The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2019-17185: Improper Synchronization7.5 HighN/A1%Mar 21, 2020
CVE-2019-18936: Uncontrolled Recursion7.5 HighN/A0%Mar 21, 2020
CVE-2013-7487: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A3%Mar 21, 2020
CVE-2020-10799: Improper Restriction of XML External Entity Reference9.8 CriticalN/A0%Mar 20, 2020
CVE-2019-11574: Server-Side Request Forgery (SSRF)9.8 CriticalN/A1%Mar 20, 2020
CVE-2019-13463: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 20, 2020
CVE-2019-16528: Insertion of Sensitive Information into Log File7.5 HighN/A0%Mar 20, 2020
CVE-2019-18641: Undefined Security Weakness9.8 CriticalN/A4%Mar 20, 2020
CVE-2019-18860: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.1 MediumN/A3%Mar 20, 2020
CVE-2020-10194: Missing Authorization6.5 MediumN/A0%Mar 20, 2020
CVE-2019-15522: Undefined Security Weakness9.8 CriticalN/A1%Mar 20, 2020
CVE-2020-8140: Improper Control of Generation of Code6.7 MediumN/A0%Mar 20, 2020
CVE-2020-8139: Improper Access Control6.5 MediumN/A0%Mar 20, 2020
CVE-2020-8138: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Mar 20, 2020
CVE-2020-8883: Out-of-bounds Read4.3 MediumN/A20%Mar 20, 2020
CVE-2020-8880: Out-of-bounds Read8.8 HighN/A2%Mar 20, 2020
CVE-2020-8882: Access of Uninitialized Pointer8.8 HighN/A2%Mar 20, 2020
CVE-2020-8881: Use After Free8.8 HighN/A2%Mar 20, 2020
CVE-2020-8879: Out-of-bounds Read4.3 MediumN/A20%Mar 20, 2020
CVE-2020-8878: Out-of-bounds Write8.8 HighN/A2%Mar 20, 2020
CVE-2020-8877: Out-of-bounds Read4.3 MediumN/A20%Mar 20, 2020
CVE-2019-12498: Missing Authorization9.8 CriticalN/A1%Mar 20, 2020
CVE-2020-8134: Server-Side Request Forgery (SSRF)8.1 HighN/A0%Mar 20, 2020
CVE-2020-8137: Improper Control of Generation of Code9.8 CriticalN/A5%Mar 20, 2020
CVE-2020-8135: Server-Side Request Forgery (SSRF)9.8 CriticalN/A1%Mar 20, 2020
258701-258725 of 715156