The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-57669: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Feb 3, 2025
CVE-2024-57237: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Feb 3, 2025
CVE-2024-53943: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 3, 2025
CVE-2025-25062: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A2%Feb 3, 2025
CVE-2024-49349: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2025
CVE-2024-49339: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-49807: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-47116: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 31, 2025
CVE-2024-47103: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2024-40696: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2025-0930: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2025
CVE-2024-55416: Improper Neutralization of Input During Web Page Generation3.5 LowN/A20%Jan 30, 2025
CVE-2025-0747: Improper Neutralization of Input During Web Page Generation8.6 HighN/A0%Jan 30, 2025
CVE-2025-0746: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 30, 2025
CVE-2024-57665: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jan 29, 2025
CVE-2025-0851: Absolute Path Traversal9.8 Critical9.3 Critical23%Jan 29, 2025
CVE-2024-48761: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Jan 29, 2025
CVE-2025-24790: Incorrect Default Permissions4.4 MediumN/A0%Jan 29, 2025
CVE-2025-24789: Untrusted Search Path7.8 HighN/A0%Jan 29, 2025
CVE-2025-22917: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 28, 2025
CVE-2024-57514: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Jan 28, 2025
CVE-2024-40677: Missing Authorization8.4 HighN/A0%Jan 28, 2025
CVE-2024-40676: Access of Resource Using Incompatible Type7.7 HighN/A0%Jan 28, 2025
CVE-2024-40675: Loop with Unreachable Exit Condition7.5 HighN/A0%Jan 28, 2025
CVE-2024-40674: Buffer Copy without Checking Size of Input5.3 MediumN/A0%Jan 28, 2025
6351-6375 of 16641