The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-36836: Cross-Site Request Forgery (CSRF)8.0 HighN/A43%Oct 16, 2024
CVE-2020-36835: Exposure of Sensitive Information to an Unauthorized Actor4.9 MediumN/A0%Oct 16, 2024
CVE-2020-36834: Missing Authorization6.3 MediumN/A0%Oct 16, 2024
CVE-2020-36833: Missing Authorization6.3 MediumN/A0%Oct 16, 2024
CVE-2020-36832: Improper Authentication9.8 CriticalN/A0%Oct 16, 2024
CVE-2020-36831: Improper Access Control5.0 MediumN/A0%Oct 16, 2024
CVE-2020-24061: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Sep 12, 2024
CVE-2020-36830: Inefficient Regular Expression Complexity4.3 Medium5.3 Medium0%Sep 2, 2024
CVE-2020-11847: Improper Neutralization of Special Elements used in an OS Command8.2 HighN/A0%Aug 21, 2024
CVE-2020-11846: Improper Privilege Management8.7 HighN/A0%Aug 21, 2024
CVE-2020-11850: Improper Input Validation7.3 HighN/A0%Aug 21, 2024
CVE-2020-11640: Improper Privilege Management8.8 HighN/A0%Jul 23, 2024
CVE-2020-11639: Improper Enforcement of Message Integrity During Transmission in a Communication Channel7.8 HighN/A0%Jul 23, 2024
CVE-2020-24102: Improper Limitation of a Pathname to a Restricted Directory7.6 HighN/A4%Jul 22, 2024
CVE-2020-36765: Undefined Security Weakness6.5 MediumN/A0%Jul 16, 2024
CVE-2020-25836: Exposure of Sensitive Information to an Unauthorized Actor6.3 MediumN/A0%Jul 16, 2024
CVE-2020-27352: Improper Privilege Management9.3 CriticalN/A0%Jun 21, 2024
CVE-2020-35162: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35161: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35160: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35159: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35158: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35157: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35156: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
CVE-2020-35155: Undefined Security WeaknessN/AN/AN/AJun 21, 2024
576-600 of 21077