The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-31895: Use of a Key Past its Expiration Date4.3 MediumN/A0%May 22, 2024
CVE-2024-31894: Use of a Key Past its Expiration Date4.3 MediumN/A0%May 22, 2024
CVE-2024-27264: Improper Privilege Management7.4 HighN/A0%May 22, 2024
CVE-2024-31904: Uncaught Exception6.5 MediumN/A0%May 22, 2024
CVE-2024-31893: Use of a Key Past its Expiration Date4.3 MediumN/A0%May 22, 2024
CVE-2023-52811: NULL Pointer Dereference5.5 MediumN/A0%May 21, 2024
CVE-2021-47369: NULL Pointer Dereference5.5 MediumN/A0%May 21, 2024
CVE-2021-47337: NULL Pointer Dereference5.5 MediumN/A0%May 21, 2024
CVE-2021-47334: Use After Free7.8 HighN/A0%May 21, 2024
CVE-2024-31879: Deserialization of Untrusted Data7.5 HighN/A1%May 18, 2024
CVE-2023-47717: Allocation of Resources Without Limits or Throttling4.4 MediumN/A0%May 16, 2024
CVE-2024-27260: Execution with Unnecessary Privileges8.4 HighN/A0%May 16, 2024
CVE-2024-28781: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 14, 2024
CVE-2024-28761: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 14, 2024
CVE-2024-28760: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%May 14, 2024
CVE-2024-27269: Incorrect User Management6.8 MediumN/A0%May 14, 2024
CVE-2024-22345: Insufficiently Protected Credentials6.2 MediumN/A0%May 14, 2024
CVE-2024-22344: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 14, 2024
CVE-2024-22343: Use of Web Browser Cache Containing Sensitive Information4.0 MediumN/A0%May 14, 2024
CVE-2023-47712: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%May 14, 2024
CVE-2023-47711: Unrestricted Upload of File with Dangerous Type2.7 LowN/A0%May 14, 2024
CVE-2023-47709: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A0%May 14, 2024
CVE-2023-43040: Insufficient Granularity of Access Control6.5 MediumN/A10%May 14, 2024
CVE-2023-38264: Deserialization of Untrusted Data5.9 MediumN/A0%May 14, 2024
CVE-2024-34244: Buffer Copy without Checking Size of Input7.5 HighN/A1%May 8, 2024
2526-2550 of 9776
‹›