The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-12744: Improper Neutralization of Special Elements used in an SQL Command8.0 High8.6 High1%Dec 24, 2024
CVE-2024-53159: Undefined Security WeaknessN/AN/AN/ADec 24, 2024
CVE-2024-43441: Authentication Bypass by Assumed-Immutable Data9.8 CriticalN/A69%Dec 24, 2024
CVE-2024-53163: Off-by-one Error5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53162: Out-of-bounds Read7.1 HighN/A0%Dec 24, 2024
CVE-2024-53161: Integer Overflow or Wraparound5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53160: Concurrent Execution using Shared Resource with Improper Synchronization4.7 MediumN/A0%Dec 24, 2024
CVE-2024-53158: Undefined Security Weakness5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53157: NULL Pointer Dereference5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53156: Improper Validation of Array Index7.8 HighN/A0%Dec 24, 2024
CVE-2024-53155: Use of Uninitialized Resource7.1 HighN/A0%Dec 24, 2024
CVE-2024-53154: NULL Pointer Dereference5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53153: Undefined Security Weakness5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53152: Undefined Security Weakness5.5 MediumN/A0%Dec 24, 2024
CVE-2024-53151: Integer Overflow or Wraparound7.5 HighN/A1%Dec 24, 2024
CVE-2024-53150: Out-of-bounds Read7.1 HighN/A1%Dec 24, 2024
CVE-2024-53149: Off-by-one Error4.6 MediumN/A0%Dec 24, 2024
CVE-2024-53148: Undefined Security Weakness7.8 HighN/A0%Dec 24, 2024
CVE-2024-53147: Out-of-bounds Read7.8 HighN/A0%Dec 24, 2024
CVE-2024-53146: Integer Overflow or Wraparound9.1 CriticalN/A1%Dec 24, 2024
CVE-2024-53145: Integer Overflow or Wraparound5.5 MediumN/A0%Dec 24, 2024
CVE-2024-12268: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 24, 2024
CVE-2024-11726: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Dec 24, 2024
CVE-2024-10856: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Dec 24, 2024
CVE-2024-10584: Unrestricted Upload of File with Dangerous Type5.4 MediumN/A0%Dec 24, 2024
122376-122400 of 559420