The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-35937: Improper Link Resolution Before File Access6.4 MediumN/A0%Aug 25, 2022
CVE-2021-25642: Deserialization of Untrusted Data8.8 HighN/A2%Aug 25, 2022
CVE-2021-35938: Improper Link Resolution Before File Access6.7 MediumN/A0%Aug 25, 2022
CVE-2021-3979: Use of a Broken or Risky Cryptographic Algorithm6.5 MediumN/A0%Aug 25, 2022
CVE-2021-42521: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 25, 2022
CVE-2021-4040: Uncontrolled Resource Consumption5.3 MediumN/A4%Aug 24, 2022
CVE-2021-4037: Improper Access Control4.4 MediumN/A0%Aug 24, 2022
CVE-2021-43309: Inefficient Regular Expression Complexity5.9 MediumN/A0%Aug 24, 2022
CVE-2021-3488: Undefined Security Weakness9.8 CriticalN/AN/AAug 24, 2022
CVE-2021-4041: Improper Input Validation7.8 HighN/A0%Aug 24, 2022
CVE-2021-4159: Exposure of Sensitive Information Through Data Queries4.4 MediumN/A0%Aug 24, 2022
CVE-2021-4158: NULL Pointer Dereference6.0 MediumN/A0%Aug 24, 2022
CVE-2021-4155: Incorrect Calculation of Buffer Size5.5 MediumN/A0%Aug 24, 2022
CVE-2021-4142: Authorization Bypass Through User-Controlled Key5.5 MediumN/A0%Aug 24, 2022
CVE-2021-4125: Improper Input Validation8.1 HighN/A1%Aug 24, 2022
CVE-2021-4122: Insufficient Verification of Data Authenticity4.3 MediumN/A0%Aug 24, 2022
CVE-2021-4217: NULL Pointer Dereference3.3 LowN/A0%Aug 24, 2022
CVE-2021-4218: Improper Initialization5.5 MediumN/A0%Aug 24, 2022
CVE-2021-4213: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Aug 24, 2022
CVE-2021-4209: NULL Pointer Dereference6.5 MediumN/A0%Aug 24, 2022
CVE-2021-4178: Deserialization of Untrusted Data6.7 MediumN/A0%Aug 24, 2022
CVE-2021-39815: Use After Free9.8 CriticalN/A0%Aug 24, 2022
CVE-2021-0947: Missing Initialization of Resource7.5 HighN/A0%Aug 24, 2022
CVE-2021-0946: Missing Initialization of Resource7.5 HighN/A0%Aug 24, 2022
CVE-2021-0891: Improper Privilege Management7.5 HighN/A0%Aug 24, 2022
2826-2850 of 23470
‹›