The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-56200: Uncontrolled Resource Consumption8.6 HighN/A1%Dec 19, 2024
CVE-2024-56159: Storage of File with Sensitive Data Under Web Root5.3 Medium7.8 High1%Dec 19, 2024
CVE-2024-55196: Cleartext Storage of Sensitive Information7.5 HighN/A0%Dec 19, 2024
CVE-2024-54150: Improper Verification of Cryptographic Signature9.1 Critical8.7 High0%Dec 19, 2024
CVE-2020-6923: Buffer Copy without Checking Size of Input5.7 MediumN/A0%Dec 19, 2024
CVE-2024-52897: Generation of Error Message Containing Sensitive Information6.2 MediumN/A0%Dec 19, 2024
CVE-2024-51471: Out-of-bounds Read5.3 MediumN/A0%Dec 19, 2024
CVE-2024-49336: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Dec 19, 2024
CVE-2024-38819: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A55%Dec 19, 2024
CVE-2024-12794: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 19, 2024
CVE-2024-12793: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Dec 19, 2024
CVE-2024-12792: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 19, 2024
CVE-2024-12791: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 19, 2024
CVE-2023-7005: Undefined Security Weakness7.5 HighN/A0%Dec 19, 2024
CVE-2024-55081: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%Dec 19, 2024
CVE-2024-52896: Generation of Error Message Containing Sensitive Information6.2 MediumN/A0%Dec 19, 2024
CVE-2024-12801: Server-Side Request Forgery (SSRF)N/A2.4 Low0%Dec 19, 2024
CVE-2024-12790: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium1%Dec 19, 2024
CVE-2024-12789: Improper Control of Generation of Code6.3 Medium5.3 Medium1%Dec 19, 2024
CVE-2024-12788: Improper Neutralization of Special Elements used in an SQL Command7.3 High6.9 Medium1%Dec 19, 2024
CVE-2021-22501: Improper Restriction of XML External Entity ReferenceN/A5.3 Medium0%Dec 19, 2024
CVE-2024-9154: Improper Control of Generation of CodeN/A8.6 High1%Dec 19, 2024
CVE-2024-55082: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Dec 19, 2024
CVE-2024-38864: Incorrect Permission Assignment for Critical Resource3.3 Low4.8 Medium0%Dec 19, 2024
CVE-2024-12798: Improper Neutralization of Special Elements used in an Expression Language StatementN/A5.9 Medium0%Dec 19, 2024
122576-122600 of 395809