The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-35214: Authentication Bypass Using an Alternate Path or ChannelN/A7.1 High0%Aug 20, 2024
CVE-2024-6500: Missing Authorization10.0 CriticalN/A1%Aug 17, 2024
CVE-2024-43395: Improper Limitation of a Pathname to a Restricted Directory8.2 HighN/A0%Aug 16, 2024
CVE-2024-34737: Undefined Security Weakness7.8 HighN/A0%Aug 15, 2024
CVE-2024-7263: Improper Limitation of a Pathname to a Restricted Directory7.8 High9.3 Critical0%Aug 15, 2024
CVE-2024-7262: Improper Limitation of a Pathname to a Restricted Directory7.8 High9.3 Critical3%Aug 15, 2024
CVE-2024-43373: Improper Input Validation7.7 HighN/A0%Aug 15, 2024
CVE-2024-37529: Memory Allocation with Excessive Size Value6.5 MediumN/A1%Aug 14, 2024
CVE-2024-35152: Memory Allocation with Excessive Size Value6.5 MediumN/A1%Aug 14, 2024
CVE-2024-35136: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A1%Aug 14, 2024
CVE-2024-31882: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A1%Aug 14, 2024
CVE-2024-5915: Incorrect Permission Assignment for Critical Resource7.8 High5.2 Medium0%Aug 14, 2024
CVE-2024-38163: Improper Access Control7.8 HighN/A1%Aug 14, 2024
CVE-2024-38223: Improper Access Control6.8 MediumN/A1%Aug 13, 2024
CVE-2024-38215: Integer Overflow or Wraparound7.8 HighN/A1%Aug 13, 2024
CVE-2024-38214: Out-of-bounds Read6.5 MediumN/A2%Aug 13, 2024
CVE-2024-38213: Protection Mechanism Failure6.5 MediumN/A14%Aug 13, 2024
CVE-2024-38199: Use After Free9.8 CriticalN/A2%Aug 13, 2024
CVE-2024-38198: Insufficient Verification of Data Authenticity7.5 HighN/A1%Aug 13, 2024
CVE-2024-38196: Improper Input Validation7.8 HighN/A6%Aug 13, 2024
CVE-2024-38193: Use After Free7.8 HighN/A29%Aug 13, 2024
CVE-2024-38187: Untrusted Pointer Dereference7.8 HighN/A1%Aug 13, 2024
CVE-2024-38186: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A1%Aug 13, 2024
CVE-2024-38185: Untrusted Pointer Dereference7.8 HighN/A1%Aug 13, 2024
CVE-2024-38184: Out-of-bounds Read7.8 HighN/A1%Aug 13, 2024
4401-4425 of 16013