The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-2189: Undefined Security Weakness5.3 MediumN/A0%Mar 8, 2015
CVE-2014-9665: Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 HighN/A4%Feb 8, 2015
CVE-2015-0973: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A2%Jan 18, 2015
CVE-2014-9601: Improper Input Validation6.2 MediumN/A1%Jan 16, 2015
CVE-2014-9495: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A3%Jan 10, 2015
CVE-2014-9317: Improper Restriction of Operations within the Bounds of a Memory Buffer6.3 MediumN/A1%Dec 9, 2014
CVE-2014-8545: Undefined Security Weakness8.8 HighN/A1%Nov 5, 2014
CVE-2014-6243: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 10, 2014
CVE-2014-2223: Improper Control of Generation of CodeN/AN/A15%Sep 11, 2014
CVE-2014-5464: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A28%Sep 8, 2014
CVE-2014-5120: Improper Input Validation7.5 HighN/A8%Aug 23, 2014
CVE-2014-4329: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Jun 19, 2014
CVE-2014-3441: Improper Restriction of Operations within the Bounds of a Memory BufferN/AN/A8%May 14, 2014
CVE-2013-7353: Heap-based Buffer Overflow6.5 MediumN/A0%May 6, 2014
CVE-2013-7354: Heap-based Buffer Overflow6.5 MediumN/A1%May 6, 2014
CVE-2014-0333: Undefined Security Weakness6.5 MediumN/A1%Feb 27, 2014
CVE-2013-6954: NULL Pointer Dereference6.5 MediumN/A4%Jan 12, 2014
CVE-2013-7014: Undefined Security Weakness9.8 CriticalN/A1%Dec 9, 2013
CVE-2013-0875: Undefined Security Weakness9.8 CriticalN/A1%Nov 23, 2013
CVE-2013-3468: Improper Input Validation7.5 HighN/A1%Aug 29, 2013
CVE-2013-1331: Buffer Copy without Checking Size of Input7.8 HighN/A89%Jun 12, 2013
CVE-2013-2977: Undefined Security WeaknessN/AN/A16%May 10, 2013
CVE-2013-0792: Exposure of Sensitive Information to an Unauthorized Actor8.1 HighN/A1%Apr 3, 2013
CVE-2012-5470: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A15%Oct 26, 2012
CVE-2012-4432: Undefined Security Weakness8.8 HighN/A4%Oct 1, 2012
451-475 of 592