The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-8458: Out-of-bounds Write9.8 CriticalN/A8%Dec 21, 2015
CVE-2015-5001: Undefined Security Weakness4.3 MediumN/A2%Dec 21, 2015
CVE-2015-7906: Undefined Security WeaknessN/AN/A2%Dec 21, 2015
CVE-2015-7907: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/A4%Dec 21, 2015
CVE-2015-1836: Improper Access Control7.3 HighN/A7%Dec 21, 2015
CVE-2015-1772: Improper Authentication7.3 HighN/A7%Dec 21, 2015
CVE-2015-4993: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 21, 2015
CVE-2015-6481: Undefined Security Weakness8.3 HighN/A2%Dec 21, 2015
CVE-2015-7413: Improper Neutralization of Input During Web Page GenerationN/AN/A1%Dec 21, 2015
CVE-2015-7937: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A7%Dec 21, 2015
CVE-2015-4998: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 21, 2015
CVE-2015-6934: Improper Input Validation7.3 HighN/A5%Dec 21, 2015
CVE-2015-7756: Undefined Security Weakness5.3 MediumN/A3%Dec 19, 2015
CVE-2015-6429: Undefined Security Weakness5.3 MediumN/A2%Dec 19, 2015
CVE-2015-7755: Improper Authentication9.8 CriticalN/A61%Dec 19, 2015
CVE-2015-6428: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A2%Dec 18, 2015
CVE-2015-6556: Exposure of Sensitive Information to an Unauthorized Actor3.5 LowN/A0%Dec 18, 2015
CVE-2015-6424: Undefined Security Weakness7.8 HighN/A0%Dec 18, 2015
CVE-2015-6427: Undefined Security Weakness5.3 MediumN/A2%Dec 18, 2015
CVE-2015-6426: Improper Input ValidationN/AN/A0%Dec 18, 2015
CVE-2015-5204: Undefined Security WeaknessN/AN/A3%Dec 17, 2015
CVE-2015-5277: Improper Restriction of Operations within the Bounds of a Memory Buffer8.4 HighN/A1%Dec 17, 2015
CVE-2015-7518: Improper Neutralization of Input During Web Page GenerationN/AN/A2%Dec 17, 2015
CVE-2015-7527: Improper Input Validation7.3 HighN/A5%Dec 17, 2015
CVE-2015-8600: Undefined Security Weakness7.3 HighN/A1%Dec 17, 2015
3301-3325 of 8780