Skip to contentRapid7 vulnerabilities
Newest
- rapid7 nexposeRapid7 Nexpose Security Console Ticket Access Authentication VulnerabilityCVE-2021-318684.3 Medium
- rapid7 velociraptorRapid7 Velociraptor Notebooks Authenticated Persistent XSSCVE-2021-36193.5 Low
- rapid7 nexposeRapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the...CVE-2021-35354.3 Medium
- rapid7 metasploit, metasploit framework +1 moreMetasploit Framework 'drb_remote_codeexec' code executionCVE-2020-7385Fix available8.1 High
- rapid7 metasploitClient-Side Command Injection in Rapid7 MetasploitCVE-2020-7384Public exploitEPSS 30.5%7.0 High
- rapid7 nexposeSQL Injection in Rapid7 NexposeCVE-2020-73836.5 Medium
- rapid7 appspiderCode Injection in Rapid7 AppSpider Pro InstallerCVE-2020-73585.8 Medium
- rapid7 nexposeUnquoted Path in Rapid7 Nexpose InstallerCVE-2020-73826.8 Medium
- rapid7 nexposeCode Injection in Rapid7 Nexpose InstallerCVE-2020-73815.8 Medium
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit HTTP Handler Denial of ServiceCVE-2019-5645EPSS 49.2%7.5 High
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump moduleCVE-2020-73778.1 High
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Relative Path Traversal in enum_osx moduleCVE-2020-73767.1 High
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro Stored XSS in 'notes' fieldCVE-2020-73556.1 Medium
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro Stored XSS in 'host' fieldCVE-2020-73546.1 Medium
- rapid7 metasploit, metasploit framework +1 moreMetasploit Framework Plugin Libnotify Command InjectionCVE-2020-7350Public exploit6.1 Medium
- rapid7 nexposeRapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote...CVE-2012-64946.1 Medium
- rapid7 appspiderRapid7 AppSpider Chrome Plugin Insufficient Session ExpirationCVE-2019-56474.4 Medium
- rapid7 metasploit, metasploit pro +1 moreMAGICKCVE-2019-56423.3 Low
- rapid7 nexposeRapid7 Nexpose Insufficient Session ManagementCVE-2019-56388.7 High
- rapid7 insightappsecRapid7 InsightAppSec Local Privilege EscalationCVE-2019-56317.8 High
- rapid7 insight agentRapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to...CVE-2019-56297.8 High
- rapid7 nexpose, nexpose/insightvm security console +1 moreRapid7 Nexpose/InsightVM Security Console CSRFCVE-2019-5630Public exploit5.9 Medium
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Zip Import Directory TraversalCVE-2019-5624Public exploit7.4 High
- rapid7 insightvmRapid7 InsightVM Stored Credential ExposureCVE-2019-56153.1 Low
- rapid7 komandIn Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always...CVE-2018-55593.4 Low
- rapid7 nexposeVersions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests...CVE-2017-5264Public exploit8.8 High
- rapid7 metasploitThe web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.CVE-2017-15084Public exploit6.5 Medium
- rapid7 metasploit, metasploit (pro, express, and community editions) +1 moreRoutes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET...CVE-2017-52443.5 Low
- rapid7 nexpose, nexpose hardware appliance +1 moreThe default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does...CVE-2017-52438.5 High
- rapid7 appspider proEditions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow...CVE-2017-52407.5 High
- rapid7 appspider proEditions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading...CVE-2017-52367.8 High
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading...CVE-2017-52357.8 High
- rapid7 insight collectorRapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading...CVE-2017-52347.8 High
- rapid7 appspider proRapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability,...CVE-2017-52337.8 High
- rapid7 nexposeAll editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading...CVE-2017-52327.8 High
- rapid7 metasploitAll editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory...CVE-2017-52317.1 High
- rapid7 nexposeThe Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted...CVE-2017-52307.2 High
- rapid7 metasploitAll editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory...CVE-2017-52297.1 High
- rapid7 metasploitAll editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory...CVE-2017-52287.1 High
- rapid7 nexposeIn the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated...CVE-2016-97575.4 Medium
- rapid7 nexposeCross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4...CVE-2012-6493Public exploit6.8 Medium