The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2015-10133: Improper Control of Filename for Include/Require Statement in PHP Program7.2 HighN/A2%Jul 19, 2025
CVE-2015-20112: Missing Cryptographic Step3.4 LowN/A0%Jun 29, 2025
CVE-2015-0849: Insecure Temporary File3.9 LowN/A0%Jun 26, 2025
CVE-2015-0843: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Jun 26, 2025
CVE-2015-0842: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jun 26, 2025
CVE-2015-4582: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Apr 28, 2025
CVE-2015-2079: Improper Neutralization of Directives in Statically Saved Code9.9 CriticalN/A2%Apr 28, 2025
CVE-2015-20111: Buffer Copy without Checking Size of Input9.8 CriticalN/A1%Nov 18, 2024
CVE-2015-10132: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Apr 21, 2024
CVE-2015-10131: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Mar 31, 2024
CVE-2015-10123: Buffer Copy without Checking Size of Input8.8 HighN/A1%Mar 13, 2024
CVE-2015-10130: Cross-Site Request Forgery (CSRF)5.3 MediumN/A0%Mar 13, 2024
CVE-2015-10129: Incorrect Comparison3.7 LowN/A1%Feb 4, 2024
CVE-2015-10128: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Jan 2, 2024
CVE-2015-10127: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Dec 26, 2023
CVE-2015-2179: Undefined Security Weakness5.5 MediumN/A0%Dec 12, 2023
CVE-2015-8314: Cleartext Storage of Sensitive Information7.5 HighN/A1%Dec 12, 2023
CVE-2015-2968: Improper Enforcement of Message Integrity During Transmission in a Communication Channel5.9 MediumN/A0%Oct 31, 2023
CVE-2015-0897: Improper Enforcement of Message Integrity During Transmission in a Communication Channel5.9 MediumN/A0%Oct 31, 2023
CVE-2015-20110: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A1%Oct 31, 2023
CVE-2015-10126: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A1%Oct 6, 2023
CVE-2015-10125: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 5, 2023
CVE-2015-10124: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A1%Oct 2, 2023
CVE-2015-6964: Incorrect Comparison5.3 MediumN/A1%Sep 25, 2023
CVE-2015-8371: Insufficient Verification of Data Authenticity8.8 HighN/A1%Sep 21, 2023
26-50 of 8780
‹›