The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-11107: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 10, 2024
CVE-2024-10708: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A5%Dec 10, 2024
CVE-2023-6947: Path Traversal: '/../filedir'7.7 HighN/A3%Dec 10, 2024
CVE-2024-11205: Missing Authorization8.5 HighN/A1%Dec 10, 2024
CVE-2024-21542: Path Traversal: '\..\filename'8.6 High6.6 Medium1%Dec 10, 2024
CVE-2024-37144: Insecure Storage of Sensitive Information8.2 HighN/A0%Dec 10, 2024
CVE-2024-37143: Improper Link Resolution Before File Access10.0 CriticalN/A1%Dec 10, 2024
CVE-2024-53919: Improper Neutralization of Special Elements used in a Command7.6 HighN/A0%Dec 10, 2024
CVE-2024-53552: Weak Password Recovery Mechanism for Forgotten Password9.8 CriticalN/A0%Dec 10, 2024
CVE-2024-54198: Improper Control of Dynamically-Identified Variables8.5 HighN/A0%Dec 10, 2024
CVE-2024-54197: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Dec 10, 2024
CVE-2024-47585: Missing Authorization4.3 MediumN/A0%Dec 10, 2024
CVE-2024-47582: Improper Restriction of XML External Entity Reference5.3 MediumN/A0%Dec 10, 2024
CVE-2024-47581: Missing Authorization4.3 MediumN/A0%Dec 10, 2024
CVE-2024-47580: Insertion of Sensitive Information into Externally-Accessible File or Directory6.8 MediumN/A0%Dec 10, 2024
CVE-2024-47579: Insertion of Sensitive Information into Externally-Accessible File or Directory6.8 MediumN/A0%Dec 10, 2024
CVE-2024-47578: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Dec 10, 2024
CVE-2024-47577: Cleartext Transmission of Sensitive Information2.7 LowN/A0%Dec 10, 2024
CVE-2024-47576: Uncontrolled Search Path Element3.3 LowN/A0%Dec 10, 2024
CVE-2024-32732: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Dec 10, 2024
CVE-2024-9672: Improper Neutralization of Special Elements used in an Expression Language Statement5.4 Medium6.3 Medium1%Dec 10, 2024
CVE-2024-55638: Improperly Controlled Modification of Dynamically-Determined Object Attributes9.8 CriticalN/A5%Dec 10, 2024
CVE-2024-55637: Improperly Controlled Modification of Dynamically-Determined Object Attributes9.8 CriticalN/A8%Dec 10, 2024
CVE-2024-55636: Improperly Controlled Modification of Dynamically-Determined Object Attributes9.8 CriticalN/A9%Dec 10, 2024
CVE-2024-55635: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 10, 2024
125626-125650 of 398978