The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-54920: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Dec 9, 2024
CVE-2024-54919: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-49603: Function Call With Incorrectly Specified Argument Value4.3 MediumN/A0%Dec 9, 2024
CVE-2024-49602: Multiple Unlocks of a Critical Resource6.5 MediumN/A1%Dec 9, 2024
CVE-2024-49600: Improper Access Control7.8 HighN/A0%Dec 9, 2024
CVE-2024-42426: Uncontrolled Resource Consumption4.3 MediumN/A1%Dec 9, 2024
CVE-2024-38485: URL Redirection to Untrusted Site4.3 MediumN/A0%Dec 9, 2024
CVE-2024-11991: Use of Uninitialized Resource5.6 MediumN/A0%Dec 9, 2024
CVE-2023-7298: Out-of-bounds Write4.4 MediumN/A0%Dec 9, 2024
CVE-2024-8259: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Dec 9, 2024
CVE-2024-54937: Out-of-bounds Read5.3 MediumN/A0%Dec 9, 2024
CVE-2024-54936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 9, 2024
CVE-2024-54929: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Dec 9, 2024
CVE-2024-54218: Missing Authorization6.5 MediumN/A0%Dec 9, 2024
CVE-2024-53949: Incorrect Authorization6.5 Medium7.6 High0%Dec 9, 2024
CVE-2024-53948: Generation of Error Message Containing Sensitive Information5.3 Medium5.3 Medium0%Dec 9, 2024
CVE-2024-53947: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical2.3 Low0%Dec 9, 2024
CVE-2024-53814: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A1%Dec 9, 2024
CVE-2024-52480: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-52391: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-52385: Improper Control of Filename for Include/Require Statement in PHP Program4.3 MediumN/A0%Dec 9, 2024
CVE-2023-41953: Missing Authorization5.3 MediumN/A0%Dec 9, 2024
CVE-2024-54260: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2024
CVE-2024-54255: URL Redirection to Untrusted Site4.7 MediumN/A1%Dec 9, 2024
CVE-2024-54254: Missing Authorization6.3 MediumN/A0%Dec 9, 2024
129176-129200 of 399616
‹›