The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-29022: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Apr 12, 2024
CVE-2024-29023: Exposure of Sensitive Information to an Unauthorized Actor7.2 HighN/A0%Apr 12, 2024
CVE-2024-0157: Uncontrolled Resource Consumption5.9 MediumN/A0%Apr 12, 2024
CVE-2024-3384: Improper Validation of Syntactic Correctness of Input7.5 HighN/A1%Apr 10, 2024
CVE-2024-3566: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A5%Apr 10, 2024
CVE-2024-26362: Improper Control of Generation of Code8.8 HighN/A0%Apr 10, 2024
CVE-2024-3545: Improper Preservation of Permissions4.3 MediumN/A0%Apr 9, 2024
CVE-2024-1790: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Apr 9, 2024
CVE-2024-24576: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A79%Apr 9, 2024
CVE-2024-22423: Improper Neutralization of Special Elements used in an OS Command8.3 HighN/A5%Apr 9, 2024
CVE-2024-24694: Improper Verification of Cryptographic Signature5.9 MediumN/A0%Apr 9, 2024
CVE-2024-20670: Improper Input Validation8.1 HighN/A5%Apr 9, 2024
CVE-2024-29062: Time-of-check Time-of-use (TOCTOU) Race Condition7.1 HighN/A0%Apr 9, 2024
CVE-2024-29061: Stack-based Buffer Overflow7.8 HighN/A0%Apr 9, 2024
CVE-2024-29056: Use of a Broken or Risky Cryptographic Algorithm4.3 MediumN/A1%Apr 9, 2024
CVE-2024-29052: Improper Privilege Management7.8 HighN/A1%Apr 9, 2024
CVE-2024-28907: Improper Link Resolution Before File Access7.8 HighN/A1%Apr 9, 2024
CVE-2024-28904: Improper Privilege Management7.8 HighN/A1%Apr 9, 2024
CVE-2024-28900: Buffer Over-read5.5 MediumN/A0%Apr 9, 2024
CVE-2024-28897: Improper Input Validation6.8 MediumN/A0%Apr 9, 2024
CVE-2024-28925: Stack-based Buffer Overflow8.0 HighN/A1%Apr 9, 2024
CVE-2024-28924: Stack-based Buffer Overflow6.7 MediumN/A0%Apr 9, 2024
CVE-2024-26240: Improper Input Validation8.0 HighN/A1%Apr 9, 2024
CVE-2024-26239: Heap-based Buffer Overflow7.8 HighN/A0%Apr 9, 2024
CVE-2024-26230: Use After Free7.8 HighN/A51%Apr 9, 2024
6126-6150 of 17380
‹›