The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-41909: Improper Validation of Integrity Check Value5.9 MediumN/A0%Aug 12, 2024
CVE-2024-41890: Missing Release of Resource after Effective Lifetime5.3 MediumN/A1%Aug 12, 2024
CVE-2024-41888: Missing Release of Resource after Effective Lifetime5.3 MediumN/A1%Aug 12, 2024
CVE-2024-30188: Improper Input Validation8.1 HighN/A88%Aug 12, 2024
CVE-2024-29831: Improper Input Validation8.8 HighN/A0%Aug 12, 2024
CVE-2024-42222: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Aug 7, 2024
CVE-2024-42062: Incorrect Authorization7.2 HighN/A0%Aug 7, 2024
CVE-2024-36448: Server-Side Request Forgery (SSRF)7.3 HighN/A0%Aug 5, 2024
CVE-2024-38856: Incorrect Authorization9.8 CriticalN/A94%Aug 5, 2024
CVE-2024-42447: Insufficient Session Expiration9.8 CriticalN/A0%Aug 5, 2024
CVE-2024-36268: Improper Control of Generation of Code9.8 CriticalN/A5%Aug 2, 2024
CVE-2024-27182: Files or Directories Accessible to External Parties4.9 MediumN/A0%Aug 2, 2024
CVE-2024-27181: Improper Privilege Management8.8 HighN/A0%Aug 2, 2024
CVE-2023-48396: Authentication Bypass by Spoofing9.1 CriticalN/A0%Jul 30, 2024
CVE-2024-35296: Improper Input Validation8.2 HighN/A0%Jul 26, 2024
CVE-2024-35161: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Jul 26, 2024
CVE-2023-38522: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Jul 26, 2024
CVE-2024-25090: Improper Input Validation5.4 MediumN/A1%Jul 26, 2024
CVE-2024-41801: URL Redirection to Untrusted Site4.7 MediumN/A0%Jul 25, 2024
CVE-2024-39676: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 24, 2024
CVE-2023-48362: Improper Restriction of XML External Entity Reference8.8 HighN/A0%Jul 24, 2024
CVE-2024-41178: Insertion of Sensitive Information into Log File7.5 HighN/A0%Jul 23, 2024
CVE-2024-23321: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Jul 22, 2024
CVE-2024-41172: Missing Release of Memory after Effective Lifetime7.5 HighN/A1%Jul 19, 2024
CVE-2024-32007: Uncontrolled Resource Consumption7.5 HighN/A0%Jul 19, 2024
1751-1775 of 4467
‹›