The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-2155: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2156: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2157: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2153: Cleartext Transmission of Sensitive Information4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2154: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Mar 9, 2020
CVE-2020-2152: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 9, 2020
CVE-2020-2151: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2148: Incorrect Authorization4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2149: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2150: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2146: Improper Verification of Cryptographic Signature7.4 HighN/A0%Mar 9, 2020
CVE-2020-2147: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2144: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 9, 2020
CVE-2020-2145: Insufficiently Protected Credentials5.5 MediumN/A0%Mar 9, 2020
CVE-2020-2143: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Mar 9, 2020
CVE-2020-2142: Missing Authorization4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2141: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Mar 9, 2020
CVE-2020-2140: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A45%Mar 9, 2020
CVE-2020-2139: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A5%Mar 9, 2020
CVE-2020-2137: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Mar 9, 2020
CVE-2020-2136: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 9, 2020
CVE-2020-2138: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Mar 9, 2020
CVE-2020-2135: Incorrect Authorization8.8 HighN/A0%Mar 9, 2020
CVE-2020-2134: Incorrect Authorization8.8 HighN/A0%Mar 9, 2020
CVE-2020-4217: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Mar 9, 2020
260326-260350 of 580365