The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-26919: Undefined Security Weakness8.8 HighN/A79%Mar 30, 2021
CVE-2020-1946: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Mar 25, 2021
CVE-2021-26295: Deserialization of Untrusted Data9.8 CriticalN/A94%Mar 22, 2021
CVE-2021-27906: Memory Allocation with Excessive Size Value5.5 MediumN/A1%Mar 19, 2021
CVE-2021-27807: Excessive Iteration5.5 MediumN/A1%Mar 19, 2021
CVE-2020-17525: NULL Pointer Dereference7.5 HighN/A12%Mar 17, 2021
CVE-2020-13924: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Mar 17, 2021
CVE-2020-1926: Observable Timing Discrepancy5.9 MediumN/A0%Mar 16, 2021
CVE-2021-27576: Undefined Security Weakness7.5 HighN/A4%Mar 15, 2021
CVE-2020-13936: Undefined Security Weakness8.8 HighN/A16%Mar 10, 2021
CVE-2020-13959: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A3%Mar 10, 2021
CVE-2020-35451: Insecure Temporary File4.7 MediumN/A0%Mar 9, 2021
CVE-2021-27907: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Mar 5, 2021
CVE-2020-1936: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Mar 2, 2021
CVE-2020-9479: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A2%Mar 1, 2021
CVE-2021-25122: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A18%Mar 1, 2021
CVE-2021-25329: Undefined Security WeaknessN/AN/A9%Mar 1, 2021
CVE-2020-11988: Improper Input Validation8.2 HighN/A0%Feb 24, 2021
CVE-2020-11987: Improper Input ValidationN/AN/A13%Feb 24, 2021
CVE-2021-26544: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Feb 20, 2021
CVE-2021-26296: Cross-Site Request Forgery (CSRF)7.5 HighN/A0%Feb 19, 2021
CVE-2021-26697: Improper Privilege Management5.3 MediumN/A2%Feb 17, 2021
CVE-2021-26559: Improper Access Control6.5 MediumN/A1%Feb 17, 2021
CVE-2020-13949: Uncontrolled Resource Consumption7.5 HighN/A1%Feb 12, 2021
CVE-2020-13947: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A8%Feb 8, 2021
2676-2700 of 4467
‹›