The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-5013: Insufficiently Protected Credentials5.5 MediumN/A0%Feb 8, 2017
CVE-2015-8544: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Feb 7, 2017
CVE-2015-8322: Undefined Security Weakness8.8 HighN/A2%Feb 7, 2017
CVE-2015-7599: Integer Overflow or Wraparound8.1 HighN/A7%Feb 7, 2017
CVE-2015-8608: Out-of-bounds Read9.8 CriticalN/A2%Feb 7, 2017
CVE-2015-5677: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Feb 7, 2017
CVE-2015-2794: Undefined Security Weakness9.8 CriticalN/A92%Feb 6, 2017
CVE-2015-0229: Undefined Security Weakness9.8 CriticalN/AN/AFeb 4, 2017
CVE-2015-4049: Improper Restriction of Operations within the Bounds of a Memory Buffer6.8 MediumN/A1%Feb 3, 2017
CVE-2015-8977: Insertion of Sensitive Information into Log File7.5 HighN/A1%Jan 31, 2017
CVE-2015-8976: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2017
CVE-2015-8975: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2017
CVE-2015-8974: Improper Neutralization of Special Elements used in an SQL Command10.0 CriticalN/A4%Jan 31, 2017
CVE-2015-8973: Improper Access Control8.3 HighN/A0%Jan 31, 2017
CVE-2015-8034: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Jan 30, 2017
CVE-2015-7331: Undefined Security Weakness6.6 MediumN/A0%Jan 30, 2017
CVE-2015-2181: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A1%Jan 30, 2017
CVE-2015-2180: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.8 HighN/A3%Jan 30, 2017
CVE-2015-8158: Undefined Security Weakness5.9 MediumN/A11%Jan 30, 2017
CVE-2015-8140: Improper Access Control4.8 MediumN/A30%Jan 30, 2017
CVE-2015-8139: Improper Access Control5.3 MediumN/A30%Jan 30, 2017
CVE-2015-8138: Improper Input Validation5.3 MediumN/A6%Jan 30, 2017
CVE-2015-7979: Undefined Security Weakness7.5 HighN/A4%Jan 30, 2017
CVE-2015-7978: Uncontrolled Resource Consumption7.5 HighN/A49%Jan 30, 2017
CVE-2015-7977: NULL Pointer Dereference5.9 MediumN/A19%Jan 30, 2017
2326-2350 of 8780