The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-12057: Insertion of Sensitive Information into Log FileN/A1.8 Low0%Dec 9, 2024
CVE-2022-29974: Buffer Copy without Checking Size of Input4.3 MediumN/A0%Dec 9, 2024
CVE-2024-54935: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-54933: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Dec 9, 2024
CVE-2024-54930: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Dec 9, 2024
CVE-2024-54922: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A1%Dec 9, 2024
CVE-2024-11608: Heap-based Buffer Overflow7.8 HighN/A0%Dec 9, 2024
CVE-2024-11454: Untrusted Search Path7.8 HighN/A0%Dec 9, 2024
CVE-2024-11268: Out-of-bounds Read5.5 MediumN/A0%Dec 9, 2024
CVE-2024-54926: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%Dec 9, 2024
CVE-2024-53450: Out-of-bounds Read7.5 HighN/A0%Dec 9, 2024
CVE-2024-45761: Improper Input Validation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-45760: Missing Authorization4.3 MediumN/A0%Dec 9, 2024
CVE-2023-43962: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Dec 9, 2024
CVE-2022-38946: Improper Control of Generation of Code9.8 CriticalN/A0%Dec 9, 2024
CVE-2024-40583: Insufficiently Protected Credentials9.1 CriticalN/A1%Dec 9, 2024
CVE-2024-40582: Cleartext Storage of Sensitive Information7.5 HighN/A0%Dec 9, 2024
CVE-2022-38947: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 9, 2024
CVE-2024-54920: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Dec 9, 2024
CVE-2024-54919: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-49603: Function Call With Incorrectly Specified Argument Value4.3 MediumN/A0%Dec 9, 2024
CVE-2024-49602: Multiple Unlocks of a Critical Resource6.5 MediumN/A1%Dec 9, 2024
CVE-2024-49600: Improper Access Control7.8 HighN/A0%Dec 9, 2024
CVE-2024-42426: Uncontrolled Resource Consumption4.3 MediumN/A1%Dec 9, 2024
CVE-2024-38485: URL Redirection to Untrusted Site4.3 MediumN/A0%Dec 9, 2024
125701-125725 of 574060