The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-6977: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Jul 31, 2024
CVE-2024-6975: Untrusted Search Path8.8 HighN/A0%Jul 31, 2024
CVE-2024-6974: Untrusted Search Path8.8 HighN/A0%Jul 31, 2024
CVE-2024-6973: Improper Input Validation7.5 HighN/A1%Jul 31, 2024
CVE-2024-41726: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 29, 2024
CVE-2024-41143: Origin Validation Error7.8 HighN/A0%Jul 29, 2024
CVE-2024-41139: Incorrect Privilege Assignment7.8 HighN/A0%Jul 29, 2024
CVE-2024-42053: Incorrect Default Permissions7.8 HighN/A0%Jul 28, 2024
CVE-2024-42052: Creation of Temporary File With Insecure Permissions7.8 HighN/A0%Jul 28, 2024
CVE-2024-42051: Use of Weak Credentials7.8 HighN/A0%Jul 28, 2024
CVE-2024-42050: Improper Privilege Management7.0 HighN/A0%Jul 28, 2024
CVE-2020-11639: Improper Enforcement of Message Integrity During Transmission in a Communication Channel7.8 HighN/A0%Jul 23, 2024
CVE-2024-6913: Execution with Unnecessary Privileges8.8 High9.3 Critical1%Jul 22, 2024
CVE-2024-6912: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Jul 22, 2024
CVE-2024-6911: Files or Directories Accessible to External Parties7.5 High8.7 High5%Jul 22, 2024
CVE-2024-37391: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Jul 22, 2024
CVE-2024-5321: Incorrect Default Permissions6.1 MediumN/A0%Jul 18, 2024
CVE-2024-40644: Insufficient Verification of Data Authenticity6.8 MediumN/A0%Jul 18, 2024
CVE-2024-40898: Server-Side Request Forgery (SSRF)7.5 HighN/A2%Jul 18, 2024
CVE-2024-29014: Improper Control of Generation of Code8.8 HighN/A2%Jul 18, 2024
CVE-2024-6492: Insufficiently Protected Credentials7.4 HighN/A1%Jul 16, 2024
CVE-2024-39827: Improper Input Validation5.5 MediumN/A0%Jul 15, 2024
CVE-2024-39826: Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumN/A0%Jul 15, 2024
CVE-2024-39821: Time-of-check Time-of-use (TOCTOU) Race Condition6.6 MediumN/A0%Jul 15, 2024
CVE-2024-39819: Download of Code Without Integrity Check6.7 MediumN/A0%Jul 15, 2024
5851-5875 of 17380
‹›