The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2021-42203: Use After Free7.8 HighN/A1%May 31, 2022
CVE-2021-42202: NULL Pointer Dereference5.5 MediumN/A1%May 31, 2022
CVE-2021-42201: Out-of-bounds Write7.8 HighN/A1%May 31, 2022
CVE-2021-40186: Server-Side Request Forgery (SSRF)6.5 MediumN/A1%May 31, 2022
CVE-2021-42200: NULL Pointer Dereference5.5 MediumN/A1%May 31, 2022
CVE-2021-42199: Out-of-bounds Write7.8 HighN/A1%May 31, 2022
CVE-2021-42198: NULL Pointer Dereference5.5 MediumN/A1%May 31, 2022
CVE-2021-42197: Missing Release of Memory after Effective Lifetime7.8 HighN/A1%May 31, 2022
CVE-2021-42196: NULL Pointer Dereference5.5 MediumN/A1%May 31, 2022
CVE-2021-42195: Out-of-bounds Write7.8 HighN/A1%May 31, 2022
CVE-2021-3676: Undefined Security WeaknessN/AN/AN/AMay 31, 2022
CVE-2021-3555: Buffer Copy without Checking Size of Input7.6 HighN/A1%May 31, 2022
CVE-2021-27781: Improper Neutralization of Input During Web Page Generation6.6 MediumN/A0%May 27, 2022
CVE-2021-27780: Missing XML Validation5.3 MediumN/A1%May 27, 2022
CVE-2021-28509: Cleartext Transmission of Sensitive Information6.1 MediumN/A0%May 26, 2022
CVE-2021-28508: Cleartext Transmission of Sensitive Information6.8 MediumN/A1%May 26, 2022
CVE-2021-4232: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%May 26, 2022
CVE-2021-33014: Use of Hard-coded Credentials8.8 HighN/A1%May 26, 2022
CVE-2021-33016: Use of Hard-coded Credentials9.8 CriticalN/A1%May 26, 2022
CVE-2021-40317: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%May 26, 2022
CVE-2021-42860: Missing Release of Resource after Effective Lifetime7.5 HighN/A1%May 26, 2022
CVE-2021-42859: Missing Release of Resource after Effective Lifetime7.5 HighN/A1%May 26, 2022
CVE-2021-42692: Out-of-bounds Write6.5 MediumN/A1%May 26, 2022
CVE-2021-34360: Cross-Site Request Forgery (CSRF)5.3 MediumN/A0%May 26, 2022
CVE-2021-4231: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%May 26, 2022
3401-3425 of 23470