The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-12397: Inconsistent Interpretation of HTTP Requests7.4 HighN/A1%Dec 12, 2024
CVE-2024-53677: Unrestricted Upload of File with Dangerous Type9.8 Critical9.5 Critical93%Dec 11, 2024
CVE-2024-53949: Incorrect Authorization6.5 Medium7.6 High0%Dec 9, 2024
CVE-2024-53948: Generation of Error Message Containing Sensitive Information5.3 Medium5.3 Medium0%Dec 9, 2024
CVE-2024-53947: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical2.3 Low0%Dec 9, 2024
CVE-2024-46901: Improper Input Validation3.1 LowN/A6%Dec 9, 2024
CVE-2024-53703: Stack-based Buffer Overflow8.1 HighN/A29%Dec 5, 2024
CVE-2022-41137: Deserialization of Untrusted Data8.3 HighN/A9%Dec 5, 2024
CVE-2024-45106: Improper Authentication8.1 HighN/A0%Dec 3, 2024
CVE-2024-52338: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 28, 2024
CVE-2024-51569: Out-of-bounds Read7.5 HighN/A0%Nov 26, 2024
CVE-2024-47250: Out-of-bounds Read5.0 MediumN/A0%Nov 26, 2024
CVE-2024-47249: Improper Validation of Array Index5.0 MediumN/A0%Nov 26, 2024
CVE-2024-47248: Buffer Copy without Checking Size of Input6.3 MediumN/A0%Nov 26, 2024
CVE-2024-45719: Inadequate Encryption Strength2.6 LowN/A0%Nov 22, 2024
CVE-2024-52067: Insertion of Sensitive Information into Log File4.9 Medium6.9 Medium0%Nov 21, 2024
CVE-2024-31141: Files or Directories Accessible to External Parties6.5 MediumN/A0%Nov 19, 2024
CVE-2024-52318: Inadequate Encryption Strength6.1 MediumN/A12%Nov 18, 2024
CVE-2024-52317: Inadequate Encryption Strength6.5 MediumN/A17%Nov 18, 2024
CVE-2024-52316: Unchecked Error Condition9.8 CriticalN/A2%Nov 18, 2024
CVE-2024-47208: Server-Side Request Forgery (SSRF)9.8 CriticalN/A0%Nov 18, 2024
CVE-2024-45791: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Nov 18, 2024
CVE-2024-45505: Improper Neutralization of Special Elements used in a Command8.8 HighN/A3%Nov 18, 2024
CVE-2024-41151: Deserialization of Untrusted Data8.8 HighN/A1%Nov 18, 2024
CVE-2024-48962: Improper Control of Generation of Code8.8 High8.9 High1%Nov 18, 2024
1676-1700 of 4467
‹›