The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-56527: Improper Neutralization of Input During Web Page Generation7.5 HighN/A1%Dec 27, 2024
CVE-2024-12982: Improper Neutralization of Input During Web Page Generation2.4 Low5.1 Medium0%Dec 27, 2024
CVE-2024-12981: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 27, 2024
CVE-2024-11921: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Dec 27, 2024
CVE-2024-11842: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 27, 2024
CVE-2024-11645: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Dec 27, 2024
CVE-2024-11644: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 27, 2024
CVE-2024-11605: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A1%Dec 27, 2024
CVE-2024-56522: Access of Resource Using Incompatible Type7.5 HighN/A1%Dec 27, 2024
CVE-2024-56521: Improper Certificate Validation9.8 CriticalN/A1%Dec 27, 2024
CVE-2024-56520: Undefined Security Weakness7.3 HighN/A1%Dec 27, 2024
CVE-2024-56519: Improper Neutralization of Input During Web Page Generation7.5 HighN/A1%Dec 27, 2024
CVE-2024-12980: Improper Neutralization of Input During Web Page Generation4.3 Medium6.9 Medium1%Dec 27, 2024
CVE-2024-12979: Improper Neutralization of Input During Web Page Generation4.3 Medium6.9 Medium1%Dec 27, 2024
CVE-2024-12978: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 27, 2024
CVE-2024-9774: Improper Neutralization of Escape, Meta, or Control Sequences6.5 MediumN/A1%Dec 27, 2024
CVE-2024-12977: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 27, 2024
CVE-2024-12976: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 27, 2024
CVE-2024-12969: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 26, 2024
CVE-2024-56361: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 26, 2024
CVE-2024-55950: Incorrect Default PermissionsN/A8.6 High0%Dec 26, 2024
CVE-2024-53850: Use of Externally-Controlled Input to Select Classes or Code8.2 HighN/A1%Dec 26, 2024
CVE-2024-45805: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Dec 26, 2024
CVE-2024-45600: Improper Neutralization of Special Elements used in an SQL Command7.7 HighN/A0%Dec 26, 2024
CVE-2024-12968: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 26, 2024
122276-122300 of 397021