The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2020-35214: Undefined Security Weakness8.1 HighN/A1%Dec 16, 2021
CVE-2020-35213: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A1%Dec 16, 2021
CVE-2020-35211: Undefined Security Weakness7.5 HighN/A1%Dec 16, 2021
CVE-2020-35210: Allocation of Resources Without Limits or Throttling6.5 MediumN/A1%Dec 16, 2021
CVE-2020-35209: Undefined Security Weakness7.5 HighN/A1%Dec 16, 2021
CVE-2020-18985: URL Redirection to Untrusted Site6.1 MediumN/A1%Dec 15, 2021
CVE-2020-18984: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 15, 2021
CVE-2020-23545: Undefined Security Weakness7.8 HighN/A1%Dec 15, 2021
CVE-2020-19042: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 13, 2021
CVE-2020-4496: Improper Certificate Validation5.9 MediumN/A1%Dec 13, 2021
CVE-2020-16156: Improper Verification of Cryptographic Signature7.8 HighN/A1%Dec 13, 2021
CVE-2020-16155: Undefined Security Weakness6.5 MediumN/A1%Dec 13, 2021
CVE-2020-16154: Improper Verification of Cryptographic Signature7.8 HighN/A1%Dec 13, 2021
CVE-2020-12890: Undefined Security Weakness6.7 MediumN/A0%Dec 10, 2021
CVE-2020-19683: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Dec 9, 2021
CVE-2020-19682: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Dec 9, 2021
CVE-2020-27416: Insufficient Session Expiration9.8 CriticalN/A2%Dec 8, 2021
CVE-2020-22421: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 8, 2021
CVE-2020-27356: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Dec 7, 2021
CVE-2020-12140: Buffer Copy without Checking Size of Input8.8 HighN/A1%Dec 7, 2021
CVE-2020-19611: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 7, 2021
CVE-2020-27413: Insufficiently Protected Credentials4.2 MediumN/A0%Dec 7, 2021
CVE-2020-29177: Undefined Security Weakness9.1 CriticalN/A1%Dec 2, 2021
CVE-2020-29176: Unrestricted Upload of File with Dangerous Type7.8 HighN/A1%Dec 2, 2021
CVE-2020-27414: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A1%Dec 2, 2021
2451-2475 of 21077