The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-51541: Improper Control of Filename for Include/Require Statement in PHP Program8.2 High8.8 High0%Dec 5, 2024
CVE-2024-48847: Use of Weak Hash8.2 High8.8 High0%Dec 5, 2024
CVE-2024-48846: Cross-Site Request Forgery (CSRF)7.1 High7.1 High1%Dec 5, 2024
CVE-2024-48845: Weak Password Requirements9.4 Critical9.3 Critical3%Dec 5, 2024
CVE-2024-48844: Allocation of Resources Without Limits or Throttling7.7 High7.2 High4%Dec 5, 2024
CVE-2024-48843: Allocation of Resources Without Limits or Throttling7.7 High7.6 High1%Dec 5, 2024
CVE-2024-48840: Improper Control of Generation of Code10.0 Critical9.3 Critical5%Dec 5, 2024
CVE-2024-48839: Improper Control of Generation of Code10.0 Critical9.3 Critical3%Dec 5, 2024
CVE-2024-12094: Cleartext Storage of Sensitive InformationN/A5.4 Medium0%Dec 5, 2024
CVE-2024-11317: Session Fixation10.0 Critical9.3 Critical0%Dec 5, 2024
CVE-2024-11316: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Dec 5, 2024
CVE-2024-52270: User Interface (UI) Misrepresentation of Critical InformationN/A8.2 High0%Dec 5, 2024
CVE-2024-52564: Inclusion of Undocumented Features or Chicken Bits7.5 HighN/A0%Dec 5, 2024
CVE-2024-47133: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Dec 5, 2024
CVE-2024-45841: Incorrect Permission Assignment for Critical Resource6.5 MediumN/A0%Dec 5, 2024
CVE-2024-11779: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 5, 2024
CVE-2024-11420: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 5, 2024
CVE-2024-11341: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 5, 2024
CVE-2024-11324: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 5, 2024
CVE-2024-10848: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 5, 2024
CVE-2024-10777: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Dec 5, 2024
CVE-2024-10056: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 5, 2024
CVE-2022-41137: Deserialization of Untrusted Data8.3 HighN/A9%Dec 5, 2024
CVE-2024-10937: Improper Access Control5.3 MediumN/A0%Dec 5, 2024
CVE-2024-11429: Improper Control of Filename for Include/Require Statement in PHP Program8.8 HighN/A0%Dec 5, 2024
126676-126700 of 398786