The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-17521: Undefined Security WeaknessN/AN/A1%Dec 7, 2020
CVE-2020-13945: Undefined Security Weakness6.5 MediumN/A93%Dec 7, 2020
CVE-2020-17527: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A25%Dec 3, 2020
CVE-2020-13956: Improper Input ValidationN/AN/A9%Dec 2, 2020
CVE-2020-11990: Undefined Security Weakness3.3 LowN/A0%Dec 1, 2020
CVE-2020-13942: Improper Input Validation9.8 CriticalN/A94%Nov 24, 2020
CVE-2020-13958: Undefined Security Weakness7.8 HighN/A1%Nov 17, 2020
CVE-2020-13954: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A8%Nov 12, 2020
CVE-2019-17566: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Nov 12, 2020
CVE-2020-13927: Missing Authentication for Critical Function9.8 CriticalN/A94%Nov 10, 2020
CVE-2020-17510: Improper Authentication9.8 CriticalN/A2%Nov 5, 2020
CVE-2020-7760: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 30, 2020
CVE-2018-11764: Missing Authentication for Critical Function8.8 HighN/A0%Oct 21, 2020
CVE-2020-5791: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A88%Oct 20, 2020
CVE-2020-5792: Improper Neutralization of Argument Delimiters in a Command7.2 HighN/A81%Oct 20, 2020
CVE-2020-13937: Insecure Storage of Sensitive Information5.3 MediumN/A93%Oct 19, 2020
CVE-2020-13957: Incorrect Authorization9.8 CriticalN/A85%Oct 13, 2020
CVE-2018-20243: Insufficiently Protected Credentials7.5 HighN/A1%Oct 13, 2020
CVE-2020-13943: Undefined Security WeaknessN/AN/A55%Oct 12, 2020
CVE-2020-13955: Improper Certificate Validation5.9 MediumN/A1%Oct 9, 2020
CVE-2020-5632: Undefined Security Weakness7.8 HighN/A0%Oct 6, 2020
CVE-2020-9491: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A3%Oct 1, 2020
CVE-2020-13940: Improper Restriction of XML External Entity Reference5.5 MediumN/A2%Oct 1, 2020
CVE-2020-9487: Missing Authentication for Critical Function7.5 HighN/A1%Oct 1, 2020
CVE-2020-9486: Insertion of Sensitive Information into Log File7.5 HighN/A1%Oct 1, 2020
2751-2775 of 4472
‹›