The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-17514: Undefined Security Weakness7.4 HighN/A1%May 27, 2021
CVE-2018-10867: Files or Directories Accessible to External Parties9.1 CriticalN/A0%May 26, 2021
CVE-2021-22160: Improper Verification of Cryptographic Signature9.8 CriticalN/A19%May 26, 2021
CVE-2021-23937: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A5%May 25, 2021
CVE-2020-28902: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A10%May 24, 2021
CVE-2021-27737: Undefined Security Weakness7.5 HighN/A9%May 14, 2021
CVE-2021-29509: Uncontrolled Resource Consumption7.5 HighN/A1%May 11, 2021
CVE-2021-31164: Improper Neutralization of CRLF Sequences7.5 HighN/A3%May 4, 2021
CVE-2021-28359: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A4%May 2, 2021
CVE-2021-30128: Deserialization of Untrusted Data9.8 CriticalN/A93%Apr 27, 2021
CVE-2021-29200: Deserialization of Untrusted Data9.8 CriticalN/A92%Apr 27, 2021
CVE-2021-30638: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A5%Apr 27, 2021
CVE-2021-28125: URL Redirection to Untrusted Site6.1 MediumN/A5%Apr 27, 2021
CVE-2020-17517: Improper Authorization7.5 HighN/A0%Apr 27, 2021
CVE-2021-31803: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 26, 2021
CVE-2021-26291: Origin Validation Error9.1 CriticalN/A44%Apr 23, 2021
CVE-2021-30245: Externally Controlled Reference to a Resource in Another Sphere8.8 HighN/A0%Apr 15, 2021
CVE-2021-27850: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A94%Apr 15, 2021
CVE-2021-29425: Improper Input Validation4.8 MediumN/A10%Apr 13, 2021
CVE-2021-29943: Incorrect Authorization9.1 CriticalN/A8%Apr 13, 2021
CVE-2021-29262: Insufficiently Protected Credentials7.5 HighN/A26%Apr 13, 2021
CVE-2021-27905: Server-Side Request Forgery (SSRF)9.8 CriticalN/A94%Apr 13, 2021
CVE-2021-29641: Unrestricted Upload of File with Dangerous Type8.8 HighN/A6%Apr 7, 2021
CVE-2021-22696: Server-Side Request Forgery (SSRF)7.5 HighN/A2%Apr 2, 2021
CVE-2021-28657: Loop with Unreachable Exit Condition5.5 MediumN/A0%Mar 31, 2021
2651-2675 of 4467
‹›