The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-2145: Insufficiently Protected Credentials5.5 MediumN/A0%Mar 9, 2020
CVE-2020-2143: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2142: Missing Authorization4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2141: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2140: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A45%Mar 9, 2020
CVE-2020-2139: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A5%Mar 9, 2020
CVE-2020-2137: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 9, 2020
CVE-2020-2136: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 9, 2020
CVE-2020-2138: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 9, 2020
CVE-2020-2135: Incorrect Authorization8.8 HighN/A0%Mar 9, 2020
CVE-2020-2134: Incorrect Authorization8.8 HighN/A0%Mar 9, 2020
CVE-2020-4217: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Mar 9, 2020
CVE-2020-10175: Undefined Security Weakness9.8 CriticalN/AN/AMar 9, 2020
CVE-2020-9386: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Mar 9, 2020
CVE-2020-9282: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 9, 2020
CVE-2015-7343: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 9, 2020
CVE-2015-7344: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 9, 2020
CVE-2015-7968: Improper Restriction of XML External Entity Reference4.3 MediumN/A0%Mar 9, 2020
CVE-2019-20504: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A56%Mar 9, 2020
CVE-2016-11021: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A91%Mar 9, 2020
CVE-2020-1706: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Mar 9, 2020
CVE-2020-10232: Out-of-bounds Write9.8 CriticalN/A1%Mar 8, 2020
CVE-2020-10233: Out-of-bounds Read9.1 CriticalN/A1%Mar 8, 2020
CVE-2020-10224: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A14%Mar 8, 2020
CVE-2020-10225: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A9%Mar 8, 2020
259126-259150 of 398786