The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2021-25262: Improper Encoding or Escaping of Output5.4 Medium6.9 Medium0%May 21, 2025
CVE-2021-25255: Improper Input Validation7.5 High8.3 High0%May 21, 2025
CVE-2021-25254: Improper Encoding or Escaping of Output5.3 Medium8.2 High0%May 21, 2025
CVE-2021-43069: Undefined Security WeaknessN/AN/AN/AMay 6, 2025
CVE-2021-32601: Undefined Security WeaknessN/AN/AN/AApr 25, 2025
CVE-2021-47664: Observable Discrepancy5.3 MediumN/A0%Apr 24, 2025
CVE-2021-47663: Insufficient Session Expiration8.1 HighN/A0%Apr 24, 2025
CVE-2021-47662: Missing Authorization7.5 HighN/A0%Apr 24, 2025
CVE-2021-4455: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A2%Apr 19, 2025
CVE-2021-47671: Missing Release of Memory after Effective Lifetime3.3 LowN/A0%Apr 17, 2025
CVE-2021-47670: Use After Free8.8 HighN/A0%Apr 17, 2025
CVE-2021-47669: Use After Free7.8 HighN/A0%Apr 17, 2025
CVE-2021-47668: Use After Free8.8 HighN/A0%Apr 17, 2025
CVE-2021-27289: Authentication Bypass by Capture-replay9.1 CriticalN/A1%Apr 15, 2025
CVE-2021-47667: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A1%Apr 5, 2025
CVE-2021-24008: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Mar 28, 2025
CVE-2021-4454: Undefined Security Weakness7.5 HighN/A1%Mar 27, 2025
CVE-2021-26105: Improperly Implemented Security Check for Standard6.8 MediumN/A0%Mar 24, 2025
CVE-2021-26091: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)7.5 HighN/A0%Mar 24, 2025
CVE-2021-25635: Improper Certificate Validation5.5 Medium5.2 Medium0%Mar 21, 2025
CVE-2021-44789: Undefined Security WeaknessN/AN/AN/AMar 17, 2025
CVE-2021-44788: Undefined Security WeaknessN/AN/AN/AMar 17, 2025
CVE-2021-44787: Undefined Security WeaknessN/AN/AN/AMar 17, 2025
CVE-2021-44786: Undefined Security WeaknessN/AN/AN/AMar 17, 2025
CVE-2021-44785: Undefined Security WeaknessN/AN/AN/AMar 17, 2025
401-425 of 23470