The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-56057: Unrestricted Upload of File with Dangerous Type9.9 CriticalN/A1%Dec 18, 2024
CVE-2024-55089: Server-Side Request Forgery (SSRF)4.1 MediumN/A0%Dec 18, 2024
CVE-2024-55088: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Dec 18, 2024
CVE-2024-55492: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 18, 2024
CVE-2024-55086: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Dec 18, 2024
CVE-2024-45082: URL Redirection to Untrusted Site6.8 MediumN/A0%Dec 18, 2024
CVE-2024-41752: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Dec 18, 2024
CVE-2024-25042: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 18, 2024
CVE-2024-52361: Plaintext Storage of a Password5.7 MediumN/A1%Dec 18, 2024
CVE-2024-49576: Use After Free8.8 HighN/A1%Dec 18, 2024
CVE-2024-47810: Use After Free8.8 HighN/A1%Dec 18, 2024
CVE-2024-47119: Improper Certificate Validation5.9 MediumN/A0%Dec 18, 2024
CVE-2024-12373: Buffer Copy without Checking Size of InputN/A9.3 Critical1%Dec 18, 2024
CVE-2024-12372: Improper Control of Generation of CodeN/A9.3 Critical1%Dec 18, 2024
CVE-2024-12371: Missing Authentication for Critical FunctionN/A9.3 Critical1%Dec 18, 2024
CVE-2023-50956: Plaintext Storage of a Password4.4 MediumN/A0%Dec 18, 2024
CVE-2024-56128: Incorrect Implementation of Authentication Algorithm5.3 MediumN/A1%Dec 18, 2024
CVE-2024-50570: Cleartext Storage of Sensitive Information5.0 MediumN/A0%Dec 18, 2024
CVE-2024-48889: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A2%Dec 18, 2024
CVE-2023-34990: Relative Path Traversal9.8 CriticalN/A25%Dec 18, 2024
CVE-2024-56059: Improperly Controlled Modification of Object Prototype Attributes9.8 CriticalN/A2%Dec 18, 2024
CVE-2024-56058: Deserialization of Untrusted Data9.8 CriticalN/A2%Dec 18, 2024
CVE-2024-56016: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2024
CVE-2024-56010: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2024
CVE-2024-56008: Missing Authorization7.5 HighN/A0%Dec 18, 2024
122676-122700 of 395809