The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-3997: Uncontrolled Recursion5.5 MediumN/A0%Aug 23, 2022
CVE-2021-28861: URL Redirection to Untrusted Site7.4 HighN/A1%Aug 23, 2022
CVE-2021-3800: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Aug 23, 2022
CVE-2021-31566: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 23, 2022
CVE-2021-3995: Files or Directories Accessible to External Parties5.5 MediumN/A0%Aug 23, 2022
CVE-2021-3759: Uncontrolled Resource Consumption5.5 MediumN/A0%Aug 23, 2022
CVE-2021-20304: Integer Overflow or Wraparound7.5 HighN/A0%Aug 23, 2022
CVE-2021-20316: Concurrent Execution using Shared Resource with Improper Synchronization6.8 MediumN/A1%Aug 23, 2022
CVE-2021-3905: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Aug 23, 2022
CVE-2021-3996: Files or Directories Accessible to External Parties5.5 MediumN/A0%Aug 23, 2022
CVE-2021-3975: Use After Free6.5 MediumN/A0%Aug 23, 2022
CVE-2021-29891: Unrestricted Upload of File with Dangerous Type4.9 MediumN/A0%Aug 22, 2022
CVE-2021-3484: Undefined Security Weakness9.8 CriticalN/AN/AAug 22, 2022
CVE-2021-24912: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Aug 22, 2022
CVE-2021-24911: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 22, 2022
CVE-2021-24910: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A10%Aug 22, 2022
CVE-2021-3659: Unchecked Return Value5.5 MediumN/A0%Aug 22, 2022
CVE-2021-3639: URL Redirection to Untrusted Site6.1 MediumN/A0%Aug 22, 2022
CVE-2021-3590: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Aug 22, 2022
CVE-2021-3586: Initialization of a Resource with an Insecure Default9.8 CriticalN/A0%Aug 22, 2022
CVE-2021-36857: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 22, 2022
CVE-2021-36852: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 22, 2022
CVE-2021-3513: Insufficiently Protected Credentials7.5 HighN/A0%Aug 22, 2022
CVE-2021-36847: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 22, 2022
CVE-2021-3442: Improper Input Validation5.4 MediumN/A0%Aug 22, 2022
2876-2900 of 23470
‹›