The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2021-29892: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Dec 3, 2024
CVE-2021-23282: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A1%Nov 25, 2024
CVE-2021-38135: Server-Side Request Forgery (SSRF)8.6 HighN/A0%Nov 22, 2024
CVE-2021-38134: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 22, 2024
CVE-2021-38119: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 22, 2024
CVE-2021-38118: Execution with Unnecessary Privileges5.5 MediumN/A0%Nov 22, 2024
CVE-2021-38117: Improper Control of Generation of Code8.8 HighN/A1%Nov 22, 2024
CVE-2021-38116: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Nov 22, 2024
CVE-2021-30299: Improper Input Validation6.7 MediumN/A0%Nov 22, 2024
CVE-2021-1465: Improper Input Validation4.3 MediumN/A1%Nov 18, 2024
CVE-2021-1462: Improper Input Validation6.7 MediumN/A0%Nov 18, 2024
CVE-2021-1461: Improper Verification of Cryptographic Signature4.9 MediumN/A0%Nov 18, 2024
CVE-2021-1444: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 18, 2024
CVE-2021-1440: Reachable Assertion6.8 MediumN/A1%Nov 18, 2024
CVE-2021-1425: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Nov 18, 2024
CVE-2021-1424: Improper Restriction of Operations within the Bounds of a Memory Buffer5.3 MediumN/A1%Nov 18, 2024
CVE-2021-1410: Improper Access Control4.3 MediumN/A0%Nov 18, 2024
CVE-2021-1379: Buffer Copy without Checking Size of Input6.5 MediumN/A0%Nov 18, 2024
CVE-2021-1285: Allocation of Resources Without Limits or Throttling7.4 HighN/A2%Nov 18, 2024
CVE-2021-1234: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Nov 18, 2024
CVE-2021-1232: Insufficiently Protected Credentials6.5 MediumN/A0%Nov 18, 2024
CVE-2021-1132: Path Traversal: '.../...//'5.3 MediumN/A0%Nov 18, 2024
CVE-2021-34753: Improper Access Control5.3 MediumN/A0%Nov 15, 2024
CVE-2021-34752: Improper Input Validation6.7 MediumN/A0%Nov 15, 2024
CVE-2021-34751: Cleartext Storage of Sensitive Information in GUI4.3 MediumN/A0%Nov 15, 2024
551-575 of 23470