The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2015-6926: Improper Authentication7.5 HighN/A0%Jan 19, 2018
CVE-2015-9251: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A27%Jan 18, 2018
CVE-2015-7485: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 16, 2018
CVE-2015-7484: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jan 16, 2018
CVE-2015-7474: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 16, 2018
CVE-2015-7486: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 16, 2018
CVE-2015-9246: Improper Input Validation9.8 CriticalN/A2%Jan 12, 2018
CVE-2015-9250: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jan 12, 2018
CVE-2015-9247: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2018
CVE-2015-9249: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jan 12, 2018
CVE-2015-9248: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2018
CVE-2015-2298: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jan 12, 2018
CVE-2015-2981: Improper Certificate Validation5.9 MediumN/A0%Jan 12, 2018
CVE-2015-3888: Improper Access Control7.5 HighN/A0%Jan 12, 2018
CVE-2015-1208: Integer Underflow (Wrap or Wraparound)5.5 MediumN/A0%Jan 9, 2018
CVE-2015-1290: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A2%Jan 9, 2018
CVE-2015-2319: Improper Certificate Validation7.5 HighN/A1%Jan 8, 2018
CVE-2015-2320: Improper Certificate Validation9.8 CriticalN/A5%Jan 8, 2018
CVE-2015-2318: Improper Certificate Validation8.1 HighN/A1%Jan 8, 2018
CVE-2015-8008: Improper Access Control7.5 HighN/A1%Dec 29, 2017
CVE-2015-3302: Improper Access Control7.5 HighN/A21%Dec 29, 2017
CVE-2015-7889: Undefined Security Weakness5.5 MediumN/A3%Dec 28, 2017
CVE-2015-3637: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Dec 28, 2017
CVE-2015-7669: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Dec 27, 2017
CVE-2015-7668: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 27, 2017
1026-1050 of 8780
‹›