The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-17523: Improper Authentication9.8 CriticalN/A89%Feb 3, 2021
CVE-2020-17516: Authentication Bypass by Spoofing7.5 HighN/A1%Feb 3, 2021
CVE-2021-21287: Server-Side Request Forgery (SSRF)7.7 HighN/A92%Feb 1, 2021
CVE-2021-25646: Undefined Security Weakness8.8 HighN/A94%Jan 29, 2021
CVE-2021-26118: Improper Access Control7.5 HighN/A1%Jan 27, 2021
CVE-2021-26117: Improper Authentication7.5 HighN/A16%Jan 27, 2021
CVE-2020-9492: Incorrect Authorization8.8 HighN/A0%Jan 26, 2021
CVE-2020-17522: Incorrect Permission Assignment for Critical Resource5.8 MediumN/A2%Jan 26, 2021
CVE-2020-17532: Improper Input Validation8.8 HighN/A3%Jan 25, 2021
CVE-2021-23901: Improper Restriction of XML External Entity Reference9.1 CriticalN/A1%Jan 25, 2021
CVE-2021-3193: Undefined Security Weakness9.8 CriticalN/A25%Jan 22, 2021
CVE-2020-11997: Incorrect Default Permissions4.3 MediumN/A1%Jan 19, 2021
CVE-2021-21251: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A1%Jan 15, 2021
CVE-2021-24122: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A23%Jan 14, 2021
CVE-2021-23926: Improper Restriction of Recursive Entity References in DTDs9.1 CriticalN/A0%Jan 14, 2021
CVE-2020-17534: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Jan 11, 2021
CVE-2020-17508: Undefined Security Weakness7.5 HighN/A3%Jan 11, 2021
CVE-2020-17509: Inconsistent Interpretation of HTTP Requests7.5 HighN/A3%Jan 11, 2021
CVE-2020-11995: Deserialization of Untrusted Data9.8 CriticalN/A1%Jan 11, 2021
CVE-2020-13922: Incorrect Default Permissions6.5 MediumN/A1%Jan 11, 2021
CVE-2020-36182: Deserialization of Untrusted Data8.1 HighN/A3%Jan 7, 2021
CVE-2020-36180: Deserialization of Untrusted Data8.1 HighN/A2%Jan 7, 2021
CVE-2020-36179: Deserialization of Untrusted Data8.1 HighN/A60%Jan 7, 2021
CVE-2020-36184: Deserialization of Untrusted Data8.1 HighN/A6%Jan 6, 2021
CVE-2020-36181: Deserialization of Untrusted Data8.1 HighN/A5%Jan 6, 2021
2701-2725 of 4467
‹›