The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-47690: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2021-47689: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36869: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.7 High1%Oct 30, 2025
CVE-2020-36868: External Control of File Name or Path7.8 High8.5 High0%Oct 30, 2025
CVE-2020-36867: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High2%Oct 30, 2025
CVE-2020-36866: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36865: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36864: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36863: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Oct 30, 2025
CVE-2020-36862: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Oct 30, 2025
CVE-2020-36861: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36860: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36859: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High1%Oct 30, 2025
CVE-2020-36858: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2020-36857: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Oct 30, 2025
CVE-2020-36856: Improper Neutralization of Special Elements used in an OS Command8.8 High9.4 Critical0%Oct 30, 2025
CVE-2018-25123: Execution with Unnecessary Privileges7.8 High8.5 High0%Oct 30, 2025
CVE-2018-25122: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Oct 30, 2025
CVE-2018-25121: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2018-25119: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium1%Oct 30, 2025
CVE-2017-20209: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium1%Oct 30, 2025
CVE-2016-15053: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2016-15052: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2016-15051: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium1%Oct 30, 2025
CVE-2016-15050: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High1%Oct 30, 2025
83226-83250 of 813908
‹›