The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-11980: Server-Side Request Forgery (SSRF)6.3 MediumN/A1%Jun 12, 2020
CVE-2020-11975: Undefined Security Weakness9.8 CriticalN/A86%Jun 5, 2020
CVE-2020-1963: Missing Authorization9.1 CriticalN/A5%Jun 3, 2020
CVE-2020-1956: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A94%May 22, 2020
CVE-2020-9484: Deserialization of Untrusted DataN/AN/A56%May 20, 2020
CVE-2020-1955: Missing Authentication for Critical Function9.8 CriticalN/A2%May 20, 2020
CVE-2020-1941: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A9%May 14, 2020
CVE-2020-11972: Deserialization of Untrusted Data9.8 CriticalN/A8%May 14, 2020
CVE-2020-11973: Deserialization of Untrusted Data9.8 CriticalN/A8%May 14, 2020
CVE-2020-11971: Undefined Security Weakness7.5 HighN/A11%May 14, 2020
CVE-2019-17562: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A2%May 14, 2020
CVE-2019-17572: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A2%May 14, 2020
CVE-2020-1960: Undefined Security Weakness4.7 MediumN/A0%May 14, 2020
CVE-2020-1945: Exposure of Resource to Wrong Sphere6.3 MediumN/A0%May 14, 2020
CVE-2020-1939: NULL Pointer Dereference9.8 CriticalN/A1%May 12, 2020
CVE-2018-1285: Improper Restriction of XML External Entity Reference9.8 CriticalN/A49%May 11, 2020
CVE-2020-1961: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A7%May 4, 2020
CVE-2019-17557: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%May 4, 2020
CVE-2020-1959: Improper Neutralization of Special Elements used in an Expression Language Statement9.8 CriticalN/A2%May 4, 2020
CVE-2019-0235: Cross-Site Request Forgery (CSRF)8.8 HighN/A11%Apr 30, 2020
CVE-2019-12425: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A2%Apr 30, 2020
CVE-2020-12442: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A5%Apr 28, 2020
CVE-2020-9482: Insufficient Session Expiration6.5 MediumN/A1%Apr 28, 2020
CVE-2020-9481: Uncontrolled Resource Consumption7.5 HighN/A5%Apr 27, 2020
CVE-2020-1952: Improper Certificate Validation9.8 CriticalN/A2%Apr 27, 2020
2851-2875 of 4493