The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-43756: Out-of-bounds Write7.8 HighN/A2%Jun 15, 2022
CVE-2021-43754: Out-of-bounds Write7.8 HighN/A2%Jun 15, 2022
CVE-2021-40776: Creation of Temporary File in Directory with Insecure Permissions6.1 MediumN/A1%Jun 15, 2022
CVE-2021-42732: Access of Memory Location After End of Buffer7.8 HighN/A2%Jun 15, 2022
CVE-2021-40727: Access of Memory Location After End of Buffer7.8 HighN/A1%Jun 15, 2022
CVE-2021-39820: Out-of-bounds Write7.8 HighN/A3%Jun 15, 2022
CVE-2021-40940: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A2%Jun 15, 2022
CVE-2021-41672: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A1%Jun 15, 2022
CVE-2021-40910: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 15, 2022
CVE-2021-33036: Path Traversal: '../filedir'8.8 HighN/A4%Jun 15, 2022
CVE-2021-39806: Double Free7.8 HighN/A0%Jun 15, 2022
CVE-2021-36901: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 15, 2022
CVE-2021-39691: Improper Restriction of Rendered UI Layers or Frames7.3 HighN/A0%Jun 15, 2022
CVE-2021-41413: Buffer Copy without Checking Size of Input7.8 HighN/A1%Jun 15, 2022
CVE-2021-40212: Out-of-bounds Write9.8 CriticalN/A2%Jun 15, 2022
CVE-2021-42675: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A2%Jun 14, 2022
CVE-2021-40660: Inefficient Regular Expression Complexity7.5 HighN/A1%Jun 14, 2022
CVE-2021-40678: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 14, 2022
CVE-2021-40658: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Jun 14, 2022
CVE-2021-40633: Missing Release of Memory after Effective Lifetime8.8 HighN/A2%Jun 14, 2022
CVE-2021-40650: Missing Encryption of Sensitive Data6.5 MediumN/A1%Jun 14, 2022
CVE-2021-40649: Incorrect Permission Assignment for Critical Resource6.5 MediumN/A1%Jun 14, 2022
CVE-2021-35130: Use After Free8.4 HighN/A0%Jun 14, 2022
CVE-2021-35129: Buffer Copy without Checking Size of Input7.8 HighN/A0%Jun 14, 2022
CVE-2021-35126: Improper Validation of Array Index8.4 HighN/A0%Jun 14, 2022
3226-3250 of 23470
‹›