The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-36256: Undefined Security WeaknessN/AN/AN/AAug 19, 2022
CVE-2020-27792: Improper Restriction of Operations within the Bounds of a Memory Buffer7.1 HighN/A0%Aug 19, 2022
CVE-2020-27794: Double Free9.1 CriticalN/A0%Aug 19, 2022
CVE-2020-27793: Off-by-one Error7.5 HighN/A0%Aug 19, 2022
CVE-2020-27795: Use of Uninitialized Resource7.5 HighN/A1%Aug 19, 2022
CVE-2020-23466: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2022
CVE-2020-36599: Improper Encoding or Escaping of Output9.8 CriticalN/A1%Aug 18, 2022
CVE-2020-27791: Undefined Security Weakness9.8 CriticalN/AN/AAug 18, 2022
CVE-2020-27789: Undefined Security Weakness9.8 CriticalN/AN/AAug 18, 2022
CVE-2020-27788: Out-of-bounds Read5.5 MediumN/A0%Aug 18, 2022
CVE-2020-27790: Divide By Zero5.5 MediumN/A0%Aug 18, 2022
CVE-2020-27787: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A0%Aug 18, 2022
CVE-2020-14394: Loop with Unreachable Exit Condition3.2 LowN/A0%Aug 17, 2022
CVE-2020-14379: Improper Restriction of XML External Entity Reference5.6 MediumN/A0%Aug 16, 2022
CVE-2020-14320: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Aug 16, 2022
CVE-2020-10728: Incorrect Privilege Assignment7.8 HighN/A0%Aug 16, 2022
CVE-2020-1756: Improper Input Validation7.2 HighN/A1%Aug 16, 2022
CVE-2020-1755: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Aug 16, 2022
CVE-2020-10710: Insufficiently Protected Credentials4.4 MediumN/A0%Aug 16, 2022
CVE-2020-14321: Incorrect Authorization8.8 HighN/A39%Aug 16, 2022
CVE-2020-14322: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 16, 2022
CVE-2020-21642: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A7%Aug 15, 2022
CVE-2020-23622: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Aug 15, 2022
CVE-2020-21641: Improper Restriction of XML External Entity Reference7.5 HighN/A5%Aug 15, 2022
CVE-2020-21365: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Aug 15, 2022
1601-1625 of 21077