The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-36618: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.3 MediumN/A1%Dec 19, 2022
CVE-2020-36617: Use of Uninitialized Resource4.6 MediumN/A0%Dec 18, 2022
CVE-2020-24855: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Dec 15, 2022
CVE-2020-21219: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 15, 2022
CVE-2020-20589: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 15, 2022
CVE-2020-36607: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 15, 2022
CVE-2020-20588: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Dec 15, 2022
CVE-2020-4497: Cleartext Transmission of Sensitive Information6.8 MediumN/A0%Dec 14, 2022
CVE-2020-9420: Cleartext Transmission of Sensitive Information6.5 MediumN/A0%Dec 14, 2022
CVE-2020-9419: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 14, 2022
CVE-2020-36610: Incorrect Authorization4.3 MediumN/A0%Dec 8, 2022
CVE-2020-36609: Improper Neutralization2.4 LowN/A0%Dec 8, 2022
CVE-2020-36565: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Dec 7, 2022
CVE-2020-35588: Undefined Security Weakness9.8 CriticalN/AN/ADec 7, 2022
CVE-2020-6627: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A14%Dec 6, 2022
CVE-2020-26361: Undefined Security WeaknessN/AN/AN/ADec 2, 2022
CVE-2020-26315: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
CVE-2020-26316: Undefined Security WeaknessN/AN/AN/ADec 2, 2022
CVE-2020-26317: Undefined Security WeaknessN/AN/AN/ADec 2, 2022
CVE-2020-26318: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
CVE-2020-26324: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
CVE-2020-26325: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
CVE-2020-26341: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
CVE-2020-26355: Undefined Security WeaknessN/AN/AN/ADec 2, 2022
CVE-2020-26357: Undefined Security Weakness9.8 CriticalN/AN/ADec 2, 2022
1351-1375 of 21077