The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-53143: Use After Free7.8 HighN/A0%Dec 7, 2024
CVE-2024-11183: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Dec 7, 2024
CVE-2024-8679: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Dec 7, 2024
CVE-2024-7894: Missing Authorization5.3 MediumN/A0%Dec 7, 2024
CVE-2024-12257: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-12167: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-12166: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-12165: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-12115: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 7, 2024
CVE-2024-12026: Missing Authorization4.3 MediumN/A0%Dec 7, 2024
CVE-2024-11943: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-11904: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 7, 2024
CVE-2024-11451: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 7, 2024
CVE-2024-11436: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-11353: Missing Authorization4.3 MediumN/A0%Dec 7, 2024
CVE-2024-11329: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-10046: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 7, 2024
CVE-2024-54138: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium0%Dec 6, 2024
CVE-2024-44856: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44855: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44854: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44853: NULL Pointer Dereference7.5 HighN/A1%Dec 6, 2024
CVE-2024-44852: Release of Invalid Pointer or Reference9.8 CriticalN/A1%Dec 6, 2024
CVE-2024-41650: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41649: Improper Preservation of Permissions9.8 CriticalN/A1%Dec 6, 2024
126026-126050 of 576436