The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-4030: Incorrect Default Permissions7.1 HighN/A0%May 7, 2024
CVE-2024-34346: Incorrect Authorization8.4 HighN/A0%May 7, 2024
CVE-2024-32986: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.6 CriticalN/A0%May 3, 2024
CVE-2023-41971: Improper Link Resolution Before File Access5.3 MediumN/A0%May 2, 2024
CVE-2023-41970: Improper Validation of Integrity Check Value6.0 MediumN/A0%May 2, 2024
CVE-2024-22830: Improper Access Control5.3 MediumN/A0%May 1, 2024
CVE-2024-23457: Improper Privilege Management7.8 HighN/A0%May 1, 2024
CVE-2024-24912: Incorrect Permission Assignment for Critical Resource6.7 MediumN/A0%May 1, 2024
CVE-2024-23463: Time-of-check Time-of-use (TOCTOU) Race Condition8.8 HighN/A0%Apr 30, 2024
CVE-2024-23773: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Apr 30, 2024
CVE-2024-23774: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A1%Apr 30, 2024
CVE-2024-23772: Improper Limitation of a Pathname to a Restricted Directory6.6 MediumN/A0%Apr 30, 2024
CVE-2024-1874: Improper Encoding or Escaping of Output9.4 CriticalN/A58%Apr 29, 2024
CVE-2024-33673: Improper Access Control7.8 HighN/A0%Apr 26, 2024
CVE-2024-28240: Improper Input Validation7.3 HighN/A0%Apr 25, 2024
CVE-2024-4031: Unquoted Search Path or Element4.4 MediumN/A0%Apr 23, 2024
CVE-2024-32038: Heap-based Buffer Overflow9.8 CriticalN/A1%Apr 19, 2024
CVE-2024-24910: Incorrect Permission Assignment for Critical Resource7.3 HighN/A0%Apr 18, 2024
CVE-2024-21111: Improper Privilege Management7.8 HighN/A10%Apr 16, 2024
CVE-2024-21107: Improper Access Control6.7 MediumN/A0%Apr 16, 2024
CVE-2024-3863: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%Apr 16, 2024
CVE-2024-23594: Stack-based Buffer Overflow6.4 MediumN/A0%Apr 15, 2024
CVE-2024-23593: Improper Validation of Specified Quantity in Input6.7 MediumN/A0%Apr 15, 2024
CVE-2024-22014: UNIX Symbolic Link (Symlink) Following8.8 HighN/A0%Apr 15, 2024
CVE-2024-31462: Improper Limitation of a Pathname to a Restricted Directory6.3 MediumN/A0%Apr 12, 2024
6101-6125 of 17380
‹›