The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-0259: Incorrect Default Permissions7.3 HighN/A0%Mar 28, 2024
CVE-2024-0980: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Mar 27, 2024
CVE-2024-0079: NULL Pointer Dereference6.5 MediumN/A0%Mar 27, 2024
CVE-2024-0075: NULL Pointer Dereference6.1 MediumN/A0%Mar 27, 2024
CVE-2024-0078: NULL Pointer Dereference6.5 MediumN/A0%Mar 27, 2024
CVE-2024-0073: Execution with Unnecessary Privileges7.8 HighN/A0%Mar 27, 2024
CVE-2024-0071: Out-of-bounds Read7.8 HighN/A0%Mar 27, 2024
CVE-2024-2209: Improper Control of Generation of Code6.3 MediumN/A0%Mar 26, 2024
CVE-2017-20190: Improper Handling of Unicode Encoding0.0 NoneN/A0%Mar 26, 2024
CVE-2024-29188: Improper Link Resolution Before File Access7.9 HighN/A0%Mar 24, 2024
CVE-2024-29187: Incorrect Permission Assignment for Critical Resource7.3 HighN/A0%Mar 24, 2024
CVE-2024-23755: Improper Control of Generation of Code8.8 HighN/A2%Mar 23, 2024
CVE-2023-23349: Cleartext Storage of Sensitive Information in Memory2.2 LowN/A0%Mar 22, 2024
CVE-2023-41099: Improper Privilege Management7.8 HighN/A0%Mar 22, 2024
CVE-2024-2605: Undefined Security Weakness5.9 MediumN/A0%Mar 19, 2024
CVE-2024-2294: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A0%Mar 16, 2024
CVE-2024-28252: Improper Resource Shutdown or Release7.5 HighN/A0%Mar 15, 2024
CVE-2024-22167: Uncontrolled Search Path Element7.9 HighN/A0%Mar 13, 2024
CVE-2024-24693: Creation of Temporary File in Directory with Insecure Permissions7.2 HighN/A0%Mar 13, 2024
CVE-2024-24692: Time-of-check Time-of-use (TOCTOU) Race Condition5.3 MediumN/A0%Mar 13, 2024
CVE-2024-2403: Incomplete Cleanup5.9 MediumN/A0%Mar 13, 2024
CVE-2024-2432: Improper Privilege Management4.5 MediumN/A0%Mar 13, 2024
CVE-2024-26185: External Control of File Name or Path6.5 MediumN/A17%Mar 12, 2024
CVE-2024-26182: Use After Free7.8 HighN/A2%Mar 12, 2024
CVE-2024-26181: Improper Input Validation5.5 MediumN/A0%Mar 12, 2024
6251-6275 of 17381