The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-8067: Improper Handling of Unicode EncodingN/A5.8 Medium0%Sep 25, 2024
CVE-2024-39342: Improper Privilege Management6.6 MediumN/A0%Sep 23, 2024
CVE-2024-46544: Incorrect Default Permissions5.9 MediumN/A0%Sep 23, 2024
CVE-2024-46796: Use After Free9.8 CriticalN/A0%Sep 18, 2024
CVE-2024-46787: Undefined Security Weakness7.8 HighN/A0%Sep 18, 2024
CVE-2024-37985: Processor Optimization Removal or Modification of Security-critical Code5.9 MediumN/A1%Sep 17, 2024
CVE-2024-8752: Improper Limitation of a Pathname to a Restricted Directory7.5 High9.3 Critical12%Sep 16, 2024
CVE-2024-20430: Uncontrolled Search Path Element7.3 HighN/A0%Sep 12, 2024
CVE-2024-6510: Exposed Dangerous Method or Function7.8 HighN/A0%Sep 12, 2024
CVE-2024-8690: Expected Behavior Violation4.4 Medium5.6 Medium0%Sep 11, 2024
CVE-2024-5760: Improper Privilege Management7.8 HighN/A0%Sep 11, 2024
CVE-2024-43487: Protection Mechanism Failure6.5 MediumN/A1%Sep 10, 2024
CVE-2024-43475: Buffer Over-read7.3 HighN/A2%Sep 10, 2024
CVE-2024-43467: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A1%Sep 10, 2024
CVE-2024-43461: User Interface (UI) Misrepresentation of Critical Information8.8 HighN/A54%Sep 10, 2024
CVE-2024-43455: Improper Input Validation9.8 CriticalN/A2%Sep 10, 2024
CVE-2024-43454: Relative Path Traversal7.1 HighN/A22%Sep 10, 2024
CVE-2024-38263: Sensitive Data Storage in Improperly Locked Memory7.5 HighN/A1%Sep 10, 2024
CVE-2024-38260: Use of Uninitialized Resource8.8 HighN/A2%Sep 10, 2024
CVE-2024-38259: Use After Free8.8 HighN/A2%Sep 10, 2024
CVE-2024-38258: Relative Path Traversal7.5 HighN/A5%Sep 10, 2024
CVE-2024-38257: Use of Uninitialized Resource7.5 HighN/A4%Sep 10, 2024
CVE-2024-38256: Use of Uninitialized Resource5.5 MediumN/A1%Sep 10, 2024
CVE-2024-38254: Use of Uninitialized Resource6.2 MediumN/A1%Sep 10, 2024
CVE-2024-38253: Use After Free7.8 HighN/A1%Sep 10, 2024
4326-4350 of 16013