The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-30074: Heap-based Buffer Overflow8.0 HighN/A1%Jun 11, 2024
CVE-2024-30072: Integer Overflow or Wraparound7.8 HighN/A1%Jun 11, 2024
CVE-2024-30070: Integer Underflow (Wrap or Wraparound)7.5 HighN/A2%Jun 11, 2024
CVE-2024-30069: Buffer Over-read4.7 MediumN/A1%Jun 11, 2024
CVE-2024-5692: Undefined Security Weakness6.5 MediumN/A0%Jun 11, 2024
CVE-2023-38533: Creation of Temporary File in Directory with Insecure Permissions3.3 Low4.8 Medium0%Jun 11, 2024
CVE-2024-5102: Improper Validation of Specified Quantity in Input7.0 High7.3 High0%Jun 10, 2024
CVE-2024-34332: Improper Privilege Management7.8 HighN/A0%Jun 10, 2024
CVE-2024-4577: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A94%Jun 9, 2024
CVE-2024-2408: Observable Discrepancy5.9 MediumN/A0%Jun 9, 2024
CVE-2024-5585: Improper Encoding or Escaping of Output7.7 HighN/A1%Jun 9, 2024
CVE-2024-37385: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A1%Jun 7, 2024
CVE-2024-4881: Absolute Path Traversal7.5 HighN/A0%Jun 6, 2024
CVE-2024-37364: Improper Privilege Management6.8 MediumN/A0%Jun 6, 2024
CVE-2024-2548: Absolute Path Traversal7.5 HighN/A0%Jun 6, 2024
CVE-2024-2362: Absolute Path Traversal9.1 CriticalN/A2%Jun 6, 2024
CVE-2024-35178: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Jun 6, 2024
CVE-2024-0912: Insertion of Sensitive Information into Log File4.2 Medium8.5 High0%Jun 6, 2024
CVE-2023-38042: Execution with Unnecessary Privileges7.8 HighN/A0%May 31, 2024
CVE-2024-2451: Improper Verification of Cryptographic Signature6.4 MediumN/A0%May 28, 2024
CVE-2024-36049: Use of Hard-coded Credentials6.5 MediumN/A0%May 24, 2024
CVE-2024-35197: Improper Handling of Windows Device Names5.4 MediumN/A0%May 23, 2024
CVE-2024-29853: Authentication Bypass Using an Alternate Path or Channel7.8 HighN/A0%May 22, 2024
CVE-2024-36077: Improper Privilege Management8.8 HighN/A1%May 22, 2024
CVE-2024-33228: Improper Control of Generation of Code8.4 HighN/A0%May 22, 2024
6001-6025 of 17381
‹›