The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-38115: Heap-based Buffer Overflow8.8 HighN/A2%Aug 13, 2024
CVE-2024-38114: Heap-based Buffer Overflow8.8 HighN/A2%Aug 13, 2024
CVE-2024-38107: Use After Free7.8 HighN/A2%Aug 13, 2024
CVE-2024-38106: Sensitive Data Storage in Improperly Locked Memory7.0 HighN/A6%Aug 13, 2024
CVE-2024-38063: Integer Underflow (Wrap or Wraparound)9.8 CriticalN/A71%Aug 13, 2024
CVE-2024-37968: Insufficient Verification of Data Authenticity7.5 HighN/A1%Aug 13, 2024
CVE-2024-29995: Observable Timing Discrepancy8.1 HighN/A1%Aug 13, 2024
CVE-2024-6768: Improper Validation of Specified Quantity in InputN/A6.8 Medium2%Aug 12, 2024
CVE-2024-42474: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Aug 12, 2024
CVE-2024-0107: Out-of-bounds Read7.8 HighN/A0%Aug 8, 2024
CVE-2024-38202: Improper Access Control7.3 HighN/A2%Aug 8, 2024
CVE-2024-21302: Improper Access Control6.7 MediumN/A2%Aug 8, 2024
CVE-2024-7061: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Aug 7, 2024
CVE-2024-7553: Improper Access Control7.3 HighN/A0%Aug 7, 2024
CVE-2024-23464: Improper Preservation of Permissions7.2 HighN/A0%Aug 6, 2024
CVE-2024-23458: Origin Validation Error7.3 HighN/A0%Aug 6, 2024
CVE-2023-28806: Improper Verification of Cryptographic Signature5.7 MediumN/A0%Aug 6, 2024
CVE-2024-5963: Unquoted Search Path or Element6.7 MediumN/A0%Aug 6, 2024
CVE-2024-40723: Stack-based Buffer Overflow4.3 MediumN/A0%Aug 2, 2024
CVE-2024-40722: Stack-based Buffer Overflow4.3 MediumN/A0%Aug 2, 2024
CVE-2024-40721: Improper Input Validation8.8 HighN/A1%Aug 2, 2024
CVE-2024-40720: Improper Input Validation8.8 HighN/A1%Aug 2, 2024
CVE-2024-40719: Inadequate Encryption Strength6.5 MediumN/A0%Aug 2, 2024
CVE-2024-41955: URL Redirection to Untrusted Site5.2 MediumN/A1%Jul 31, 2024
CVE-2024-6978: Improper Input Validation5.6 MediumN/A0%Jul 31, 2024
5826-5850 of 17380