The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-36717: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jun 7, 2023
CVE-2020-36718: Deserialization of Untrusted Data9.8 CriticalN/A2%Jun 7, 2023
CVE-2020-36719: Missing Authorization9.8 CriticalN/A74%Jun 7, 2023
CVE-2020-36720: Missing Authorization7.1 HighN/A0%Jun 7, 2023
CVE-2020-36716: Missing Authorization7.3 HighN/A0%Jun 7, 2023
CVE-2020-36715: Missing Authorization7.4 HighN/A0%Jun 7, 2023
CVE-2020-36713: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A1%Jun 7, 2023
CVE-2020-36712: Missing Authorization8.6 HighN/A0%Jun 7, 2023
CVE-2020-36710: Incorrect Authorization5.3 MediumN/A1%Jun 7, 2023
CVE-2020-36711: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 7, 2023
CVE-2020-36709: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jun 7, 2023
CVE-2020-36708: Improper Control of Generation of Code9.8 CriticalN/A89%Jun 7, 2023
CVE-2020-36707: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jun 7, 2023
CVE-2020-36704: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 7, 2023
CVE-2020-36701: Unrestricted Upload of File with Dangerous Type8.8 HighN/A2%Jun 7, 2023
CVE-2020-36702: Missing Authorization5.5 MediumN/A0%Jun 7, 2023
CVE-2020-36703: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 7, 2023
CVE-2020-36700: Improper Access Control8.8 HighN/A0%Jun 7, 2023
CVE-2020-36699: Improper Access Control4.3 MediumN/A0%Jun 7, 2023
CVE-2020-36697: Missing Authorization7.3 HighN/A0%Jun 7, 2023
CVE-2020-36696: Improper Authorization7.5 HighN/A0%Jun 7, 2023
CVE-2020-19028: Unrestricted Upload of File with Dangerous Type7.5 HighN/A0%Jun 5, 2023
CVE-2020-29547: Improper Neutralization of Special Elements used in a Command5.9 MediumN/A0%May 29, 2023
CVE-2020-20012: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A0%May 23, 2023
CVE-2020-36694: Use After Free6.7 MediumN/A0%May 21, 2023
926-950 of 21077