The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2021-4294: Observable Timing Discrepancy2.6 LowN/A1%Dec 28, 2022
CVE-2021-4293: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 28, 2022
CVE-2021-4292: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4291: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4290: Improper Neutralization of Special Elements used in an SQL Command5.5 MediumN/A1%Dec 27, 2022
CVE-2021-4239: Missing Encryption of Sensitive Data7.5 HighN/A0%Dec 27, 2022
CVE-2021-4238: Insufficient Entropy9.1 CriticalN/A1%Dec 27, 2022
CVE-2021-4236: NULL Pointer Dereference9.8 CriticalN/A1%Dec 27, 2022
CVE-2021-4235: Undefined Security Weakness5.5 MediumN/A0%Dec 27, 2022
CVE-2021-4289: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4288: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4287: UNIX Symbolic Link (Symlink) Following5.0 MediumN/A2%Dec 27, 2022
CVE-2021-4286: Observable Discrepancy2.6 LowN/A1%Dec 27, 2022
CVE-2021-4285: Improper Neutralization of Input During Web Page Generation3.5 LowN/A2%Dec 27, 2022
CVE-2021-4284: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4283: Improper Neutralization of Input During Web Page Generation2.4 LowN/A1%Dec 27, 2022
CVE-2021-4282: Improper Neutralization of Input During Web Page Generation3.5 LowN/A1%Dec 27, 2022
CVE-2021-4281: Improper Neutralization of Special Elements used in an OS Command4.6 MediumN/A2%Dec 26, 2022
CVE-2021-24942: Undefined Security Weakness7.2 HighN/A1%Dec 26, 2022
CVE-2021-30134: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 26, 2022
CVE-2021-35951: Undefined Security Weakness7.5 HighN/A1%Dec 26, 2022
CVE-2021-44758: NULL Pointer Dereference7.5 HighN/A1%Dec 26, 2022
CVE-2021-44854: Use of Cache Containing Sensitive Information5.3 MediumN/A1%Dec 26, 2022
CVE-2021-44855: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Dec 26, 2022
CVE-2021-45467: Missing Authorization9.8 CriticalN/A71%Dec 26, 2022
2376-2400 of 23470
‹›