The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2015-9290: Out-of-bounds Read9.8 CriticalN/A1%Jul 30, 2019
CVE-2015-5601: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Jul 29, 2019
CVE-2015-6253: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 29, 2019
CVE-2015-6960: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 29, 2019
CVE-2015-9288: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Jul 29, 2019
CVE-2015-9289: Out-of-bounds Read5.5 MediumN/A0%Jul 27, 2019
CVE-2015-7882: Improper Authentication8.1 HighN/A1%Jul 19, 2019
CVE-2015-3907: Improper Restriction of XML External Entity Reference9.8 CriticalN/A0%Jul 3, 2019
CVE-2015-2230: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 30, 2019
CVE-2015-7609: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 30, 2019
CVE-2015-9287: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%May 13, 2019
CVE-2015-1006: Stack-based Buffer Overflow9.8 CriticalN/A1%May 10, 2019
CVE-2015-9286: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 30, 2019
CVE-2015-9285: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 29, 2019
CVE-2015-9284: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Apr 26, 2019
CVE-2015-1343: Insertion of Sensitive Information into Log File2.0 LowN/A0%Apr 22, 2019
CVE-2015-1341: Undefined Security Weakness7.4 HighN/A0%Apr 22, 2019
CVE-2015-1340: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Apr 22, 2019
CVE-2015-1327: Undefined Security Weakness3.9 LowN/A0%Apr 22, 2019
CVE-2015-1326: Improper Input Validation5.7 MediumN/A0%Apr 22, 2019
CVE-2015-1320: Undefined Security Weakness5.5 MediumN/A0%Apr 22, 2019
CVE-2015-1316: Undefined Security Weakness6.4 MediumN/A0%Apr 22, 2019
CVE-2015-5384: Session Fixation8.8 HighN/A0%Apr 3, 2019
CVE-2015-5462: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.1 MediumN/A0%Apr 3, 2019
CVE-2015-5463: Improper Authorization9.8 CriticalN/A1%Apr 3, 2019
701-725 of 8780
‹›