The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-35940: Out-of-bounds Read7.1 HighN/A0%Aug 23, 2021
CVE-2021-37608: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A5%Aug 18, 2021
CVE-2021-33580: Uncontrolled Resource Consumption7.5 HighN/A2%Aug 18, 2021
CVE-2021-35936: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A1%Aug 16, 2021
CVE-2021-33193: Undefined Security Weakness7.5 HighN/A1%Aug 16, 2021
CVE-2021-21501: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 10, 2021
CVE-2021-37578: Deserialization of Untrusted Data9.8 CriticalN/A2%Jul 29, 2021
CVE-2021-33900: Missing Encryption of Sensitive Data7.5 HighN/A0%Jul 26, 2021
CVE-2021-32792: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Jul 26, 2021
CVE-2021-32791: Reusing a Nonce, Key Pair in Encryption5.9 MediumN/A0%Jul 26, 2021
CVE-2021-28131: Authentication Bypass Using an Alternate Path or Channel7.5 HighN/A0%Jul 22, 2021
CVE-2021-32785: Use of Externally-Controlled Format String5.3 MediumN/A0%Jul 22, 2021
CVE-2021-32786: URL Redirection to Untrusted Site4.7 MediumN/A0%Jul 22, 2021
CVE-2021-24117: Observable Discrepancy4.9 MediumN/A1%Jul 14, 2021
CVE-2021-36374: Improper Handling of Length Parameter Inconsistency5.5 MediumN/A0%Jul 14, 2021
CVE-2021-36373: Improper Handling of Length Parameter Inconsistency5.5 MediumN/A0%Jul 14, 2021
CVE-2021-36090: Improper Handling of Length Parameter InconsistencyN/AN/A13%Jul 13, 2021
CVE-2021-35517: Improper Handling of Length Parameter InconsistencyN/AN/A11%Jul 13, 2021
CVE-2021-35516: Improper Handling of Length Parameter Inconsistency7.5 HighN/A1%Jul 13, 2021
CVE-2021-35515: Excessive Iteration7.5 HighN/A1%Jul 13, 2021
CVE-2021-33037: Inconsistent Interpretation of HTTP RequestsN/AN/A75%Jul 12, 2021
CVE-2021-30640: Improper Encoding or Escaping of OutputN/AN/A10%Jul 12, 2021
CVE-2021-30639: Improper Handling of Exceptional Conditions7.5 HighN/A0%Jul 12, 2021
CVE-2021-30129: Missing Release of Resource after Effective Lifetime6.5 MediumN/A0%Jul 12, 2021
CVE-2021-33192: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A3%Jul 5, 2021
2601-2625 of 4467
‹›