The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-7400: Undefined Security Weakness7.7 HighN/A3%Jan 2, 2016
CVE-2015-7407: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Jan 2, 2016
CVE-2015-7416: Improper Input Validation4.0 MediumN/A1%Jan 2, 2016
CVE-2015-7429: Exposure of Sensitive Information to an Unauthorized Actor8.5 HighN/A1%Jan 2, 2016
CVE-2015-7442: Undefined Security Weakness7.0 HighN/A0%Jan 2, 2016
CVE-2015-7451: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jan 2, 2016
CVE-2015-5020: Undefined Security Weakness4.3 MediumN/A1%Jan 2, 2016
CVE-2015-7402: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jan 2, 2016
CVE-2015-4996: Exposure of Sensitive Information to an Unauthorized Actor5.1 MediumN/A0%Jan 2, 2016
CVE-2015-4989: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A1%Jan 2, 2016
CVE-2015-4990: Exposure of Sensitive Information to an Unauthorized Actor4.0 MediumN/A0%Jan 2, 2016
CVE-2015-5018: Improper Neutralization of Special Elements used in an OS Command8.0 HighN/A3%Jan 2, 2016
CVE-2015-7409: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jan 1, 2016
CVE-2015-7456: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jan 1, 2016
CVE-2015-7415: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jan 1, 2016
CVE-2015-5049: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A1%Jan 1, 2016
CVE-2015-7421: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A2%Jan 1, 2016
CVE-2015-4941: Undefined Security Weakness5.3 MediumN/A2%Jan 1, 2016
CVE-2015-7420: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A2%Jan 1, 2016
CVE-2015-7445: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Jan 1, 2016
CVE-2015-4943: Undefined Security Weakness5.3 MediumN/A2%Jan 1, 2016
CVE-2015-7410: Undefined Security Weakness7.4 HighN/A1%Jan 1, 2016
CVE-2015-7489: Undefined Security Weakness7.8 HighN/A0%Jan 1, 2016
CVE-2015-7441: Undefined Security Weakness6.8 MediumN/A1%Jan 1, 2016
CVE-2015-1947: Undefined Security Weakness7.4 HighN/A0%Dec 31, 2015
3151-3175 of 8780