVE-2020-7255: Improper Privilege Management3.9 LowN/A0%Apr 15, 2020
CVE-2020-7250: Improper Link Resolution Before File Access8.2 HighN/A0%Apr 15, 2020
CVE-2020-7257: Improper Privilege Management8.4 HighN/A0%Apr 15, 2020
CVE-2020-7259: Improper Privilege Management6.6 MediumN/A0%Apr 15, 2020
CVE-2020-7261: Improper Restriction of Operations within the Bounds of a Memory Buffer6.1 MediumN/A0%Apr 15, 2020
CVE-2020-7273: Improper Privilege Management6.7 MediumN/A0%Apr 15, 2020
CVE-2020-7275: Unquoted Search Path or Element4.8 MediumN/A0%Apr 15, 2020
CVE-2020-7274: Improper Privilege Management6.6 MediumN/A0%Apr 15, 2020
CVE-2020-7277: Protection Mechanism Failure6.8 MediumN/A0%Apr 15, 2020
CVE-2020-7276: Improper Authentication6.4 MediumN/A0%Apr 15, 2020
CVE-2020-7278: Improper Access Control7.4 HighN/A1%Apr 15, 2020
CVE-2020-3932: Undefined Security Weakness7.5 HighN/A1%Apr 15, 2020
CVE-2020-10514: Improper Neutralization of Special Elements used in a Command8.8 HighN/A2%Apr 15, 2020
CVE-2020-10513: Incorrect Permission Assignment for Critical Resource8.8 HighN/A1%Apr 15, 2020
CVE-2020-10512: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%Apr 15, 2020
CVE-2020-10511: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Apr 15, 2020
CVE-2020-10507: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Apr 15, 2020
CVE-2020-10506: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Apr 15, 2020
CVE-2020-10505: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Apr 15, 2020
CVE-2020-11767: Undefined Security Weakness3.1 LowN/A2%Apr 15, 2020
CVE-2020-10699: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Apr 15, 2020
CVE-2020-11003: Cross-Site Request Forgery (CSRF)4.8 MediumN/A1%Apr 14, 2020
CVE-2020-11001: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.8 MediumN/A1%Apr 14, 2020
CVE-2020-5260: Improper Input Validation9.3 CriticalN/A10%Apr 14, 2020
258351-258375 of 403826
‹›