The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2018-1271: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A34%Apr 6, 2018
CVE-2018-1272: Undefined Security Weakness7.5 HighN/A3%Apr 6, 2018
CVE-2018-1270: Improper Control of Generation of CodeN/AN/A77%Apr 6, 2018
CVE-2018-1199: Improper Input Validation5.3 MediumN/A3%Mar 16, 2018
CVE-2016-5007: Undefined Security Weakness7.5 HighN/A3%May 25, 2017
CVE-2015-5211: Files or Directories Accessible to External Parties9.6 CriticalN/A3%May 25, 2017
CVE-2014-0225: Improper Restriction of XML External Entity Reference8.8 HighN/A2%May 25, 2017
CVE-2016-9878: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A6%Dec 29, 2016
CVE-2016-0635: Undefined Security Weakness8.8 HighN/A5%Jul 21, 2016
CVE-2015-3192: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A3%Jul 12, 2016
CVE-2015-0201: Undefined Security Weakness5.3 MediumN/A2%Mar 10, 2015
CVE-2014-3578: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A6%Feb 19, 2015
CVE-2014-3625: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A10%Nov 20, 2014
CVE-2014-0054: Cross-Site Request Forgery (CSRF)6.3 MediumN/A91%Apr 17, 2014
CVE-2014-1904: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A7%Mar 20, 2014
CVE-2013-6429: Cross-Site Request Forgery (CSRF)6.3 MediumN/A91%Jan 26, 2014
CVE-2013-4152: Undefined Security Weakness7.3 HighN/A26%Jan 23, 2014
CVE-2013-7315: Undefined Security Weakness8.8 HighN/A5%Jan 23, 2014
CVE-2011-2730: Undefined Security Weakness7.3 HighN/A12%Dec 5, 2012
CVE-2011-2894: Deserialization of Untrusted Data7.3 HighN/A9%Oct 4, 2011
CVE-2010-1622: Improper Control of Generation of CodeN/AN/A52%Jun 21, 2010
CVE-2009-1190: Undefined Security WeaknessN/AN/A3%Apr 27, 2009
76-97 of 97
‹