The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-9367: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Dec 12, 2024
CVE-2024-8647: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Dec 12, 2024
CVE-2024-8233: Inefficient Algorithmic Complexity7.5 HighN/A1%Dec 12, 2024
CVE-2024-8179: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 12, 2024
CVE-2024-54117: Exposure of Sensitive Information to an Unauthorized Actor6.2 MediumN/A0%Dec 12, 2024
CVE-2024-54116: Improper Check for Unusual or Exceptional Conditions4.3 MediumN/A0%Dec 12, 2024
CVE-2024-54115: Improper Check for Unusual or Exceptional Conditions4.3 MediumN/A0%Dec 12, 2024
CVE-2024-54114: Improper Check for Unusual or Exceptional Conditions4.4 MediumN/A0%Dec 12, 2024
CVE-2024-54113: Uncontrolled Resource Consumption6.5 MediumN/A0%Dec 12, 2024
CVE-2024-54112: Improper Restriction of Rendered UI Layers or Frames5.5 MediumN/A0%Dec 12, 2024
CVE-2024-54111: Insufficient Verification of Data Authenticity5.7 MediumN/A0%Dec 12, 2024
CVE-2024-54110: Improper Restriction of Rendered UI Layers or Frames6.2 MediumN/A0%Dec 12, 2024
CVE-2024-54109: Out-of-bounds Read6.5 MediumN/A0%Dec 12, 2024
CVE-2024-54108: Out-of-bounds Read6.5 MediumN/A0%Dec 12, 2024
CVE-2024-54107: Out-of-bounds Read7.1 HighN/A0%Dec 12, 2024
CVE-2024-54106: Uncaught Exception7.1 HighN/A0%Dec 12, 2024
CVE-2024-54105: Buffer Copy without Checking Size of Input5.1 MediumN/A0%Dec 12, 2024
CVE-2024-54104: Undefined Security Weakness6.2 MediumN/A0%Dec 12, 2024
CVE-2024-54103: Undefined Security Weakness6.1 MediumN/A0%Dec 12, 2024
CVE-2024-54102: Concurrent Execution using Shared Resource with Improper Synchronization6.1 MediumN/A0%Dec 12, 2024
CVE-2024-54101: Improper Input Validation6.2 MediumN/A0%Dec 12, 2024
CVE-2024-54100: Improper Input Validation6.2 MediumN/A0%Dec 12, 2024
CVE-2024-54099: Files or Directories Accessible to External Parties6.7 MediumN/A0%Dec 12, 2024
CVE-2024-54098: Undefined Security Weakness8.5 HighN/A0%Dec 12, 2024
CVE-2024-54097: External Control of System or Configuration Setting7.3 HighN/A0%Dec 12, 2024
142201-142225 of 417011