Vulnerability & Exploit Database

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. These vulnerabilities are utilized by our vulnerability management tool InsightVM. The exploits are all included in the Metasploit framework and utilized by our penetration testing tool, Metasploit Pro. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 461 - 480 of 5,705 in total
Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability
Disclosed: March 10, 2020
module
Explore
CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP
Disclosed: March 10, 2020
module
Explore
Pandora FMS Ping Authenticated Remote Code Execution
Disclosed: March 09, 2020
module
Explore
ManageEngine Desktop Central Java Deserialization
Disclosed: March 05, 2020
module
Explore
Metasploit Libnotify Plugin Arbitrary Command Execution
Disclosed: March 04, 2020
module
Explore
SharePoint Workflows XOML Injection
Disclosed: March 02, 2020
module
Explore
Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
Disclosed: February 25, 2020
module
Explore
OpenSMTPD OOB Read Local Privilege Escalation
Disclosed: February 24, 2020
module
Explore
WordPress wpDiscuz Unauthenticated File Upload Vulnerability
Disclosed: February 21, 2020
module
Explore
Microsoft Windows DrawIconEx OOB Write Local Privilege Elevation
Disclosed: February 20, 2020
module
Explore
Apache Tomcat AJP File Read
Disclosed: February 20, 2020
module
Explore
WordPress Duplicator File Read Vulnerability
Disclosed: February 19, 2020
module
Explore
Google Chrome 80 JSCreate side-effect type confusion exploit
Disclosed: February 19, 2020
module
Explore
Cisco AnyConnect Priv Esc through Path Traversal
Disclosed: February 19, 2020
module
Explore
Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE
Disclosed: February 17, 2020
module
Explore
SQL Server Reporting Services (SSRS) ViewState Deserialization
Disclosed: February 11, 2020
module
Explore
Service Tracing Privilege Elevation Vulnerability
Disclosed: February 11, 2020
module
Explore
Exchange Control Panel ViewState Deserialization
Disclosed: February 11, 2020
module
Explore
Unraid 6.8.0 Auth Bypass PHP Code Execution
Disclosed: February 10, 2020
module
Explore
Horde CSV import arbitrary PHP code execution
Disclosed: February 07, 2020
module
Explore