The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-11983: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 16, 2020
CVE-2020-11982: Deserialization of Untrusted Data9.8 CriticalN/A6%Jul 16, 2020
CVE-2020-11981: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A92%Jul 16, 2020
CVE-2020-11978: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A94%Jul 16, 2020
CVE-2020-9496: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A94%Jul 15, 2020
CVE-2020-13923: Authorization Bypass Through User-Controlled Key5.3 MediumN/A3%Jul 15, 2020
CVE-2020-13935: Loop with Unreachable Exit ConditionN/AN/A87%Jul 14, 2020
CVE-2020-13934: Missing Release of Memory after Effective LifetimeN/AN/A64%Jul 14, 2020
CVE-2020-1948: Deserialization of Untrusted Data9.8 CriticalN/A64%Jul 14, 2020
CVE-2020-13926: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A3%Jul 14, 2020
CVE-2020-13925: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A85%Jul 14, 2020
CVE-2020-11749: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A6%Jul 13, 2020
CVE-2020-11994: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A2%Jul 8, 2020
CVE-2020-9498: Out-of-bounds Write6.7 MediumN/A0%Jul 2, 2020
CVE-2020-9497: Improper Input Validation4.4 MediumN/A0%Jul 2, 2020
CVE-2020-9483: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A94%Jun 30, 2020
CVE-2020-11996: Undefined Security WeaknessN/AN/A27%Jun 26, 2020
CVE-2020-9494: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jun 24, 2020
CVE-2020-10280: Failure to Handle Incomplete Element7.5 HighN/A0%Jun 24, 2020
CVE-2020-9480: Missing Authentication for Critical Function9.8 CriticalN/A93%Jun 23, 2020
CVE-2020-11989: Undefined Security Weakness9.8 CriticalN/A78%Jun 22, 2020
CVE-2020-9495: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.3 MediumN/A27%Jun 19, 2020
CVE-2020-11969: Missing Authentication for Critical Function9.8 CriticalN/A1%Jun 15, 2020
CVE-2020-14060: Deserialization of Untrusted DataN/AN/A9%Jun 14, 2020
CVE-2020-14062: Deserialization of Untrusted DataN/AN/A8%Jun 14, 2020
2826-2850 of 4493