The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-35270: Uncontrolled Resource Consumption5.3 MediumN/A1%Jul 9, 2024
CVE-2024-30098: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A1%Jul 9, 2024
CVE-2024-30081: Exposure of Sensitive Information to an Unauthorized Actor7.1 HighN/A24%Jul 9, 2024
CVE-2024-30079: Buffer Over-read7.8 HighN/A1%Jul 9, 2024
CVE-2024-30071: Buffer Over-read4.7 MediumN/A1%Jul 9, 2024
CVE-2024-30013: Double Free8.8 HighN/A2%Jul 9, 2024
CVE-2024-39600: Exposure of Sensitive Information to an Unauthorized Actor5.0 MediumN/A0%Jul 9, 2024
CVE-2024-4944: Improper Neutralization of Special Elements used in a Command7.8 High8.6 High0%Jul 9, 2024
CVE-2024-27903: Unverified Ownership9.8 CriticalN/A9%Jul 8, 2024
CVE-2024-39930: Improper Neutralization of Argument Delimiters in a Command9.9 CriticalN/A8%Jul 4, 2024
CVE-2022-30636: Undefined Security Weakness7.5 HighN/A1%Jul 2, 2024
CVE-2024-25087: Improper Resource Shutdown or Release5.5 MediumN/A0%Jul 2, 2024
CVE-2024-22105: Improper Resource Shutdown or Release5.5 MediumN/A0%Jul 2, 2024
CVE-2024-22104: Out-of-bounds Write5.5 MediumN/A0%Jul 2, 2024
CVE-2024-22103: Out-of-bounds Write5.5 MediumN/A0%Jul 2, 2024
CVE-2024-22102: Uncontrolled Resource Consumption5.5 MediumN/A0%Jul 2, 2024
CVE-2023-51778: Out-of-bounds Write5.5 MediumN/A0%Jul 2, 2024
CVE-2023-51777: Undefined Security Weakness5.5 MediumN/A0%Jul 2, 2024
CVE-2024-38519: Incorrect Resource Transfer Between Spheres7.8 HighN/A0%Jul 2, 2024
CVE-2024-4679: Incorrect Default Permissions7.8 HighN/A0%Jul 2, 2024
CVE-2024-38472: Server-Side Request Forgery (SSRF)7.5 HighN/A69%Jul 1, 2024
CVE-2024-36991: Path Traversal: '.../...//'7.5 HighN/A13%Jul 1, 2024
CVE-2024-24749: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 1, 2024
CVE-2024-6250: Absolute Path Traversal7.5 HighN/A2%Jun 27, 2024
CVE-2024-3330: Execution with Unnecessary Privileges9.9 CriticalN/A1%Jun 27, 2024
5926-5950 of 17380