The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-10115: Undefined Security Weakness7.2 HighN/A1%Mar 17, 2020
CVE-2020-10114: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 17, 2020
CVE-2020-10113: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 17, 2020
CVE-2019-20498: Undefined Security Weakness9.8 CriticalN/A0%Mar 17, 2020
CVE-2019-20497: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 17, 2020
CVE-2019-20496: Undefined Security Weakness5.5 MediumN/A0%Mar 17, 2020
CVE-2019-20495: Undefined Security Weakness6.5 MediumN/A0%Mar 17, 2020
CVE-2019-20494: Use of Insufficiently Random Values3.3 LowN/A0%Mar 17, 2020
CVE-2019-20493: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 17, 2020
CVE-2019-20492: Undefined Security Weakness8.8 HighN/A0%Mar 17, 2020
CVE-2019-20490: Undefined Security Weakness8.8 HighN/A0%Mar 17, 2020
CVE-2018-18576: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Mar 17, 2020
CVE-2019-11074: Unrestricted Upload of File with Dangerous Type7.2 HighN/A4%Mar 17, 2020
CVE-2020-10380: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Mar 17, 2020
CVE-2019-20453: Deserialization of Untrusted Data8.8 HighN/A4%Mar 17, 2020
CVE-2019-20452: Deserialization of Untrusted Data8.8 HighN/A4%Mar 17, 2020
CVE-2020-6646: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 17, 2020
CVE-2019-20407: Missing Authorization4.3 MediumN/A0%Mar 17, 2020
CVE-2019-20105: Missing Authentication for Critical Function4.9 MediumN/A0%Mar 17, 2020
CVE-2020-9347: Improper Neutralization of Formula Elements in a CSV File9.8 CriticalN/A2%Mar 16, 2020
CVE-2020-9346: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Mar 16, 2020
CVE-2019-20191: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Mar 16, 2020
CVE-2020-8784: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Mar 16, 2020
CVE-2020-8785: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Mar 16, 2020
CVE-2020-8786: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Mar 16, 2020
258801-258825 of 580342
‹›