The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-7746: Improper Authentication9.8 CriticalN/A1%Sep 1, 2017
CVE-2015-7711: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Aug 31, 2017
CVE-2015-7700: Double Free9.8 CriticalN/A1%Aug 31, 2017
CVE-2015-5958: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A43%Aug 31, 2017
CVE-2015-5695: Uncontrolled Resource Consumption6.5 MediumN/A2%Aug 31, 2017
CVE-2015-8334: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Aug 29, 2017
CVE-2015-8299: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A12%Aug 29, 2017
CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A4%Aug 29, 2017
CVE-2015-7255: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 29, 2017
CVE-2015-6942: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 29, 2017
CVE-2015-6588: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 29, 2017
CVE-2015-5209: Improper Input Validation7.5 HighN/A4%Aug 29, 2017
CVE-2015-4649: Improper Access Control7.2 HighN/A1%Aug 29, 2017
CVE-2015-3657: Improper Access Control7.2 HighN/A1%Aug 29, 2017
CVE-2015-3656: Improper Authorization7.2 HighN/A1%Aug 29, 2017
CVE-2015-3655: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Aug 29, 2017
CVE-2015-3654: Improper Access Control7.2 HighN/A1%Aug 29, 2017
CVE-2015-3653: Improper Access Control7.2 HighN/A1%Aug 29, 2017
CVE-2015-0234: Improper Input Validation7.5 HighN/A1%Aug 29, 2017
CVE-2015-8332: Improper Authentication8.8 HighN/A0%Aug 28, 2017
CVE-2015-8300: Undefined Security Weakness7.8 HighN/A0%Aug 28, 2017
CVE-2015-1600: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 28, 2017
CVE-2015-1554: Improper Input Validation7.5 HighN/A1%Aug 28, 2017
CVE-2015-0233: Undefined Security Weakness4.2 MediumN/A0%Aug 28, 2017
CVE-2015-3976: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 28, 2017
1301-1325 of 8780