The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-9101: Improper Neutralization of Input During Web Page GenerationN/A2.1 Low0%Dec 19, 2024
CVE-2021-20553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 19, 2024
CVE-2024-55239: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 18, 2024
CVE-2024-49576: Use After Free8.8 HighN/A0%Dec 18, 2024
CVE-2024-47810: Use After Free8.8 HighN/A0%Dec 18, 2024
CVE-2024-50570: Cleartext Storage of Sensitive Information5.0 MediumN/A0%Dec 18, 2024
CVE-2024-56173: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 18, 2024
CVE-2024-21548: Improperly Controlled Modification of Object Prototype Attributes7.5 High6.8 Medium1%Dec 18, 2024
CVE-2024-55451: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Dec 16, 2024
CVE-2024-35230: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Dec 16, 2024
CVE-2024-55557: Use of Hard-coded Credentials9.8 CriticalN/A18%Dec 16, 2024
CVE-2024-12641: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A19%Dec 16, 2024
CVE-2024-55887: Improper Restriction of XML External Entity Reference8.6 HighN/A0%Dec 13, 2024
CVE-2024-11832: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 13, 2024
CVE-2024-55878: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Dec 12, 2024
CVE-2024-47947: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 12, 2024
CVE-2024-36498: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 12, 2024
CVE-2024-36494: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 12, 2024
CVE-2024-28142: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 12, 2024
CVE-2024-12271: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Dec 12, 2024
CVE-2024-55652: Improper Neutralization of Special Elements Used in a Template Engine6.5 MediumN/A0%Dec 12, 2024
CVE-2024-53274: Improper Neutralization of Input During Web Page Generation6.1 Medium2.0 Low0%Dec 12, 2024
CVE-2024-12482: Path Traversal: '../filedir'4.3 Medium5.3 Medium1%Dec 12, 2024
CVE-2024-12481: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 12, 2024
CVE-2024-12480: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 12, 2024
6501-6525 of 16641