The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-41784: Use After Free7.8 HighN/A3%Aug 29, 2022
CVE-2021-41785: Use After Free7.8 HighN/A0%Aug 29, 2022
CVE-2021-3691: Undefined Security WeaknessN/AN/AN/AAug 26, 2022
CVE-2021-4216: Divide By Zero5.5 MediumN/A0%Aug 26, 2022
CVE-2021-3414: Improper Preservation of Permissions8.1 HighN/A0%Aug 26, 2022
CVE-2021-3651: Undefined Security Weakness9.8 CriticalN/AN/AAug 26, 2022
CVE-2021-3627: Undefined Security Weakness9.8 CriticalN/AN/AAug 26, 2022
CVE-2021-3913: Undefined Security WeaknessN/AN/AN/AAug 26, 2022
CVE-2021-4215: Undefined Security WeaknessN/AN/AN/AAug 26, 2022
CVE-2021-3585: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Aug 26, 2022
CVE-2021-3563: Incorrect Authorization7.4 HighN/A0%Aug 26, 2022
CVE-2021-3632: Improper Authentication7.5 HighN/A0%Aug 26, 2022
CVE-2021-3644: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Aug 26, 2022
CVE-2021-3669: Uncontrolled Resource Consumption5.5 MediumN/A0%Aug 26, 2022
CVE-2021-3688: Exposure of Sensitive Information to an Unauthorized Actor4.8 MediumN/A0%Aug 26, 2022
CVE-2021-3754: Improper Input Validation5.3 MediumN/A12%Aug 26, 2022
CVE-2021-3703: Undefined Security Weakness7.5 HighN/A0%Aug 26, 2022
CVE-2021-3735: Improper Locking4.4 MediumN/A0%Aug 26, 2022
CVE-2021-3856: Files or Directories Accessible to External Parties4.3 MediumN/A0%Aug 26, 2022
CVE-2021-3864: Improper Access Control7.0 HighN/A1%Aug 26, 2022
CVE-2021-20260: Exposure of Sensitive Information to an Unauthorized Actor7.8 HighN/A0%Aug 26, 2022
CVE-2021-39394: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Aug 26, 2022
CVE-2021-40285: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Aug 26, 2022
CVE-2021-39393: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 26, 2022
CVE-2021-3859: Invocation of Process Using Visible Sensitive Information7.5 HighN/A0%Aug 26, 2022
2776-2800 of 23470
‹›