The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-11588: Undefined Security Weakness5.3 MediumN/A1%Apr 6, 2020
CVE-2020-11589: Authorization Bypass Through User-Controlled Key7.5 HighN/A1%Apr 6, 2020
CVE-2020-11590: Undefined Security Weakness5.3 MediumN/A1%Apr 6, 2020
CVE-2020-11591: Undefined Security Weakness5.3 MediumN/A1%Apr 6, 2020
CVE-2020-11592: Undefined Security Weakness7.5 HighN/A1%Apr 6, 2020
CVE-2020-11593: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A1%Apr 6, 2020
CVE-2020-11594: Generation of Error Message Containing Sensitive Information7.5 HighN/A1%Apr 6, 2020
CVE-2020-11595: Undefined Security Weakness7.5 HighN/A1%Apr 6, 2020
CVE-2020-11596: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A2%Apr 6, 2020
CVE-2020-11597: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A2%Apr 6, 2020
CVE-2020-11598: Missing Authentication for Critical Function9.8 CriticalN/A3%Apr 6, 2020
CVE-2020-11599: Missing Authentication for Critical Function7.5 HighN/A0%Apr 6, 2020
CVE-2020-11585: Use of Insufficiently Random Values4.3 MediumN/A0%Apr 6, 2020
CVE-2020-11581: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A39%Apr 6, 2020
CVE-2020-11582: Exposure of Resource to Wrong Sphere8.8 HighN/A0%Apr 6, 2020
CVE-2020-11580: Improper Certificate Validation9.1 CriticalN/A0%Apr 6, 2020
CVE-2020-5832: Undefined Security Weakness7.8 HighN/A0%Apr 6, 2020
CVE-2020-5300: Authentication Bypass by Capture-replay5.8 MediumN/A0%Apr 6, 2020
CVE-2020-11102: Out-of-bounds Write5.6 MediumN/A0%Apr 6, 2020
CVE-2020-11507: Untrusted Search Path7.8 HighN/A0%Apr 6, 2020
CVE-2019-19699: Improper Privilege Management7.2 HighN/A9%Apr 6, 2020
CVE-2020-11544: Unrestricted Upload of File with Dangerous Type7.2 HighN/A0%Apr 6, 2020
CVE-2020-11545: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Apr 6, 2020
CVE-2020-9473: Missing Authentication for Critical Function6.6 MediumN/A0%Apr 6, 2020
CVE-2020-7622: Undefined Security Weakness6.5 MediumN/A0%Apr 6, 2020
258651-258675 of 715808