The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2020-7883: Download of Code Without Integrity Check9.8 CriticalN/A1%Dec 28, 2021
CVE-2020-7878: Missing Support for Integrity Check9.8 CriticalN/A0%Dec 28, 2021
CVE-2020-21238: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A0%Dec 27, 2021
CVE-2020-21237: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A0%Dec 27, 2021
CVE-2020-21236: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 27, 2021
CVE-2020-20948: Exposure of Resource to Wrong Sphere7.5 HighN/A1%Dec 27, 2021
CVE-2020-20946: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 27, 2021
CVE-2020-20945: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 27, 2021
CVE-2020-20944: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Dec 27, 2021
CVE-2020-20943: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 27, 2021
CVE-2020-36511: Use of Uninitialized Resource7.5 HighN/A0%Dec 26, 2021
CVE-2020-36512: Use of Uninitialized Resource9.8 CriticalN/A0%Dec 26, 2021
CVE-2020-36513: Use of Uninitialized Resource9.8 CriticalN/A0%Dec 26, 2021
CVE-2020-36514: Use of Uninitialized Resource9.8 CriticalN/A0%Dec 26, 2021
CVE-2020-35398: Observable Discrepancy5.3 MediumN/A0%Dec 23, 2021
CVE-2020-3886: Use After Free7.8 HighN/A0%Dec 23, 2021
CVE-2020-3896: Undefined Security Weakness5.5 MediumN/A0%Dec 23, 2021
CVE-2020-20426: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 22, 2021
CVE-2020-20425: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 22, 2021
CVE-2020-20605: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 22, 2021
CVE-2020-20601: Improper Control of Generation of Code9.8 CriticalN/A48%Dec 22, 2021
CVE-2020-20600: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 22, 2021
CVE-2020-20598: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 22, 2021
CVE-2020-20597: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 22, 2021
CVE-2020-20595: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Dec 22, 2021
2101-2125 of 21077
‹›