The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2015-7976: Undefined Security Weakness4.3 MediumN/A3%Jan 30, 2017
CVE-2015-7975: Improper Restriction of Operations within the Bounds of a Memory Buffer6.2 MediumN/A0%Jan 30, 2017
CVE-2015-7973: Undefined Security Weakness6.5 MediumN/A9%Jan 30, 2017
CVE-2015-8972: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A2%Jan 23, 2017
CVE-2015-8971: Improper Neutralization of Special Elements used in a Command7.8 HighN/A1%Jan 23, 2017
CVE-2015-8862: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 23, 2017
CVE-2015-8861: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jan 23, 2017
CVE-2015-8860: Improper Link Resolution Before File Access7.5 HighN/A0%Jan 23, 2017
CVE-2015-8859: Undefined Security Weakness5.3 MediumN/A0%Jan 23, 2017
CVE-2015-8858: Undefined Security Weakness7.5 HighN/A1%Jan 23, 2017
CVE-2015-8857: Undefined Security Weakness9.8 CriticalN/A0%Jan 23, 2017
CVE-2015-8856: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 23, 2017
CVE-2015-8855: Undefined Security Weakness7.5 HighN/A1%Jan 23, 2017
CVE-2015-8854: Inefficient Regular Expression Complexity7.5 HighN/A1%Jan 23, 2017
CVE-2015-8315: Inefficient Regular Expression Complexity7.5 HighN/A1%Jan 23, 2017
CVE-2015-7743: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Jan 23, 2017
CVE-2015-4626: Undefined Security Weakness7.5 HighN/A0%Jan 23, 2017
CVE-2015-8212: Improper Input Validation9.8 CriticalN/A2%Jan 19, 2017
CVE-2015-8684: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 18, 2017
CVE-2015-8667: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 18, 2017
CVE-2015-3188: Undefined Security Weakness9.8 CriticalN/A12%Jan 13, 2017
CVE-2015-6501: URL Redirection to Untrusted Site6.1 MediumN/A0%Jan 12, 2017
CVE-2015-8020: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Jan 11, 2017
CVE-2015-4594: Improper Access Control9.8 CriticalN/A12%Jan 10, 2017
CVE-2015-4593: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jan 10, 2017
2351-2375 of 8780