The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-10046: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Dec 7, 2024
CVE-2024-54138: Improper Neutralization of Input During Web Page Generation6.1 Medium6.9 Medium1%Dec 6, 2024
CVE-2024-44856: NULL Pointer Dereference7.5 HighN/A0%Dec 6, 2024
CVE-2024-44855: NULL Pointer Dereference7.5 HighN/A0%Dec 6, 2024
CVE-2024-44854: NULL Pointer Dereference7.5 HighN/A0%Dec 6, 2024
CVE-2024-44853: NULL Pointer Dereference7.5 HighN/A0%Dec 6, 2024
CVE-2024-44852: Release of Invalid Pointer or Reference9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41650: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41649: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41648: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41647: Incorrect Permission Assignment for Critical Resource9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41646: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41645: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-41644: Improper Preservation of Permissions9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38927: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38926: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38925: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38924: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38923: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38922: Out-of-bounds Write9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-38921: Use After Free9.8 CriticalN/A0%Dec 6, 2024
CVE-2024-7875: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 6, 2024
CVE-2024-7874: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Dec 6, 2024
CVE-2024-12326: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 6, 2024
CVE-2024-0139: Undefined Security Weakness4.4 MediumN/A0%Dec 6, 2024
127351-127375 of 587477