The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-36397: Incorrect Default Permissions5.3 MediumN/A1%Mar 6, 2023
CVE-2021-36398: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Mar 6, 2023
CVE-2021-36399: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Mar 6, 2023
CVE-2021-36400: Incorrect Default Permissions5.3 MediumN/A1%Mar 6, 2023
CVE-2021-36392: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Mar 6, 2023
CVE-2021-20251: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A1%Mar 6, 2023
CVE-2021-36401: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Mar 6, 2023
CVE-2021-36713: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Mar 6, 2023
CVE-2021-36403: Hidden Functionality5.3 MediumN/A1%Mar 6, 2023
CVE-2021-36402: Improper Input Validation5.3 MediumN/A1%Mar 6, 2023
CVE-2021-4329: Improper Neutralization of Special Elements used in a Command5.5 MediumN/A2%Mar 5, 2023
CVE-2021-36689: Weak Password Requirements5.5 MediumN/A0%Mar 3, 2023
CVE-2021-4328: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A1%Mar 2, 2023
CVE-2021-3854: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Mar 2, 2023
CVE-2021-45479: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 2, 2023
CVE-2021-45478: Improper Handling of Parameters6.5 MediumN/A1%Mar 2, 2023
CVE-2021-45477: Improper Handling of Parameters6.5 MediumN/A1%Mar 2, 2023
CVE-2021-4327: Integer Overflow or Wraparound5.5 MediumN/A1%Mar 1, 2023
CVE-2021-3855: Improper Neutralization of Special Elements used in a Command8.8 HighN/A2%Mar 1, 2023
CVE-2021-22283: Improper Initialization6.2 MediumN/A0%Feb 28, 2023
CVE-2021-32302: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 27, 2023
CVE-2021-34248: Undefined Security Weakness9.8 CriticalN/AN/AFeb 27, 2023
CVE-2021-46841: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A0%Feb 27, 2023
CVE-2021-3329: Improper Check or Handling of Exceptional Conditions9.6 CriticalN/A1%Feb 26, 2023
CVE-2021-33224: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Feb 24, 2023
2001-2025 of 23470
‹›