The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2018-20936: Incorrect Permission Assignment for Critical Resource3.3 LowN/A0%Aug 1, 2019
CVE-2019-14404: Undefined Security Weakness5.5 MediumN/A0%Jul 30, 2019
CVE-2019-14388: Undefined Security Weakness7.5 HighN/A1%Jul 30, 2019
CVE-2019-13917: Undefined Security Weakness9.8 CriticalN/A9%Jul 25, 2019
CVE-2019-13391: Out-of-bounds Read8.8 HighN/A3%Jul 7, 2019
CVE-2019-13308: Out-of-bounds Write8.8 HighN/A3%Jul 5, 2019
CVE-2019-13302: Out-of-bounds Read8.8 HighN/A2%Jul 5, 2019
CVE-2019-10149: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A100%Jun 5, 2019
CVE-2018-6789: Buffer Copy without Checking Size of Input9.8 CriticalN/A82%Feb 8, 2018
CVE-2017-16944: Loop with Unreachable Exit Condition7.5 HighN/A63%Nov 25, 2017
CVE-2017-16943: Use After Free9.8 CriticalN/A47%Nov 25, 2017
CVE-2017-1000369: Improper Resource Shutdown or Release4.0 MediumN/A1%Jun 19, 2017
CVE-2016-9963: Undefined Security Weakness5.9 MediumN/A3%Feb 1, 2017
CVE-2016-1531: Undefined Security Weakness7.0 HighN/A6%Apr 7, 2016
CVE-2014-8098: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A5%Dec 10, 2014
CVE-2014-8093: Undefined Security Weakness8.8 HighN/A4%Dec 10, 2014
CVE-2014-2957: Improper Input Validation9.8 CriticalN/A5%Sep 4, 2014
CVE-2014-2972: Undefined Security Weakness5.3 MediumN/A0%Sep 4, 2014
CVE-2014-1502: Origin Validation Error7.1 HighN/A1%Mar 19, 2014
CVE-2012-5833: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A5%Nov 21, 2012
CVE-2012-5838: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A6%Nov 21, 2012
CVE-2012-5671: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A8%Oct 31, 2012
CVE-2012-2140: Improper Input Validation7.3 HighN/A4%Jul 18, 2012
CVE-2012-0478: Undefined Security Weakness8.8 HighN/A3%Apr 25, 2012
CVE-2011-1764: Use of Externally-Controlled Format String9.8 CriticalN/A4%Oct 5, 2011
76-100 of 122
‹›