The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-28422: Improper Neutralization of Special Elements used in a Command6.4 MediumN/A0%Jul 25, 2022
CVE-2020-28438: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A1%Jul 25, 2022
CVE-2020-28459: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Jul 25, 2022
CVE-2020-28446: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A3%Jul 25, 2022
CVE-2020-28443: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A1%Jul 25, 2022
CVE-2020-14114: Undefined Security Weakness7.5 HighN/A1%Jul 22, 2022
CVE-2020-14126: Undefined Security Weakness7.5 HighN/A1%Jul 22, 2022
CVE-2020-36557: Concurrent Execution using Shared Resource with Improper Synchronization5.1 MediumN/A0%Jul 21, 2022
CVE-2020-36558: Concurrent Execution using Shared Resource with Improper Synchronization5.1 MediumN/A0%Jul 21, 2022
CVE-2020-21406: Undefined Security Weakness7.5 HighN/A1%Jul 20, 2022
CVE-2020-21405: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 20, 2022
CVE-2020-23563: Improper Restriction of Operations within the Bounds of a Memory Buffer5.5 MediumN/A0%Jul 17, 2022
CVE-2020-23562: Undefined Security Weakness5.5 MediumN/A0%Jul 17, 2022
CVE-2020-23561: Undefined Security Weakness5.5 MediumN/A0%Jul 17, 2022
CVE-2020-7641: Improperly Controlled Modification of Object Prototype Attributes4.0 MediumN/A0%Jul 17, 2022
CVE-2020-16093: Improper Certificate Validation7.5 HighN/A1%Jul 17, 2022
CVE-2020-35305: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jul 15, 2022
CVE-2020-35261: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jul 15, 2022
CVE-2020-36550: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jul 15, 2022
CVE-2020-36551: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jul 15, 2022
CVE-2020-36552: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jul 15, 2022
CVE-2020-36553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Jul 15, 2022
CVE-2020-14127: Out-of-bounds Write7.5 HighN/A1%Jul 14, 2022
CVE-2020-21967: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Jul 13, 2022
CVE-2020-35259: Undefined Security Weakness9.8 CriticalN/AN/AJul 13, 2022
1651-1675 of 21077
‹›