The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-54254: Missing Authorization6.3 MediumN/A0%Dec 9, 2024
CVE-2024-54253: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54247: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54232: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54230: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54228: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54227: Missing Authorization4.3 MediumN/A0%Dec 9, 2024
CVE-2024-54226: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 9, 2024
CVE-2024-54225: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A2%Dec 9, 2024
CVE-2024-54224: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54223: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Dec 9, 2024
CVE-2024-54220: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 9, 2024
CVE-2024-54219: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 9, 2024
CVE-2024-54217: Missing Authorization5.4 MediumN/A0%Dec 9, 2024
CVE-2024-54215: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Dec 9, 2024
CVE-2024-53822: Unrestricted Upload of File with Dangerous Type10.0 CriticalN/A1%Dec 9, 2024
CVE-2024-53819: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-53818: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-53816: Missing Authorization4.3 MediumN/A0%Dec 9, 2024
CVE-2024-53798: Missing Authorization5.4 MediumN/A0%Dec 9, 2024
CVE-2024-53791: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-53790: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Dec 9, 2024
CVE-2024-53785: Missing Authorization4.3 MediumN/A0%Dec 9, 2024
CVE-2024-43222: Missing Authorization9.8 CriticalN/A1%Dec 9, 2024
CVE-2023-51362: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
125751-125775 of 404943