The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-4630: Cross-Site Request Forgery (CSRF)8.0 HighN/A1%Oct 18, 2018
CVE-2015-4633: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A4%Oct 18, 2018
CVE-2015-9273: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2018
CVE-2015-9272: Improper Control of Generation of Code9.8 CriticalN/A11%Oct 5, 2018
CVE-2015-9271: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A11%Oct 4, 2018
CVE-2015-9270: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 1, 2018
CVE-2015-9269: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Oct 1, 2018
CVE-2015-9267: Improper Privilege Management5.5 MediumN/A0%Oct 1, 2018
CVE-2015-9268: Improper Input Validation7.8 HighN/A1%Oct 1, 2018
CVE-2015-8298: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A2%Sep 24, 2018
CVE-2015-9266: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A80%Sep 5, 2018
CVE-2015-9265: Undefined Security WeaknessN/AN/AN/AAug 30, 2018
CVE-2015-9264: Improper Input Validation9.8 CriticalN/A1%Aug 27, 2018
CVE-2015-9263: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A64%Aug 27, 2018
CVE-2015-5243: Improper Control of Generation of Code9.8 CriticalN/A12%Aug 20, 2018
CVE-2015-5160: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Aug 20, 2018
CVE-2015-9262: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A3%Aug 1, 2018
CVE-2015-9261: NULL Pointer Dereference5.5 MediumN/A1%Jul 26, 2018
CVE-2015-0163: Undefined Security Weakness9.8 CriticalN/AN/AJul 16, 2018
CVE-2015-1991: Undefined Security Weakness9.8 CriticalN/AN/AJul 16, 2018
CVE-2015-0154: Undefined Security WeaknessN/AN/AN/AJul 16, 2018
CVE-2015-1990: Undefined Security Weakness9.8 CriticalN/AN/AJul 16, 2018
CVE-2015-0155: Undefined Security Weakness9.8 CriticalN/AN/AJul 16, 2018
CVE-2015-4968: Undefined Security Weakness9.8 CriticalN/AN/AJul 16, 2018
CVE-2015-0230: Undefined Security WeaknessN/AN/AN/AJul 9, 2018
776-800 of 8780