The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-6423: Use After Free8.8 HighN/A2%Apr 13, 2020
CVE-2019-1866: Improper Access Control3.1 LowN/A0%Apr 13, 2020
CVE-2020-3126: Improper Access Control3.0 LowN/A0%Apr 13, 2020
CVE-2019-13916: Out-of-bounds Write8.8 HighN/A0%Apr 13, 2020
CVE-2020-11734: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Apr 13, 2020
CVE-2020-8430: URL Redirection to Untrusted Site6.1 MediumN/A0%Apr 13, 2020
CVE-2020-11673: Missing Authentication for Critical Function9.8 CriticalN/A6%Apr 13, 2020
CVE-2020-9478: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A4%Apr 13, 2020
CVE-2020-8148: Improper Authentication5.3 MediumN/A0%Apr 13, 2020
CVE-2020-1759: Reusing a Nonce, Key Pair in Encryption6.4 MediumN/A0%Apr 13, 2020
CVE-2020-11731: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 13, 2020
CVE-2020-11732: Undefined Security Weakness7.5 HighN/A35%Apr 13, 2020
CVE-2020-1730: NULL Pointer Dereference5.3 MediumN/A0%Apr 13, 2020
CVE-2020-11725: Incorrect Type Conversion or Cast7.8 HighN/A0%Apr 12, 2020
CVE-2020-11724: Inconsistent Interpretation of HTTP Requests7.5 HighN/A1%Apr 12, 2020
CVE-2020-11722: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A4%Apr 12, 2020
CVE-2020-11721: Access of Uninitialized Pointer6.5 MediumN/A0%Apr 12, 2020
CVE-2020-11714: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 12, 2020
CVE-2020-11713: Observable Discrepancy7.5 HighN/A0%Apr 12, 2020
CVE-2020-11712: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 12, 2020
CVE-2020-11710: Undefined Security Weakness9.8 CriticalN/A94%Apr 12, 2020
CVE-2020-11709: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A0%Apr 12, 2020
CVE-2020-11701: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Apr 12, 2020
CVE-2020-11702: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 12, 2020
CVE-2020-11703: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A0%Apr 12, 2020
258426-258450 of 715808
‹›