The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-40895: Inefficient Regular Expression Complexity7.5 HighN/A1%Jun 27, 2022
CVE-2021-40894: Inefficient Regular Expression Complexity7.5 HighN/A1%Jun 24, 2022
CVE-2021-39409: Undefined Security Weakness9.8 CriticalN/A3%Jun 24, 2022
CVE-2021-39408: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 24, 2022
CVE-2021-38879: Incorrect Permission Assignment for Critical Resource5.3 MediumN/A1%Jun 24, 2022
CVE-2021-38871: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 24, 2022
CVE-2021-29865: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A1%Jun 24, 2022
CVE-2021-20551: Exposure of Resource to Wrong Sphere3.3 LowN/A0%Jun 24, 2022
CVE-2021-20544: Server-Side Request Forgery (SSRF)4.3 MediumN/A1%Jun 24, 2022
CVE-2021-20543: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jun 24, 2022
CVE-2021-20421: Server-Side Request Forgery (SSRF)4.3 MediumN/A1%Jun 24, 2022
CVE-2021-20355: Incorrect Permission Assignment for Critical Resource5.3 MediumN/A1%Jun 24, 2022
CVE-2021-42056: Improper Link Resolution Before File Access6.7 MediumN/A1%Jun 24, 2022
CVE-2021-40893: Inefficient Regular Expression Complexity7.5 HighN/A1%Jun 24, 2022
CVE-2021-39047: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 24, 2022
CVE-2021-38945: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A2%Jun 24, 2022
CVE-2021-29768: Undefined Security Weakness6.5 MediumN/A1%Jun 24, 2022
CVE-2021-30651: Undefined Security Weakness4.9 MediumN/A1%Jun 24, 2022
CVE-2021-40892: Inefficient Regular Expression Complexity7.5 HighN/A1%Jun 24, 2022
CVE-2021-41634: Observable Discrepancy5.3 MediumN/A1%Jun 24, 2022
CVE-2021-41635: Incorrect Default Permissions8.8 HighN/A2%Jun 24, 2022
CVE-2021-41636: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Jun 24, 2022
CVE-2021-41637: Incorrect Default Permissions7.1 HighN/A0%Jun 24, 2022
CVE-2021-41638: Improper Authentication7.5 HighN/A2%Jun 24, 2022
CVE-2021-41639: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Jun 24, 2022
3151-3175 of 23470
‹›