The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-9476: Inadequate Encryption Strength7.5 HighN/A0%Mar 4, 2020
CVE-2020-9372: Improper Neutralization of Formula Elements in a CSV File7.8 HighN/A19%Mar 4, 2020
CVE-2020-9371: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Mar 4, 2020
CVE-2019-19226: Missing Authentication for Critical Function7.5 HighN/A3%Mar 4, 2020
CVE-2019-19225: Missing Authentication for Critical Function7.5 HighN/A3%Mar 4, 2020
CVE-2019-19224: Missing Authentication for Critical Function7.5 HighN/A2%Mar 4, 2020
CVE-2019-19223: Improper Neutralization of Input During Web Page Generation7.5 HighN/A6%Mar 4, 2020
CVE-2019-19222: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Mar 4, 2020
CVE-2020-10057: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Mar 4, 2020
CVE-2020-7988: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Mar 4, 2020
CVE-2020-9761: Undefined Security Weakness9.8 CriticalN/A1%Mar 4, 2020
CVE-2020-9757: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A94%Mar 4, 2020
CVE-2020-9364: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A1%Mar 4, 2020
CVE-2020-5251: Improper Authorization7.7 HighN/A0%Mar 4, 2020
CVE-2019-8401: Undefined Security Weakness9.8 CriticalN/AN/AMar 4, 2020
CVE-2019-3404: Undefined Security Weakness7.5 HighN/A0%Mar 4, 2020
CVE-2020-5535: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Mar 4, 2020
CVE-2020-5536: Improper Authentication8.8 HighN/A0%Mar 4, 2020
CVE-2020-10029: Out-of-bounds Write5.5 MediumN/A0%Mar 4, 2020
CVE-2020-1734: Improper Neutralization of Special Elements used in an OS Command7.4 HighN/A0%Mar 3, 2020
CVE-2020-5403: Improper Input Validation7.5 HighN/A0%Mar 3, 2020
CVE-2020-5404: Insufficiently Protected Credentials5.9 MediumN/A0%Mar 3, 2020
CVE-2020-1892: Out-of-bounds Read8.1 HighN/A1%Mar 3, 2020
CVE-2020-1893: Out-of-bounds Read7.5 HighN/A1%Mar 3, 2020
CVE-2020-1888: Out-of-bounds Read7.5 HighN/A1%Mar 3, 2020
259301-259325 of 703397