The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-38232: NULL Pointer Dereference7.5 HighN/A2%Sep 10, 2024
CVE-2024-31489: Improper Certificate Validation6.8 MediumN/A0%Sep 10, 2024
CVE-2022-45856: Improper Certificate Validation4.8 MediumN/A0%Sep 10, 2024
CVE-2024-36138: Improper Neutralization of Special Elements used in a Command8.1 HighN/A1%Sep 7, 2024
CVE-2022-27592: Unquoted Search Path or Element6.7 MediumN/A0%Sep 6, 2024
CVE-2024-43402: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A1%Sep 4, 2024
CVE-2024-38456: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Sep 3, 2024
CVE-2024-8260: Authentication Bypass by Capture-replay6.1 MediumN/A0%Aug 30, 2024
CVE-2024-2881: Improper Restriction of Software Interfaces to Hardware Features6.7 MediumN/A0%Aug 30, 2024
CVE-2024-1545: Improper Restriction of Software Interfaces to Hardware Features5.9 MediumN/A1%Aug 29, 2024
CVE-2024-43033: Improper Handling of Windows ::DATA Alternate Data Stream8.8 HighN/A1%Aug 22, 2024
CVE-2024-8035: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Aug 21, 2024
CVE-2024-8033: Undefined Security Weakness4.3 MediumN/A0%Aug 21, 2024
CVE-2024-7980: Insufficient Verification of Data Authenticity7.8 HighN/A0%Aug 21, 2024
CVE-2024-7979: Insufficient Verification of Data Authenticity7.8 HighN/A0%Aug 21, 2024
CVE-2024-7977: Improper Input Validation7.8 HighN/A0%Aug 21, 2024
CVE-2022-26328: Improper Neutralization of Input During Web Page GenerationN/A2.0 Low0%Aug 21, 2024
CVE-2022-26327: Exposure of Sensitive Information to an Unauthorized ActorN/A5.1 Medium1%Aug 21, 2024
CVE-2024-35214: Authentication Bypass Using an Alternate Path or ChannelN/A7.1 High0%Aug 20, 2024
CVE-2024-6500: Missing Authorization10.0 CriticalN/A1%Aug 17, 2024
CVE-2024-43395: Improper Limitation of a Pathname to a Restricted Directory8.2 HighN/A0%Aug 16, 2024
CVE-2024-34737: Undefined Security Weakness7.8 HighN/A0%Aug 15, 2024
CVE-2024-7263: Improper Limitation of a Pathname to a Restricted Directory7.8 High9.3 Critical0%Aug 15, 2024
CVE-2024-7262: Improper Limitation of a Pathname to a Restricted Directory7.8 High9.3 Critical3%Aug 15, 2024
CVE-2024-43373: Improper Input Validation7.7 HighN/A0%Aug 15, 2024
5751-5775 of 17380
‹›