The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-36634: Improper Neutralization of Input During Web Page Generation2.6 LowN/A0%Dec 27, 2022
CVE-2020-36633: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 27, 2022
CVE-2020-11101: Improper Authentication9.8 CriticalN/A0%Dec 26, 2022
CVE-2020-24600: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 26, 2022
CVE-2020-12067: Weak Password Recovery Mechanism for Forgotten Password7.5 HighN/A0%Dec 26, 2022
CVE-2020-12069: Use of Password Hash With Insufficient Computational Effort7.8 HighN/A0%Dec 26, 2022
CVE-2020-28191: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 26, 2022
CVE-2020-10650: Deserialization of Untrusted Data8.1 HighN/A10%Dec 26, 2022
CVE-2020-36632: Improperly Controlled Modification of Object Prototype Attributes6.3 MediumN/A1%Dec 25, 2022
CVE-2020-36631: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Dec 25, 2022
CVE-2020-36630: Improper Neutralization of Special Elements used in an SQL Command5.5 MediumN/A0%Dec 25, 2022
CVE-2020-36629: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Dec 25, 2022
CVE-2020-36628: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A1%Dec 25, 2022
CVE-2020-36627: URL Redirection to Untrusted Site5.5 MediumN/A0%Dec 25, 2022
CVE-2020-36626: Improper Neutralization5.5 MediumN/A0%Dec 24, 2022
CVE-2020-26302: Uncontrolled Resource Consumption7.5 HighN/A0%Dec 23, 2022
CVE-2020-15679: Session Fixation7.6 HighN/A1%Dec 22, 2022
CVE-2020-15685: Improper Neutralization of Special Elements used in a Command8.8 HighN/A1%Dec 22, 2022
CVE-2020-36624: Use of Web Link to Untrusted Target with window.opener Access6.3 MediumN/A0%Dec 22, 2022
CVE-2020-36625: Incorrect Authorization4.3 MediumN/A0%Dec 22, 2022
CVE-2020-36623: Incorrect Authorization4.3 MediumN/A0%Dec 21, 2022
CVE-2020-36620: Uncontrolled Resource Consumption3.5 LowN/A0%Dec 21, 2022
CVE-2020-36621: Improper Neutralization3.5 LowN/A0%Dec 21, 2022
CVE-2020-36622: Incorrect Authorization4.3 MediumN/A0%Dec 21, 2022
CVE-2020-36619: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A1%Dec 19, 2022
1326-1350 of 21077
‹›