The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-12892: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Dec 22, 2024
CVE-2024-12891: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 22, 2024
CVE-2024-12890: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 22, 2024
CVE-2024-11852: Missing Authorization4.3 MediumN/A0%Dec 22, 2024
CVE-2024-51464: Authentication Bypass Using an Alternate Path or Channel4.3 MediumN/A1%Dec 21, 2024
CVE-2024-51463: Server-Side Request Forgery (SSRF)5.4 MediumN/A1%Dec 21, 2024
CVE-2024-12884: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 21, 2024
CVE-2024-12883: Improper Neutralization of Input During Web Page Generation4.3 Medium6.9 Medium1%Dec 21, 2024
CVE-2024-12875: External Control of File Name or Path4.9 MediumN/A1%Dec 21, 2024
CVE-2024-12591: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 21, 2024
CVE-2024-12558: Missing Authorization6.5 MediumN/A1%Dec 21, 2024
CVE-2024-12408: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 21, 2024
CVE-2024-11722: Improper Neutralization of Special Elements used in an SQL Command5.9 MediumN/A1%Dec 21, 2024
CVE-2024-11688: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 21, 2024
CVE-2024-10453: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 21, 2024
CVE-2024-9545: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 21, 2024
CVE-2024-12588: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 21, 2024
CVE-2024-11808: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 21, 2024
CVE-2024-10797: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Dec 21, 2024
CVE-2024-12771: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 21, 2024
CVE-2024-12721: Deserialization of Untrusted Data7.2 HighN/A1%Dec 21, 2024
CVE-2024-12697: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 21, 2024
CVE-2024-12635: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Dec 21, 2024
CVE-2024-12262: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 21, 2024
CVE-2024-12066: External Control of File Name or Path8.8 HighN/A1%Dec 21, 2024
122451-122475 of 559420