The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-7340: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Mar 9, 2020
CVE-2015-7341: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Mar 9, 2020
CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Mar 9, 2020
CVE-2019-10806: Improperly Controlled Modification of Object Prototype Attributes4.3 MediumN/A0%Mar 9, 2020
CVE-2020-9517: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Mar 9, 2020
CVE-2020-5256: Improper Neutralization of Directives in Dynamically Evaluated Code7.9 HighN/A1%Mar 9, 2020
CVE-2020-1737: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Mar 9, 2020
CVE-2020-10235: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Mar 9, 2020
CVE-2020-10237: Concurrent Execution using Shared Resource with Improper Synchronization5.5 MediumN/A0%Mar 9, 2020
CVE-2020-10236: Improper Input Validation6.1 MediumN/A0%Mar 9, 2020
CVE-2020-2158: Deserialization of Untrusted Data8.8 HighN/A1%Mar 9, 2020
CVE-2020-2159: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A5%Mar 9, 2020
CVE-2020-2155: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2156: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2157: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2153: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2154: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Mar 9, 2020
CVE-2020-2152: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 9, 2020
CVE-2020-2151: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2148: Incorrect Authorization4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2149: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2150: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2146: Improper Verification of Cryptographic Signature7.4 HighN/A0%Mar 9, 2020
CVE-2020-2147: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2144: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 9, 2020
259101-259125 of 398786