The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-10191: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Mar 9, 2020
CVE-2020-10192: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Mar 9, 2020
CVE-2011-3269: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Mar 9, 2020
CVE-2011-4538: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Mar 9, 2020
CVE-2016-1487: Deserialization of Untrusted Data8.8 HighN/A1%Mar 9, 2020
CVE-2020-4084: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 9, 2020
CVE-2020-8987: Improper Certificate Validation7.4 HighN/A0%Mar 9, 2020
CVE-2016-6918: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Mar 9, 2020
CVE-2016-1159: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Mar 9, 2020
CVE-2014-1634: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Mar 9, 2020
CVE-2015-7338: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Mar 9, 2020
CVE-2015-7339: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Mar 9, 2020
CVE-2015-7340: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Mar 9, 2020
CVE-2015-7341: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Mar 9, 2020
CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Mar 9, 2020
CVE-2019-10806: Improperly Controlled Modification of Object Prototype Attributes4.3 MediumN/A0%Mar 9, 2020
CVE-2020-9517: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Mar 9, 2020
CVE-2020-5256: Improper Neutralization of Directives in Dynamically Evaluated Code7.9 HighN/A1%Mar 9, 2020
CVE-2020-1737: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Mar 9, 2020
CVE-2020-10235: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Mar 9, 2020
CVE-2020-10237: Concurrent Execution using Shared Resource with Improper Synchronization5.5 MediumN/A0%Mar 9, 2020
CVE-2020-10236: Improper Input Validation6.1 MediumN/A0%Mar 9, 2020
CVE-2020-2158: Deserialization of Untrusted Data8.8 HighN/A1%Mar 9, 2020
CVE-2020-2159: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A5%Mar 9, 2020
CVE-2020-2155: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
260301-260325 of 580365
‹›