The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2019-14877: NULL Pointer Dereference6.5 MediumN/A0%Mar 19, 2020
CVE-2019-14873: NULL Pointer Dereference6.5 MediumN/A0%Mar 19, 2020
CVE-2019-5104: Undefined Security WeaknessN/AN/AN/AMar 19, 2020
CVE-2019-12416: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.1 MediumN/A1%Mar 19, 2020
CVE-2020-10678: Undefined Security Weakness8.8 HighN/A1%Mar 19, 2020
CVE-2020-10648: Improper Input Validation7.8 HighN/A0%Mar 19, 2020
CVE-2019-20522: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2020
CVE-2019-20523: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2020
CVE-2019-20527: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2020
CVE-2019-20524: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2020
CVE-2019-12130: Missing Authentication for Critical Function9.8 CriticalN/A0%Mar 19, 2020
CVE-2019-12129: Missing Authentication for Critical Function9.8 CriticalN/A0%Mar 19, 2020
CVE-2019-12128: Missing Authentication for Critical Function9.8 CriticalN/A0%Mar 19, 2020
CVE-2020-4205: Improper Authentication6.3 MediumN/A0%Mar 19, 2020
CVE-2020-4203: Undefined Security Weakness4.9 MediumN/A0%Mar 19, 2020
CVE-2020-10675: Loop with Unreachable Exit Condition7.5 HighN/A0%Mar 19, 2020
CVE-2019-19336: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 19, 2020
CVE-2019-14872: NULL Pointer Dereference6.5 MediumN/A0%Mar 19, 2020
CVE-2019-20485: Improper Input Validation5.7 MediumN/A0%Mar 19, 2020
CVE-2019-16375: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Mar 19, 2020
CVE-2019-19677: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Mar 18, 2020
CVE-2020-10673: Deserialization of Untrusted Data8.8 HighN/A20%Mar 18, 2020
CVE-2020-10672: Deserialization of Untrusted Data8.8 HighN/A35%Mar 18, 2020
CVE-2019-19676: Improper Neutralization of Formula Elements in a CSV File9.6 CriticalN/A0%Mar 18, 2020
CVE-2020-10674: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Mar 18, 2020
258776-258800 of 580342