The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-25131: Improper Input Validation8.8 HighN/A1%Dec 19, 2024
CVE-2024-12786: Improper Privilege Management7.8 High8.5 High0%Dec 19, 2024
CVE-2024-12785: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 19, 2024
CVE-2024-9102: Improper Neutralization of Formula Elements in a CSV FileN/A5.0 Medium0%Dec 19, 2024
CVE-2024-9101: Improper Neutralization of Input During Web Page GenerationN/A2.1 Low0%Dec 19, 2024
CVE-2024-12784: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium1%Dec 19, 2024
CVE-2024-10244: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Dec 19, 2024
CVE-2021-26102: Authentication Bypass by Primary Weakness9.8 CriticalN/A17%Dec 19, 2024
CVE-2024-12783: Improper Neutralization of Input During Web Page Generation3.5 Low5.3 Medium0%Dec 19, 2024
CVE-2024-12782: Improper Authorization7.3 High6.9 Medium1%Dec 19, 2024
CVE-2021-32589: Use After Free8.1 HighN/A9%Dec 19, 2024
CVE-2024-45819: Incorrect Default Permissions5.5 MediumN/A0%Dec 19, 2024
CVE-2024-45818: Improper Locking6.5 MediumN/A0%Dec 19, 2024
CVE-2024-37962: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 19, 2024
CVE-2024-12626: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A1%Dec 19, 2024
CVE-2024-12331: Missing Authorization4.3 MediumN/A0%Dec 19, 2024
CVE-2021-26115: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A1%Dec 19, 2024
CVE-2020-15934: Improper Privilege Management8.8 HighN/A0%Dec 19, 2024
CVE-2020-12820: Stack-based Buffer Overflow5.4 MediumN/A1%Dec 19, 2024
CVE-2024-11616: Out-of-bounds ReadN/A5.6 Medium0%Dec 19, 2024
CVE-2023-4617: Incorrect Authorization10.0 CriticalN/A1%Dec 19, 2024
CVE-2024-12569: Insertion of Sensitive Information into Log File7.8 High5.2 Medium0%Dec 19, 2024
CVE-2024-4230: External Control of File Name or Path7.8 HighN/A0%Dec 19, 2024
CVE-2024-4229: Incorrect Default Permissions7.8 HighN/A0%Dec 19, 2024
CVE-2021-26093: Access of Uninitialized Pointer7.3 HighN/A0%Dec 19, 2024
122601-122625 of 395809