The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-51756: Improper Limitation of a Pathname to a Restricted DirectoryN/A2.3 Low0%Nov 5, 2024
CVE-2024-51745: Improper Handling of Windows Device Names10.0 Critical2.3 Low0%Nov 5, 2024
CVE-2024-51514: Improper Input Validation5.3 MediumN/A0%Nov 5, 2024
CVE-2024-48463: URL Redirection to Untrusted Site6.5 MediumN/A0%Nov 4, 2024
CVE-2024-10228: Incorrect Permission Assignment for Critical Resource3.8 LowN/A0%Oct 29, 2024
CVE-2024-0126: Improper Input Validation8.2 HighN/A0%Oct 26, 2024
CVE-2024-0121: Out-of-bounds Read7.8 HighN/A0%Oct 26, 2024
CVE-2024-0120: Out-of-bounds Read7.8 HighN/A0%Oct 26, 2024
CVE-2024-0119: Out-of-bounds Read7.8 HighN/A0%Oct 26, 2024
CVE-2024-0118: Out-of-bounds Read7.8 HighN/A0%Oct 26, 2024
CVE-2024-0117: Out-of-bounds Read7.8 HighN/A0%Oct 26, 2024
CVE-2024-9949: Initialization of a Resource with an Insecure Default6.1 Medium5.8 Medium0%Oct 23, 2024
CVE-2024-31880: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 23, 2024
CVE-2023-6080: Creation of Temporary File in Directory with Insecure Permissions7.8 HighN/A0%Oct 18, 2024
CVE-2024-9858: Incorrect Default Permissions7.8 High5.9 Medium0%Oct 16, 2024
CVE-2024-9965: Undefined Security Weakness8.8 HighN/A1%Oct 15, 2024
CVE-2024-45733: Deserialization of Untrusted Data8.8 HighN/A5%Oct 14, 2024
CVE-2024-45731: Relative Path Traversal8.0 HighN/A1%Oct 14, 2024
CVE-2024-45316: Improper Link Resolution Before File Access7.8 HighN/A0%Oct 11, 2024
CVE-2024-45315: Improper Link Resolution Before File Access5.5 MediumN/A0%Oct 11, 2024
CVE-2024-9473: Execution with Unnecessary Privileges7.8 High5.2 Medium0%Oct 9, 2024
CVE-2024-9469: Improper Check for Unusual or Exceptional Conditions5.5 Medium5.7 Medium0%Oct 9, 2024
CVE-2024-45720: Improper Neutralization of Special Elements used in an OS Command8.2 HighN/A0%Oct 9, 2024
CVE-2024-9575: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.5 High0%Oct 9, 2024
CVE-2024-43611: Improper Input Validation8.8 HighN/A8%Oct 8, 2024
5551-5575 of 17376
‹›