The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-4958: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Jan 17, 2016
CVE-2015-6863: Improper Input Validation7.3 HighN/A2%Jan 16, 2016
CVE-2015-6864: Improper Input Validation6.3 MediumN/A1%Jan 16, 2016
CVE-2015-8688: Improper Input Validation5.4 MediumN/A1%Jan 15, 2016
CVE-2015-8685: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 15, 2016
CVE-2015-8675: Undefined Security Weakness6.2 MediumN/A0%Jan 15, 2016
CVE-2015-8749: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A1%Jan 15, 2016
CVE-2015-3946: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jan 15, 2016
CVE-2015-3947: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A0%Jan 15, 2016
CVE-2015-3948: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 15, 2016
CVE-2015-6314: Improper Authentication9.8 CriticalN/A1%Jan 15, 2016
CVE-2015-6320: Undefined Security Weakness7.5 HighN/A1%Jan 15, 2016
CVE-2015-6467: Undefined Security Weakness8.1 HighN/A1%Jan 15, 2016
CVE-2015-6423: Undefined Security Weakness4.3 MediumN/A0%Jan 15, 2016
CVE-2015-6323: Undefined Security Weakness9.8 CriticalN/A1%Jan 15, 2016
CVE-2015-8281: Undefined Security Weakness7.5 HighN/A0%Jan 15, 2016
CVE-2015-6336: Undefined Security Weakness7.3 HighN/A0%Jan 15, 2016
CVE-2015-8279: Undefined Security Weakness8.6 HighN/A68%Jan 15, 2016
CVE-2015-3943: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jan 15, 2016
CVE-2015-8280: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Jan 15, 2016
CVE-2015-5007: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jan 15, 2016
CVE-2015-8605: Improper Input Validation6.5 MediumN/A46%Jan 14, 2016
CVE-2015-8466: Improper Input Validation7.4 HighN/A0%Jan 13, 2016
CVE-2015-8607: Improper Input Validation7.3 HighN/A6%Jan 13, 2016
CVE-2015-6117: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jan 13, 2016
2951-2975 of 8780