The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-12819: Heap-based Buffer Overflow5.4 MediumN/A1%Dec 19, 2024
CVE-2020-12487: Improper Input Validation7.0 HighN/A0%Dec 17, 2024
CVE-2020-12484: Missing Authentication for Critical Function6.4 MediumN/A0%Dec 17, 2024
CVE-2020-28398: Cross-Site Request Forgery (CSRF)8.8 High8.6 High0%Dec 10, 2024
CVE-2020-12492: Missing Authentication for Critical FunctionN/A1.0 Low0%Nov 25, 2024
CVE-2020-12491: Missing Authentication for Critical FunctionN/A4.8 Medium0%Nov 25, 2024
CVE-2020-11311: Undefined Security WeaknessN/AN/AN/ANov 25, 2024
CVE-2020-26067: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A17%Nov 18, 2024
CVE-2020-26066: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Nov 18, 2024
CVE-2020-3548: Inefficient Algorithmic Complexity5.3 MediumN/A0%Nov 18, 2024
CVE-2020-3539: Improper Authorization6.3 MediumN/A0%Nov 18, 2024
CVE-2020-3538: Improper Input Validation4.6 MediumN/A0%Nov 18, 2024
CVE-2020-3532: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 18, 2024
CVE-2020-3525: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 18, 2024
CVE-2020-3431: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 18, 2024
CVE-2020-3420: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 18, 2024
CVE-2020-27124: Use of Uninitialized Variable8.6 HighN/A2%Nov 18, 2024
CVE-2020-26074: Execution with Unnecessary Privileges7.8 HighN/A0%Nov 18, 2024
CVE-2020-26073: Path Traversal: '.../...//'7.5 HighN/A91%Nov 18, 2024
CVE-2020-26071: Improper Limitation of a Pathname to a Restricted Directory8.4 HighN/A0%Nov 18, 2024
CVE-2020-26063: Improper Privilege Management5.4 MediumN/A0%Nov 18, 2024
CVE-2020-26062: Observable Discrepancy5.3 MediumN/A0%Nov 18, 2024
CVE-2020-25720: Incorrect Privilege Assignment7.5 HighN/A0%Nov 17, 2024
CVE-2020-10370: Undefined Security Weakness8.8 HighN/A0%Nov 11, 2024
CVE-2020-10369: Observable Discrepancy5.5 MediumN/A0%Nov 10, 2024
526-550 of 21077
‹›