The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-12210: Missing Authorization4.3 MediumN/A0%Dec 24, 2024
CVE-2024-12100: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 24, 2024
CVE-2024-12096: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 24, 2024
CVE-2024-12034: Generation of Predictable Numbers or Identifiers5.3 MediumN/A0%Dec 24, 2024
CVE-2024-11885: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 24, 2024
CVE-2024-12710: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 24, 2024
CVE-2024-12617: Missing Authorization5.4 MediumN/A0%Dec 24, 2024
CVE-2024-12518: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 24, 2024
CVE-2024-12507: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 24, 2024
CVE-2024-12266: Missing Authorization6.5 MediumN/A0%Dec 24, 2024
CVE-2024-9427: Improper Encoding or Escaping of Output5.4 MediumN/A0%Dec 24, 2024
CVE-2024-47515: UNIX Symbolic Link (Symlink) Following8.1 HighN/A1%Dec 24, 2024
CVE-2024-12582: Authentication Bypass by Primary Weakness7.1 HighN/A0%Dec 24, 2024
CVE-2018-25106: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Dec 23, 2024
CVE-2024-53961: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A14%Dec 23, 2024
CVE-2024-56363: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page7.8 HighN/A0%Dec 23, 2024
CVE-2024-56362: Cleartext Storage of Sensitive Information7.1 HighN/A0%Dec 23, 2024
CVE-2024-53276: Permissive Cross-domain Policy with Untrusted DomainsN/A6.3 Medium1%Dec 23, 2024
CVE-2024-53275: Reliance on Reverse DNS Resolution for a Security-Critical ActionN/A5.3 Medium0%Dec 23, 2024
CVE-2024-40896: Improper Restriction of XML External Entity Reference9.1 CriticalN/A1%Dec 23, 2024
CVE-2024-56364: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 23, 2024
CVE-2024-56326: Improper Neutralization of Special Elements Used in a Template Engine7.8 High5.4 Medium1%Dec 23, 2024
CVE-2024-56201: Improper Neutralization of Escape, Meta, or Control Sequences8.8 High5.4 Medium0%Dec 23, 2024
CVE-2024-55947: Improper Limitation of a Pathname to a Restricted Directory8.8 High8.7 High75%Dec 23, 2024
CVE-2024-54148: UNIX Symbolic Link (Symlink) Following9.8 Critical8.7 High1%Dec 23, 2024
122401-122425 of 559420