The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-2912: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Dec 31, 2015
CVE-2015-7283: Undefined Security Weakness8.1 HighN/A4%Dec 31, 2015
CVE-2015-7277: Undefined Security Weakness9.8 CriticalN/A2%Dec 31, 2015
CVE-2015-7278: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Dec 31, 2015
CVE-2015-7284: Cross-Site Request Forgery (CSRF)8.0 HighN/A1%Dec 31, 2015
CVE-2015-7784: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A1%Dec 30, 2015
CVE-2015-7794: Improper Input Validation5.8 MediumN/A2%Dec 30, 2015
CVE-2015-8703: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A5%Dec 30, 2015
CVE-2015-7782: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 30, 2015
CVE-2015-7788: Undefined Security Weakness7.3 HighN/A2%Dec 30, 2015
CVE-2015-7792: Undefined Security Weakness9.8 CriticalN/A3%Dec 30, 2015
CVE-2015-5663: Undefined Security Weakness7.4 HighN/A1%Dec 30, 2015
CVE-2015-7250: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A16%Dec 30, 2015
CVE-2015-7249: Undefined Security Weakness4.9 MediumN/A6%Dec 30, 2015
CVE-2015-7248: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A7%Dec 30, 2015
CVE-2015-7790: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 30, 2015
CVE-2015-7251: Undefined Security Weakness9.8 CriticalN/A11%Dec 30, 2015
CVE-2015-7787: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Dec 30, 2015
CVE-2015-7789: Improper Input Validation4.3 MediumN/A1%Dec 30, 2015
CVE-2015-7793: Undefined Security Weakness5.8 MediumN/A2%Dec 30, 2015
CVE-2015-7252: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A3%Dec 30, 2015
CVE-2015-5252: Undefined Security Weakness7.2 HighN/A13%Dec 29, 2015
CVE-2015-7540: Undefined Security Weakness7.5 HighN/A7%Dec 29, 2015
CVE-2015-5299: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A14%Dec 29, 2015
CVE-2015-3223: Undefined Security Weakness5.3 MediumN/A7%Dec 29, 2015
3201-3225 of 8780