The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-7400: Insecure Operation on Windows Junction / Mount PointN/A8.5 High0%Sep 27, 2024
CVE-2024-6769: Untrusted Search Path6.7 Medium8.4 High1%Sep 26, 2024
CVE-2024-8405: Improper Neutralization of Special Elements used in a Command6.1 MediumN/A0%Sep 26, 2024
CVE-2024-8404: Improper Link Resolution Before File Access7.8 HighN/A0%Sep 26, 2024
CVE-2024-45750: Improper Authentication7.3 HighN/A1%Sep 25, 2024
CVE-2024-8996: Unquoted Search Path or Element7.3 HighN/A0%Sep 25, 2024
CVE-2024-8975: Unquoted Search Path or Element7.3 HighN/A0%Sep 25, 2024
CVE-2024-7421: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 25, 2024
CVE-2024-6594: Improper Handling of Exceptional Conditions7.5 High8.7 High1%Sep 25, 2024
CVE-2024-6593: Incorrect Authorization9.1 Critical9.3 Critical1%Sep 25, 2024
CVE-2024-6592: Missing Authentication for Critical Function9.1 Critical9.3 Critical1%Sep 25, 2024
CVE-2024-7481: Improper Verification of Cryptographic Signature8.8 HighN/A0%Sep 25, 2024
CVE-2024-7479: Improper Verification of Cryptographic Signature8.8 HighN/A0%Sep 25, 2024
CVE-2024-9120: Use After Free8.8 HighN/A0%Sep 25, 2024
CVE-2024-8067: Improper Handling of Unicode EncodingN/A5.8 Medium0%Sep 25, 2024
CVE-2024-39342: Improper Privilege Management6.6 MediumN/A0%Sep 23, 2024
CVE-2024-46544: Incorrect Default Permissions5.9 MediumN/A0%Sep 23, 2024
CVE-2024-46796: Use After Free9.8 CriticalN/A0%Sep 18, 2024
CVE-2024-46787: Undefined Security Weakness7.8 HighN/A0%Sep 18, 2024
CVE-2024-37985: Processor Optimization Removal or Modification of Security-critical Code5.9 MediumN/A1%Sep 17, 2024
CVE-2024-8752: Improper Limitation of a Pathname to a Restricted Directory7.5 High9.3 Critical12%Sep 16, 2024
CVE-2024-20430: Uncontrolled Search Path Element7.3 HighN/A0%Sep 12, 2024
CVE-2024-6510: Exposed Dangerous Method or Function7.8 HighN/A0%Sep 12, 2024
CVE-2024-8690: Expected Behavior Violation4.4 Medium5.6 Medium0%Sep 11, 2024
CVE-2024-5760: Improper Privilege Management7.8 HighN/A0%Sep 11, 2024
5676-5700 of 17376
‹›