The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-12842: Improper Neutralization of Input During Web Page Generation4.3 Medium6.9 Medium0%Dec 20, 2024
CVE-2024-55342: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Dec 20, 2024
CVE-2024-37758: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 20, 2024
CVE-2024-12841: Improper Neutralization of Input During Web Page Generation4.3 Medium6.9 Medium0%Dec 20, 2024
CVE-2024-12677: Deserialization of Untrusted Data7.8 High8.5 High0%Dec 20, 2024
CVE-2024-56337: Time-of-check Time-of-use (TOCTOU) Race Condition9.8 CriticalN/A9%Dec 20, 2024
CVE-2024-55471: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Dec 20, 2024
CVE-2024-55470: Authentication Bypass by Spoofing7.5 HighN/A0%Dec 20, 2024
CVE-2024-55186: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Dec 20, 2024
CVE-2024-12840: Undefined Security WeaknessN/AN/A0%Dec 20, 2024
CVE-2024-10385: Improper Neutralization of Input During Web Page GenerationN/A8.6 High1%Dec 20, 2024
CVE-2024-56356: Improper Restriction of XML External Entity Reference5.9 MediumN/A0%Dec 20, 2024
CVE-2024-56355: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A1%Dec 20, 2024
CVE-2024-56354: Insufficiently Protected Credentials5.5 MediumN/A0%Dec 20, 2024
CVE-2024-56353: Improper Removal of Sensitive Information Before Storage or Transfer5.5 MediumN/A0%Dec 20, 2024
CVE-2024-56352: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A1%Dec 20, 2024
CVE-2024-56351: Insufficient Session Expiration6.3 MediumN/A0%Dec 20, 2024
CVE-2024-56350: Incorrect Authorization4.3 MediumN/A0%Dec 20, 2024
CVE-2024-56349: Missing Authorization5.3 MediumN/A0%Dec 20, 2024
CVE-2024-56348: Incorrect Authorization4.3 MediumN/A0%Dec 20, 2024
CVE-2024-51466: Improper Neutralization of Special Elements used in an Expression Language Statement9.0 CriticalN/A1%Dec 20, 2024
CVE-2024-40695: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Dec 20, 2024
CVE-2024-28767: Improper Neutralization of Special Elements used in an OS Command6.8 MediumN/A1%Dec 20, 2024
CVE-2024-12014: Improper Input ValidationN/A2.0 Low0%Dec 20, 2024
CVE-2024-7726: Missing Authentication for Critical Function6.8 Medium5.7 Medium0%Dec 20, 2024
122501-122525 of 559420