The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-43535: Use After Free7.0 HighN/A1%Oct 8, 2024
CVE-2024-43534: Out-of-bounds Read6.5 MediumN/A2%Oct 8, 2024
CVE-2024-43533: Use After Free8.8 HighN/A2%Oct 8, 2024
CVE-2024-43532: Not Failing Securely8.8 HighN/A12%Oct 8, 2024
CVE-2024-43529: Untrusted Pointer Dereference7.3 HighN/A1%Oct 8, 2024
CVE-2024-43527: Heap-based Buffer Overflow7.8 HighN/A1%Oct 8, 2024
CVE-2024-43526: Improper Input Validation6.8 MediumN/A1%Oct 8, 2024
CVE-2024-43525: Improper Input Validation6.8 MediumN/A1%Oct 8, 2024
CVE-2024-43519: Numeric Truncation Error8.8 HighN/A1%Oct 8, 2024
CVE-2024-43518: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
CVE-2024-43515: Uncontrolled Resource Consumption7.5 HighN/A2%Oct 8, 2024
CVE-2024-43513: Protection Mechanism Failure6.4 MediumN/A1%Oct 8, 2024
CVE-2024-43508: Out-of-bounds Read5.5 MediumN/A1%Oct 8, 2024
CVE-2024-43506: Uncontrolled Resource Consumption7.5 HighN/A2%Oct 8, 2024
CVE-2024-43502: Use of Uninitialized Resource7.1 HighN/A6%Oct 8, 2024
CVE-2024-38261: Improper Input Validation7.8 HighN/A1%Oct 8, 2024
CVE-2024-43516: Untrusted Pointer Dereference7.8 HighN/A1%Oct 8, 2024
CVE-2024-8926: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A4%Oct 8, 2024
CVE-2024-25707: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Oct 4, 2024
CVE-2024-0125: NULL Pointer Dereference3.3 LowN/A0%Oct 3, 2024
CVE-2024-0124: Use After Free3.3 LowN/A0%Oct 3, 2024
CVE-2024-0123: Improper Validation of Specified Index, Position, or Offset in Input3.3 LowN/A0%Oct 3, 2024
CVE-2024-47611: Improper Neutralization of Argument Delimiters in a CommandN/A6.3 Medium1%Oct 2, 2024
CVE-2024-8885: Use of Unmaintained Third Party Components8.8 HighN/A0%Oct 2, 2024
CVE-2024-9194: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical8.7 High0%Sep 30, 2024
5651-5675 of 17376
‹›