The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-11991: Use of Uninitialized Resource5.6 MediumN/A0%Dec 9, 2024
CVE-2023-7298: Out-of-bounds Write4.4 MediumN/A0%Dec 9, 2024
CVE-2024-8259: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 9, 2024
CVE-2024-54937: Out-of-bounds Read5.3 MediumN/A0%Dec 9, 2024
CVE-2024-54936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-54929: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Dec 9, 2024
CVE-2024-54218: Missing Authorization6.5 MediumN/A0%Dec 9, 2024
CVE-2024-53949: Incorrect Authorization6.5 Medium7.6 High0%Dec 9, 2024
CVE-2024-53948: Generation of Error Message Containing Sensitive Information5.3 Medium5.3 Medium0%Dec 9, 2024
CVE-2024-53947: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical2.3 Low0%Dec 9, 2024
CVE-2024-53814: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A1%Dec 9, 2024
CVE-2024-52480: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-52391: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-52385: Improper Control of Filename for Include/Require Statement in PHP Program4.3 MediumN/A0%Dec 9, 2024
CVE-2023-41953: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-54260: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54255: URL Redirection to Untrusted Site4.7 MediumN/A1%Dec 9, 2024
CVE-2024-54254: Missing Authorization6.3 MediumN/A0%Dec 9, 2024
CVE-2024-54253: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54247: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54232: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54230: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54228: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54227: Missing Authorization4.3 MediumN/A0%Dec 9, 2024
CVE-2024-54226: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 9, 2024
125726-125750 of 404943