The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2021-43399: Out-of-bounds Write7.5 HighN/A1%Dec 8, 2021
CVE-2021-44513: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Dec 7, 2021
CVE-2021-44512: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Dec 7, 2021
CVE-2021-40334: Missing Handler8.6 HighN/A1%Dec 2, 2021
CVE-2021-43284: Use of Hard-coded Credentials7.8 HighN/A0%Nov 30, 2021
CVE-2021-21561: Insertion of Sensitive Information into Log File7.8 HighN/A0%Nov 23, 2021
CVE-2021-42114: Improper Input Validation9.0 CriticalN/A3%Nov 16, 2021
CVE-2021-3723: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A2%Nov 12, 2021
CVE-2021-40520: Weak Password Requirements9.8 CriticalN/A1%Nov 10, 2021
CVE-2021-37471: Undefined Security Weakness7.5 HighN/A1%Nov 7, 2021
CVE-2021-40119: Use of Hard-coded Cryptographic Key9.8 CriticalN/A2%Nov 4, 2021
CVE-2021-34781: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 HighN/A1%Oct 27, 2021
CVE-2021-38485: Improper Input Validation8.0 HighN/A1%Oct 22, 2021
CVE-2021-42542: Improper Limitation of a Pathname to a Restricted Directory8.0 HighN/A1%Oct 22, 2021
CVE-2021-42540: Write-what-where Condition8.0 HighN/A1%Oct 22, 2021
CVE-2021-42536: Exposure of Sensitive Information to an Unauthorized Actor8.0 HighN/A1%Oct 22, 2021
CVE-2021-42539: Missing Authentication for Critical Function8.0 HighN/A1%Oct 22, 2021
CVE-2021-42538: Improper Neutralization of Special Elements used in an OS Command8.0 HighN/A1%Oct 22, 2021
CVE-2021-31352: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A1%Oct 19, 2021
CVE-2021-41117: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)8.7 HighN/A3%Oct 11, 2021
CVE-2021-36298: Use of a Broken or Risky Cryptographic Algorithm8.1 HighN/A1%Oct 1, 2021
CVE-2021-41617: Undefined Security Weakness7.0 HighN/A3%Sep 26, 2021
CVE-2021-1419: Improper Access Control7.8 HighN/A0%Sep 23, 2021
CVE-2020-26301: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A4%Sep 20, 2021
CVE-2021-41393: Undefined Security Weakness9.8 CriticalN/A1%Sep 18, 2021
1226-1250 of 2138
‹

Refine your search or filters to see more results.