The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-52792: Externally Controlled Reference to a Resource in Another Sphere6.5 MediumN/A0%Dec 17, 2024
CVE-2024-51175: Cleartext Storage of Sensitive Information7.5 HighN/A0%Dec 17, 2024
CVE-2024-31668: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A0%Dec 17, 2024
CVE-2024-29646: Buffer Copy without Checking Size of Input9.8 CriticalN/A1%Dec 17, 2024
CVE-2023-37940: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Dec 17, 2024
CVE-2024-55059: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Dec 17, 2024
CVE-2024-55058: Use of Incorrectly-Resolved Name or Reference4.3 MediumN/A0%Dec 17, 2024
CVE-2024-55057: Use of Password Hash With Insufficient Computational Effort5.4 MediumN/A0%Dec 17, 2024
CVE-2024-55056: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 17, 2024
CVE-2024-12539: Incorrect Authorization6.5 Medium6.0 Medium0%Dec 17, 2024
CVE-2024-11993: Improper Neutralization of Input During Web Page Generation6.1 Medium4.6 Medium0%Dec 17, 2024
CVE-2024-55516: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Dec 17, 2024
CVE-2024-55515: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A0%Dec 17, 2024
CVE-2024-55514: Unrestricted Upload of File with Dangerous Type6.3 MediumN/A0%Dec 17, 2024
CVE-2024-55513: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Dec 17, 2024
CVE-2024-49194: Improper Neutralization of Special Elements used in a Command7.3 HighN/A2%Dec 17, 2024
CVE-2024-56139: Stack-based Buffer OverflowN/A6.9 Medium0%Dec 17, 2024
CVE-2024-51479: Improper Authorization7.5 HighN/A67%Dec 17, 2024
CVE-2024-55496: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/A0%Dec 17, 2024
CVE-2024-54662: Incorrect Authorization9.1 CriticalN/A0%Dec 17, 2024
CVE-2024-49820: Cleartext Transmission of Sensitive Information3.7 LowN/A0%Dec 17, 2024
CVE-2024-49819: Cleartext Transmission of Sensitive Information4.1 MediumN/A0%Dec 17, 2024
CVE-2024-49818: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Dec 17, 2024
CVE-2024-49817: Password in Configuration File4.4 MediumN/A0%Dec 17, 2024
CVE-2024-49816: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Dec 17, 2024
142176-142200 of 413066