The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-34750: Cleartext Storage of Sensitive Information in GUI4.3 MediumN/A0%Nov 15, 2024
CVE-2021-1494: Protection Mechanism Failure5.8 MediumN/A0%Nov 15, 2024
CVE-2021-1491: Improper Link Resolution Before File Access6.5 MediumN/A0%Nov 15, 2024
CVE-2021-1484: Improper Neutralization of Argument Delimiters in a Command6.5 MediumN/A0%Nov 15, 2024
CVE-2021-1483: Improper Restriction of XML External Entity Reference6.4 MediumN/A0%Nov 15, 2024
CVE-2021-1482: Improper Input Validation6.4 MediumN/A0%Nov 15, 2024
CVE-2021-1481: Improper Neutralization of Special Elements in Data Query Logic4.3 MediumN/A0%Nov 15, 2024
CVE-2021-1470: Improper Input Validation4.9 MediumN/A0%Nov 15, 2024
CVE-2021-1466: Improper Input Validation5.4 MediumN/A0%Nov 15, 2024
CVE-2021-1464: Improper Input Validation5.0 MediumN/A0%Nov 15, 2024
CVE-2021-3991: Improper Authorization4.3 MediumN/A0%Nov 15, 2024
CVE-2021-3988: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 15, 2024
CVE-2021-3987: Improper Access Control4.3 MediumN/A0%Nov 15, 2024
CVE-2021-3986: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Nov 15, 2024
CVE-2021-3902: Improper Restriction of XML External Entity Reference9.8 CriticalN/A3%Nov 15, 2024
CVE-2021-3841: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 15, 2024
CVE-2021-3838: Deserialization of Untrusted Data9.8 CriticalN/A3%Nov 15, 2024
CVE-2021-3742: Server-Side Request Forgery (SSRF)8.8 HighN/A0%Nov 15, 2024
CVE-2021-3741: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 15, 2024
CVE-2021-3740: Session Fixation6.8 MediumN/A0%Nov 15, 2024
CVE-2021-27704: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Nov 12, 2024
CVE-2021-27703: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 12, 2024
CVE-2021-27702: Improper Neutralization of Special Elements used in a Command7.3 HighN/A0%Nov 12, 2024
CVE-2021-27701: Cross-Site Request Forgery (CSRF)4.7 MediumN/A0%Nov 12, 2024
CVE-2021-27700: Authorization Bypass Through User-Controlled Key7.6 HighN/A0%Nov 12, 2024
576-600 of 23470
‹›