The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-45784: Debug Messages Revealing Unnecessary Information7.5 HighN/A1%Nov 15, 2024
CVE-2024-50306: Unchecked Return Value9.1 CriticalN/A1%Nov 14, 2024
CVE-2024-50305: Improper Input Validation7.5 HighN/A0%Nov 14, 2024
CVE-2024-38479: Improper Input Validation7.5 HighN/A1%Nov 14, 2024
CVE-2024-50386: Improper Input Validation8.5 HighN/A1%Nov 12, 2024
CVE-2024-38286: Allocation of Resources Without Limits or Throttling8.6 HighN/A0%Nov 7, 2024
CVE-2024-23590: Session Fixation9.1 CriticalN/A0%Nov 4, 2024
CVE-2024-43383: Deserialization of Untrusted Data8.0 HighN/A4%Oct 31, 2024
CVE-2024-45477: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A1%Oct 29, 2024
CVE-2024-45693: Cross-Site Request Forgery (CSRF)8.0 HighN/A0%Oct 16, 2024
CVE-2024-45462: Insufficient Session Expiration6.3 MediumN/A0%Oct 16, 2024
CVE-2024-45461: Missing Authorization5.7 MediumN/A0%Oct 16, 2024
CVE-2024-45219: Improper Input Validation8.5 HighN/A0%Oct 16, 2024
CVE-2024-45217: Initialization of a Resource with an Insecure Default8.1 HighN/A0%Oct 16, 2024
CVE-2024-45216: Improper Authentication9.8 CriticalN/A94%Oct 16, 2024
CVE-2023-50780: Improper Authorization8.8 HighN/A3%Oct 14, 2024
CVE-2024-46911: Cross-Site Request Forgery (CSRF)4.7 MediumN/A0%Oct 14, 2024
CVE-2024-28168: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Oct 9, 2024
CVE-2024-9621: Insertion of Sensitive Information into Log File5.3 MediumN/A1%Oct 8, 2024
CVE-2024-47554: Uncontrolled Resource Consumption4.3 MediumN/A0%Oct 3, 2024
CVE-2024-47561: Deserialization of Untrusted Data7.3 High9.2 Critical1%Oct 3, 2024
CVE-2024-9355: Use of Uninitialized Variable6.5 MediumN/A0%Oct 1, 2024
CVE-2024-45772: Deserialization of Untrusted Data5.1 MediumN/A0%Sep 30, 2024
CVE-2024-40761: Inadequate Encryption Strength5.3 MediumN/A1%Sep 25, 2024
CVE-2024-23454: Creation of Temporary File With Insecure Permissions6.2 MediumN/A0%Sep 25, 2024
1701-1725 of 4467
‹›