The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-43453: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
CVE-2024-38262: Sensitive Data Storage in Improperly Locked Memory7.5 HighN/A1%Oct 8, 2024
CVE-2024-38265: Improper Input Validation8.8 HighN/A1%Oct 8, 2024
CVE-2024-38124: Improper Authentication9.0 CriticalN/A1%Oct 8, 2024
CVE-2024-38129: Improper Authorization7.5 HighN/A1%Oct 8, 2024
CVE-2024-38029: External Control of File Name or Path7.5 HighN/A1%Oct 8, 2024
CVE-2024-38149: Uncontrolled Resource Consumption7.5 HighN/A2%Oct 8, 2024
CVE-2024-37983: Untrusted Pointer Dereference6.7 MediumN/A1%Oct 8, 2024
CVE-2024-37979: Untrusted Pointer Dereference6.7 MediumN/A1%Oct 8, 2024
CVE-2024-37982: Untrusted Pointer Dereference6.7 MediumN/A1%Oct 8, 2024
CVE-2024-37976: Integer Overflow or Wraparound6.7 MediumN/A1%Oct 8, 2024
CVE-2024-20659: Improper Input Validation7.1 HighN/A1%Oct 8, 2024
CVE-2024-43500: Buffer Over-read5.5 MediumN/A1%Oct 8, 2024
CVE-2024-43615: External Control of File Name or Path7.1 HighN/A1%Oct 8, 2024
CVE-2024-43607: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
CVE-2024-43608: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
CVE-2024-43581: External Control of File Name or Path7.1 HighN/A1%Oct 8, 2024
CVE-2024-43573: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A46%Oct 8, 2024
CVE-2024-43554: Improper Removal of Sensitive Information Before Storage or Transfer5.5 MediumN/A1%Oct 8, 2024
CVE-2024-43543: URL Redirection to Untrusted Site6.8 MediumN/A1%Oct 8, 2024
CVE-2024-43542: Improper Input Validation6.5 MediumN/A1%Oct 8, 2024
CVE-2024-43541: Uncontrolled Resource Consumption7.5 HighN/A2%Oct 8, 2024
CVE-2024-43540: Improper Input Validation6.5 MediumN/A1%Oct 8, 2024
CVE-2024-43538: Improper Input Validation6.5 MediumN/A1%Oct 8, 2024
CVE-2024-43537: Use of Uninitialized Resource6.5 MediumN/A1%Oct 8, 2024
5626-5650 of 17376