The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2018-20243: Insufficiently Protected Credentials7.5 HighN/A1%Oct 13, 2020
CVE-2020-13943: Undefined Security WeaknessN/AN/A55%Oct 12, 2020
CVE-2020-13955: Improper Certificate Validation5.9 MediumN/A1%Oct 9, 2020
CVE-2020-5632: Undefined Security Weakness7.8 HighN/A0%Oct 6, 2020
CVE-2020-9491: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A3%Oct 1, 2020
CVE-2020-13940: Improper Restriction of XML External Entity Reference5.5 MediumN/A2%Oct 1, 2020
CVE-2020-9487: Missing Authentication for Critical Function7.5 HighN/A1%Oct 1, 2020
CVE-2020-9486: Insertion of Sensitive Information into Log File7.5 HighN/A1%Oct 1, 2020
CVE-2020-11979: Creation of Temporary File in Directory with Insecure PermissionsN/AN/A8%Oct 1, 2020
CVE-2020-13952: Undefined Security Weakness8.1 HighN/A0%Sep 30, 2020
CVE-2020-13951: Undefined Security Weakness7.5 HighN/A74%Sep 30, 2020
CVE-2018-11765: Improper Authentication7.5 HighN/A1%Sep 30, 2020
CVE-2020-13953: Files or Directories Accessible to External Parties5.3 MediumN/A2%Sep 30, 2020
CVE-2020-13944: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A17%Sep 17, 2020
CVE-2020-13948: Undefined Security Weakness8.8 HighN/A1%Sep 17, 2020
CVE-2020-13928: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Sep 16, 2020
CVE-2020-11977: Undefined Security Weakness7.2 HighN/A1%Sep 15, 2020
CVE-2019-0233: Improper Preservation of Permissions7.5 HighN/A9%Sep 14, 2020
CVE-2019-0230: Improperly Controlled Modification of Object Prototype Attributes9.8 CriticalN/A94%Sep 14, 2020
CVE-2020-11991: Improper Restriction of XML External Entity Reference7.5 HighN/A93%Sep 11, 2020
CVE-2020-11998: Undefined Security Weakness9.8 CriticalN/A8%Sep 10, 2020
CVE-2020-13920: Missing Authentication for Critical Function5.9 MediumN/A0%Sep 10, 2020
CVE-2020-11986: Undefined Security Weakness9.8 CriticalN/A5%Sep 9, 2020
CVE-2020-25073: Exposure of Resource to Wrong Sphere5.3 MediumN/A1%Sep 2, 2020
CVE-2020-13946: Exposure of Resource to Wrong Sphere5.9 MediumN/A0%Sep 1, 2020
2776-2800 of 4480