The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-35139: Incorrect Default Permissions6.2 MediumN/A0%Jun 28, 2024
CVE-2024-35137: Empty Password in Configuration File6.2 MediumN/A0%Jun 28, 2024
CVE-2023-38370: Incorrect Default Permissions7.5 HighN/A0%Jun 27, 2024
CVE-2023-38368: Incorrect Authorization5.5 MediumN/A0%Jun 27, 2024
CVE-2023-30998: Execution with Unnecessary Privileges7.8 HighN/A0%Jun 27, 2024
CVE-2023-30997: Execution with Unnecessary Privileges7.8 HighN/A0%Jun 27, 2024
CVE-2024-35153: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jun 27, 2024
CVE-2024-31916: Authentication Bypass Using an Alternate Path or Channel7.5 HighN/A0%Jun 27, 2024
CVE-2023-42014: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 27, 2024
CVE-2023-42011: Improper Restriction of Rendered UI Layers or Frames4.3 MediumN/A0%Jun 27, 2024
CVE-2023-38371: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Jun 27, 2024
CVE-2024-31883: Improper Check or Handling of Exceptional Conditions5.3 MediumN/A0%Jun 27, 2024
CVE-2023-30430: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Jun 27, 2024
CVE-2024-38661: Integer Overflow or Wraparound5.5 MediumN/A0%Jun 25, 2024
CVE-2024-38319: Improper Control of Generation of Code7.5 HighN/A0%Jun 22, 2024
CVE-2024-31890: Execution with Unnecessary Privileges7.8 HighN/A0%Jun 21, 2024
CVE-2024-37532: Improper Verification of Cryptographic Signature8.8 HighN/A0%Jun 20, 2024
CVE-2022-48752: Undefined Security Weakness5.5 MediumN/A0%Jun 20, 2024
CVE-2024-38329: Incorrect Authorization7.7 HighN/A0%Jun 19, 2024
CVE-2023-47726: Improper Validation of Specified Type of Input7.1 HighN/A0%Jun 18, 2024
CVE-2024-31870: Observable Response Discrepancy3.3 LowN/A0%Jun 15, 2024
CVE-2024-27275: Incorrect Privilege Assignment7.4 HighN/A0%Jun 15, 2024
CVE-2024-25052: Plaintext Storage of a Password4.4 MediumN/A0%Jun 13, 2024
CVE-2024-22333: Use of Web Browser Cache Containing Sensitive Information3.3 LowN/A0%Jun 13, 2024
CVE-2024-31881: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jun 12, 2024
2476-2500 of 9776
‹›