The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-55984: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 18, 2024
CVE-2024-55983: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 18, 2024
CVE-2024-55975: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 18, 2024
CVE-2024-54350: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2024
CVE-2024-52485: Missing Authorization6.5 MediumN/A0%Dec 18, 2024
CVE-2024-51646: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2024
CVE-2024-4996: Use of Hard-coded Password9.8 Critical9.3 Critical0%Dec 18, 2024
CVE-2024-4995: Selection of Less-Secure Algorithm During Negotiation9.8 Critical9.1 Critical0%Dec 18, 2024
CVE-2024-11926: Missing Authorization6.5 MediumN/A0%Dec 18, 2024
CVE-2024-11912: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A1%Dec 18, 2024
CVE-2024-11291: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Dec 18, 2024
CVE-2024-49677: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 18, 2024
CVE-2024-54270: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A3%Dec 18, 2024
CVE-2024-47104: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Dec 18, 2024
CVE-2024-12554: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 18, 2024
CVE-2024-12454: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Dec 18, 2024
CVE-2024-12340: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Dec 18, 2024
CVE-2024-11614: Out-of-bounds Read7.4 HighN/A0%Dec 18, 2024
CVE-2024-54457: Inclusion of Undocumented Features or Chicken Bits7.2 HighN/A0%Dec 18, 2024
CVE-2024-53688: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A0%Dec 18, 2024
CVE-2024-47397: Weak Authentication7.5 HighN/A0%Dec 18, 2024
CVE-2024-39703: Improper Neutralization of Special Elements used in a Command8.8 High8.7 High0%Dec 18, 2024
CVE-2024-1610: Improper Authentication9.8 Critical8.7 High0%Dec 18, 2024
CVE-2024-12287: Improper Authentication9.8 CriticalN/A0%Dec 18, 2024
CVE-2024-11295: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Dec 18, 2024
142151-142175 of 413066