ME
Product
Metasploit
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 4Low 2
Watch
Add Metasploit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7385 | 8.8 | Apr 23 | By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module,… Affected: before 4.19.0 |
| CVE-2020-7384 | 7.8 | Oct 29 | Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's… Affected: before 4.19.0 |
| CVE-2020-7350 | 7.8 | Apr 22 | Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via… Affected: before 5.0.85 |
| CVE-2017-5235 | 7.8 | Mar 2 | Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL… Affected: through 4.13.0-2017012501 |
| CVE-2019-5645 | 7.5 | Sep 1 | Rapid7 Metasploit HTTP Handler Denial of Service Affected: through 5.0.27 |
| CVE-2020-7377 | 7.5 | Aug 24 | The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be… Affected: 4.12.40 before 6.0.3 |
| CVE-2019-5624 | 7.3 | Apr 30 | Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of… Affected: through 4.14.0 |
| CVE-2017-5231 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download()… Affected: through 4.13.19 |
| CVE-2017-5229 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function Affected: through 4.13.19 |
| CVE-2017-5228 | 7.1 | Mar 2 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function Affected: through 4.13.19 |
Showing 10