ME
Product
Metasploit
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 4Low 2
Watch
Add Metasploit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7376 | 9.8 | Aug 24 | The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to… Affected: 4.11.7 before 6.0.3 |
| CVE-2020-7385 | 8.8 | Apr 23 | By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module,… Affected: before 4.19.0 |
| CVE-2020-7384 | 7.8 | Oct 29 | Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's… Affected: before 4.19.0 |
| CVE-2020-7350 | 7.8 | Apr 22 | Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via… Affected: before 5.0.85 |
| CVE-2017-5235 | 7.8 | Mar 2 | Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL… Affected: through 4.13.0-2017012501 |
| CVE-2019-5645 | 7.5 | Sep 1 | Rapid7 Metasploit HTTP Handler Denial of Service Affected: through 5.0.27 |
| CVE-2020-7377 | 7.5 | Aug 24 | The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be… Affected: 4.12.40 before 6.0.3 |
| CVE-2019-5624 | 7.3 | Apr 30 | Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of… Affected: through 4.14.0 |
| CVE-2017-5231 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download()… Affected: through 4.13.19 |
| CVE-2017-5229 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function Affected: through 4.13.19 |
| CVE-2017-5228 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function Affected: through 4.13.19 |
| CVE-2017-15084 | 6.5 | Oct 6 | The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22 Affected: through 4.14.1 |
| CVE-2020-7355 | 6.1 | Jun 25 | Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a… Affected: before 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; +34 more |
| CVE-2020-7354 | 5.4 | Jun 25 | Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a… Affected: before 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; +34 more |
| CVE-2023-0599 | 4.8 | Feb 1 | Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Using this… Affected: through 4.21.2 |
| CVE-2017-5244 | 3.5 | Jun 15 | Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests Affected: through 4.13.19 |
| CVE-2019-5642 | 3.3 | Nov 6 | Rapid7 Metasploit Pro version 4.16.0-2019081901 and prior suffers from an instance of CWE-732, wherein the unique server.key is written to the file system during installation with… Affected: before 4.16.0; 4.16.0; 4.16.0; 4.16.0; 4.16.0 |
Showing 17