The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2021-26920: Externally Controlled Reference to a Resource in Another Sphere6.5 MediumN/A3%Jul 2, 2021
CVE-2021-35474: Stack-based Buffer Overflow9.8 CriticalN/A9%Jun 30, 2021
CVE-2021-32567: Improper Input Validation7.5 HighN/A8%Jun 30, 2021
CVE-2021-32566: Improper Input Validation7.5 HighN/A8%Jun 30, 2021
CVE-2021-32565: Inconsistent Interpretation of HTTP Requests7.5 HighN/A6%Jun 29, 2021
CVE-2021-27577: Inconsistent Interpretation of HTTP Requests7.5 HighN/A1%Jun 29, 2021
CVE-2021-26461: Integer Overflow or Wraparound9.8 CriticalN/A2%Jun 21, 2021
CVE-2021-30468: Uncontrolled Resource Consumption7.5 HighN/A2%Jun 16, 2021
CVE-2020-9493: Deserialization of Untrusted Data9.8 CriticalN/A5%Jun 16, 2021
CVE-2021-31618: NULL Pointer Dereference7.5 HighN/A19%Jun 15, 2021
CVE-2021-31811: Memory Allocation with Excessive Size Value5.5 MediumN/A0%Jun 12, 2021
CVE-2021-31812: Excessive Iteration5.5 MediumN/A0%Jun 12, 2021
CVE-2021-30641: Undefined Security Weakness5.3 MediumN/A45%Jun 10, 2021
CVE-2021-26691: Heap-based Buffer Overflow9.8 CriticalN/A36%Jun 10, 2021
CVE-2021-26690: NULL Pointer Dereference7.5 HighN/A63%Jun 10, 2021
CVE-2020-35452: Out-of-bounds Write7.3 HighN/A13%Jun 10, 2021
CVE-2020-13950: NULL Pointer Dereference7.5 HighN/A19%Jun 10, 2021
CVE-2020-13938: Missing Authorization5.5 MediumN/A0%Jun 10, 2021
CVE-2019-17567: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A12%Jun 10, 2021
CVE-2021-33190: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A1%Jun 8, 2021
CVE-2021-30180: Inconsistent Interpretation of HTTP Requests9.8 CriticalN/A4%May 31, 2021
CVE-2021-30179: Deserialization of Untrusted Data9.8 CriticalN/A4%May 31, 2021
CVE-2021-25640: Server-Side Request Forgery (SSRF)6.1 MediumN/A1%May 31, 2021
CVE-2021-30181: Undefined Security Weakness9.8 CriticalN/A4%May 29, 2021
CVE-2021-25641: Deserialization of Untrusted Data9.8 CriticalN/A75%May 29, 2021
2626-2650 of 4467