The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-5777: Improper Authentication9.8 CriticalN/A23%Sep 1, 2020
CVE-2020-3484: Incorrect Default Permissions5.3 MediumN/A1%Aug 26, 2020
CVE-2020-13933: Undefined Security Weakness7.5 HighN/A44%Aug 17, 2020
CVE-2020-13941: Improper Input Validation8.8 HighN/A4%Aug 17, 2020
CVE-2020-11976: Files or Directories Accessible to External Parties7.5 HighN/A4%Aug 11, 2020
CVE-2020-11985: Insufficient Verification of Data Authenticity5.3 MediumN/A7%Aug 7, 2020
CVE-2020-11993: Inconsistent Interpretation of HTTP Requests7.5 HighN/A56%Aug 7, 2020
CVE-2020-11984: Buffer Copy without Checking Size of Input9.8 CriticalN/A90%Aug 7, 2020
CVE-2020-9490: Inconsistent Interpretation of HTTP Requests7.5 HighN/A89%Aug 7, 2020
CVE-2020-13921: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A33%Aug 5, 2020
CVE-2020-13932: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A4%Jul 20, 2020
CVE-2020-9485: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A3%Jul 16, 2020
CVE-2020-11983: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A2%Jul 16, 2020
CVE-2020-11982: Deserialization of Untrusted Data9.8 CriticalN/A7%Jul 16, 2020
CVE-2020-11981: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A37%Jul 16, 2020
CVE-2020-11978: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A99%Jul 16, 2020
CVE-2020-9496: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A99%Jul 15, 2020
CVE-2020-13923: Authorization Bypass Through User-Controlled Key5.3 MediumN/A5%Jul 15, 2020
CVE-2020-13935: Loop with Unreachable Exit ConditionN/AN/A87%Jul 14, 2020
CVE-2020-13934: Missing Release of Memory after Effective LifetimeN/AN/A64%Jul 14, 2020
CVE-2020-1948: Deserialization of Untrusted Data9.8 CriticalN/A16%Jul 14, 2020
CVE-2020-13926: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A2%Jul 14, 2020
CVE-2020-13925: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A20%Jul 14, 2020
CVE-2020-11749: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A16%Jul 13, 2020
CVE-2020-11994: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A4%Jul 8, 2020
2801-2825 of 4480