The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2021-44719: Undefined Security Weakness8.4 HighN/A0%May 25, 2022
CVE-2021-27783: Missing Encryption of Sensitive Data6.8 MediumN/A0%May 25, 2022
CVE-2021-27779: Missing Encryption of Sensitive Data9.1 CriticalN/A1%May 25, 2022
CVE-2021-35487: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A1%May 25, 2022
CVE-2021-32997: Use of Password Hash With Insufficient Computational Effort8.2 HighN/A0%May 25, 2022
CVE-2021-32989: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A2%May 25, 2022
CVE-2021-32966: Cleartext Transmission of Sensitive Information3.7 LowN/A0%May 25, 2022
CVE-2021-44974: NULL Pointer Dereference5.5 MediumN/A1%May 25, 2022
CVE-2021-42614: Use After Free7.8 HighN/A1%May 24, 2022
CVE-2021-3597: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A1%May 24, 2022
CVE-2021-3629: Uncontrolled Resource Consumption5.9 MediumN/A1%May 24, 2022
CVE-2021-3717: Files or Directories Accessible to External Parties7.8 HighN/A0%May 24, 2022
CVE-2021-42613: Double Free7.8 HighN/A1%May 24, 2022
CVE-2021-42612: Use After Free7.8 HighN/A1%May 24, 2022
CVE-2021-32969: Out-of-bounds Write7.8 HighN/A1%May 24, 2022
CVE-2021-32965: Access of Resource Using Incompatible Type7.8 HighN/A1%May 24, 2022
CVE-2021-32962: Improper Neutralization of Input During Web Page Generation8.2 HighN/A1%May 24, 2022
CVE-2021-32964: Relative Path Traversal6.5 MediumN/A1%May 24, 2022
CVE-2021-4230: Improper Authentication3.7 LowN/A1%May 24, 2022
CVE-2021-4229: Hidden Functionality5.0 MediumN/A1%May 24, 2022
CVE-2021-44975: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A1%May 24, 2022
CVE-2021-45914: Undefined Security Weakness9.8 CriticalN/A2%May 24, 2022
CVE-2021-45915: Undefined Security Weakness9.8 CriticalN/A2%May 24, 2022
CVE-2021-42656: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%May 24, 2022
CVE-2021-42655: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%May 24, 2022
3426-3450 of 23470