The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-3427: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Aug 26, 2022
CVE-2021-3574: Missing Release of Memory after Effective Lifetime3.3 LowN/A0%Aug 26, 2022
CVE-2021-35939: Improper Link Resolution Before File Access6.7 MediumN/A0%Aug 26, 2022
CVE-2021-3020: Improper Privilege Management8.8 HighN/A0%Aug 25, 2022
CVE-2021-32570: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Aug 25, 2022
CVE-2021-43329: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A9%Aug 25, 2022
CVE-2021-3914: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 25, 2022
CVE-2021-3929: Use After Free8.2 HighN/A5%Aug 25, 2022
CVE-2021-23172: Buffer Copy without Checking Size of Input5.5 MediumN/A0%Aug 25, 2022
CVE-2021-4112: Files or Directories Accessible to External Parties8.8 HighN/A0%Aug 25, 2022
CVE-2021-23159: Buffer Copy without Checking Size of Input5.5 MediumN/A0%Aug 25, 2022
CVE-2021-23210: Divide By Zero5.5 MediumN/A0%Aug 25, 2022
CVE-2021-33844: Divide By Zero5.5 MediumN/A0%Aug 25, 2022
CVE-2021-43767: Insufficiently Protected Credentials5.9 MediumN/A0%Aug 25, 2022
CVE-2021-43766: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A0%Aug 25, 2022
CVE-2021-42523: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 25, 2022
CVE-2021-42522: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 25, 2022
CVE-2021-4022: Uncontrolled Resource Consumption5.5 MediumN/A0%Aug 25, 2022
CVE-2021-4042: Undefined Security WeaknessN/AN/AN/AAug 25, 2022
CVE-2021-4141: Undefined Security WeaknessN/AN/AN/AAug 25, 2022
CVE-2021-20192: Undefined Security Weakness9.8 CriticalN/AN/AAug 25, 2022
CVE-2021-20258: Undefined Security WeaknessN/AN/AN/AAug 25, 2022
CVE-2021-20287: Undefined Security Weakness9.8 CriticalN/AN/AAug 25, 2022
CVE-2021-20301: Undefined Security Weakness9.8 CriticalN/AN/AAug 25, 2022
CVE-2021-20224: Integer Overflow or Wraparound5.5 MediumN/A0%Aug 25, 2022
2801-2825 of 23470
‹›