The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-27914: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jun 1, 2022
CVE-2021-26635: Stack-based Buffer Overflow7.8 HighN/A1%Jun 1, 2022
CVE-2021-26634: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jun 1, 2022
CVE-2021-26633: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A1%Jun 1, 2022
CVE-2021-4014: Undefined Security WeaknessN/AN/AN/AJun 1, 2022
CVE-2021-33254: NULL Pointer Dereference7.5 HighN/A2%Jun 1, 2022
CVE-2021-34078: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A3%Jun 1, 2022
CVE-2021-34079: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A4%Jun 1, 2022
CVE-2021-34080: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A3%Jun 1, 2022
CVE-2021-34081: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A4%Jun 1, 2022
CVE-2021-34082: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A5%Jun 1, 2022
CVE-2021-34084: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A3%Jun 1, 2022
CVE-2021-34083: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A2%Jun 1, 2022
CVE-2021-44080: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A25%Jun 1, 2022
CVE-2021-27778: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%May 31, 2022
CVE-2021-44095: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A2%May 31, 2022
CVE-2021-44096: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%May 31, 2022
CVE-2021-44097: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%May 31, 2022
CVE-2021-44098: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%May 31, 2022
CVE-2021-43512: Insecure Storage of Sensitive Information5.5 MediumN/A0%May 31, 2022
CVE-2021-42204: Out-of-bounds Write7.8 HighN/A1%May 31, 2022
CVE-2021-32546: Undefined Security Weakness8.8 HighN/A2%May 31, 2022
CVE-2021-33504: Undefined Security Weakness4.9 MediumN/A1%May 31, 2022
CVE-2021-36890: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 31, 2022
CVE-2021-36866: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%May 31, 2022
3376-3400 of 23470
‹›