The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-40690: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A7%Sep 19, 2021
CVE-2021-39227: Improperly Controlled Modification of Object Prototype Attributes6.2 MediumN/A0%Sep 17, 2021
CVE-2021-41303: Improper Authentication9.8 CriticalN/A53%Sep 17, 2021
CVE-2021-40438: Server-Side Request Forgery (SSRF)9.0 CriticalN/A100%Sep 16, 2021
CVE-2021-41079: Improper Input ValidationN/AN/A7%Sep 16, 2021
CVE-2021-39275: Out-of-bounds Write9.8 CriticalN/A44%Sep 16, 2021
CVE-2021-39239: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Sep 16, 2021
CVE-2021-36160: Out-of-bounds Read7.5 HighN/A5%Sep 16, 2021
CVE-2021-34798: NULL Pointer Dereference7.5 HighN/A12%Sep 16, 2021
CVE-2021-40146: Undefined Security Weakness9.8 CriticalN/A4%Sep 11, 2021
CVE-2021-38555: Improper Restriction of XML External Entity Reference9.1 CriticalN/A1%Sep 11, 2021
CVE-2021-38540: Improper Privilege Management9.8 CriticalN/A90%Sep 9, 2021
CVE-2021-37579: Deserialization of Untrusted Data9.8 CriticalN/A4%Sep 9, 2021
CVE-2021-36161: Use of Externally-Controlled Format String9.8 CriticalN/A3%Sep 9, 2021
CVE-2021-30690: Undefined Security Weakness9.8 CriticalN/A1%Sep 8, 2021
CVE-2021-36163: Deserialization of Untrusted Data9.8 CriticalN/A2%Sep 7, 2021
CVE-2021-36162: Undefined Security Weakness8.8 HighN/A1%Sep 7, 2021
CVE-2021-39191: URL Redirection to Untrusted Site4.7 MediumN/A0%Sep 3, 2021
CVE-2021-39322: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A14%Sep 2, 2021
CVE-2019-10095: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A3%Sep 2, 2021
CVE-2020-13929: Undefined Security Weakness7.5 HighN/A0%Sep 2, 2021
CVE-2021-27578: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Sep 2, 2021
CVE-2021-39320: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A20%Sep 1, 2021
CVE-2021-25958: Generation of Error Message Containing Sensitive Information6.5 MediumN/A2%Aug 30, 2021
CVE-2021-33191: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A4%Aug 24, 2021
2576-2600 of 4467
‹›