The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-27137: Improper Authentication5.3 MediumN/A0%Feb 4, 2025
CVE-2025-23015: Privilege Defined With Unsafe Actions8.8 HighN/A0%Feb 4, 2025
CVE-2024-13504: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jan 31, 2025
CVE-2024-23953: Observable Timing Discrepancy6.5 MediumN/A2%Jan 28, 2025
CVE-2025-24783: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)7.5 HighN/A0%Jan 27, 2025
CVE-2025-24814: Execution with Unnecessary Privileges5.5 MediumN/A0%Jan 27, 2025
CVE-2024-52012: Relative Path Traversal5.4 MediumN/A3%Jan 27, 2025
CVE-2024-53299: Uncontrolled Resource Consumption6.5 MediumN/A1%Jan 23, 2025
CVE-2024-45479: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Jan 21, 2025
CVE-2024-45478: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 21, 2025
CVE-2025-23184: Uncontrolled Resource Consumption5.9 MediumN/A1%Jan 21, 2025
CVE-2024-45627: Files or Directories Accessible to External Parties5.9 MediumN/A0%Jan 14, 2025
CVE-2025-22828: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A15%Jan 13, 2025
CVE-2024-54676: Deserialization of Untrusted Data9.8 CriticalN/A3%Jan 8, 2025
CVE-2024-45033: Insufficient Session Expiration8.1 HighN/A0%Jan 8, 2025
CVE-2024-56512: Not Using Complete Mediation5.4 Medium2.1 Low29%Dec 28, 2024
CVE-2024-52046: Deserialization of Untrusted Data9.8 Critical10.0 Critical80%Dec 25, 2024
CVE-2024-43441: Authentication Bypass by Assumed-Immutable Data9.8 CriticalN/A86%Dec 24, 2024
CVE-2024-45387: Improper Neutralization of Special Elements used in an SQL Command9.9 CriticalN/A41%Dec 23, 2024
CVE-2024-23945: Generation of Error Message Containing Sensitive Information5.9 MediumN/A9%Dec 23, 2024
CVE-2024-56337: Time-of-check Time-of-use (TOCTOU) Race Condition9.8 CriticalN/A10%Dec 20, 2024
CVE-2024-56128: Incorrect Implementation of Authentication Algorithm5.3 MediumN/A0%Dec 18, 2024
CVE-2024-54677: Uncontrolled Resource Consumption5.3 MediumN/A1%Dec 17, 2024
CVE-2024-50379: Time-of-check Time-of-use (TOCTOU) Race Condition9.8 CriticalN/A89%Dec 17, 2024
CVE-2024-55633: Incorrect Authorization6.5 Medium7.1 High1%Dec 12, 2024
1651-1675 of 4467
‹›