The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-13032: Server-Side Request Forgery (SSRF)2.7 Low5.1 Medium1%Dec 30, 2024
CVE-2024-13031: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 30, 2024
CVE-2024-13030: Improper Access Control7.3 High6.9 Medium2%Dec 30, 2024
CVE-2024-13029: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium1%Dec 30, 2024
CVE-2024-13028: Observable Response Discrepancy3.7 Low6.3 Medium1%Dec 29, 2024
CVE-2024-13025: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 29, 2024
CVE-2024-13024: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 29, 2024
CVE-2024-13023: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 29, 2024
CVE-2024-13022: Unrestricted Upload of File with Dangerous Type6.3 Medium5.3 Medium0%Dec 29, 2024
CVE-2024-13021: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Dec 29, 2024
CVE-2024-13020: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 29, 2024
CVE-2024-13019: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Dec 29, 2024
CVE-2024-13018: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 29, 2024
CVE-2024-13017: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 29, 2024
CVE-2024-13016: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 29, 2024
CVE-2024-13015: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 29, 2024
CVE-2024-13014: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 29, 2024
CVE-2024-13013: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 29, 2024
CVE-2024-56741: Undefined Security WeaknessN/AN/AN/ADec 29, 2024
CVE-2024-56727: NULL Pointer Dereference5.5 MediumN/A0%Dec 29, 2024
CVE-2024-13012: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium1%Dec 29, 2024
CVE-2024-56756: Undefined Security Weakness5.5 MediumN/A0%Dec 29, 2024
CVE-2024-56755: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Dec 29, 2024
CVE-2024-56754: Undefined Security Weakness5.5 MediumN/A0%Dec 29, 2024
CVE-2024-56753: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Dec 29, 2024
122076-122100 of 552652