The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-32656: Missing Authorization7.8 HighN/A0%Apr 22, 2024
CVE-2024-27349: Authentication Bypass by Spoofing9.1 CriticalN/A0%Apr 22, 2024
CVE-2024-27348: Improper Access Control9.8 CriticalN/A94%Apr 22, 2024
CVE-2024-27347: Server-Side Request Forgery (SSRF)5.3 MediumN/A1%Apr 22, 2024
CVE-2024-29733: Improper Certificate Validation2.7 LowN/A0%Apr 21, 2024
CVE-2024-29217: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Apr 21, 2024
CVE-2024-31869: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Apr 18, 2024
CVE-2024-1249: Origin Validation Error7.4 HighN/A0%Apr 17, 2024
CVE-2024-31391: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Apr 12, 2024
CVE-2024-27309: Incorrect Authorization7.4 HighN/A0%Apr 12, 2024
CVE-2024-31309: Improper Input Validation7.5 HighN/A2%Apr 10, 2024
CVE-2024-31867: Improper Input Validation6.5 MediumN/A1%Apr 9, 2024
CVE-2024-31868: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Apr 9, 2024
CVE-2024-31866: Improper Encoding or Escaping of Output9.8 CriticalN/A2%Apr 9, 2024
CVE-2024-31865: Improper Input Validation6.5 MediumN/A1%Apr 9, 2024
CVE-2024-31864: Improper Control of Generation of Code9.8 CriticalN/A1%Apr 9, 2024
CVE-2024-31863: Authentication Bypass by Spoofing5.3 MediumN/A0%Apr 9, 2024
CVE-2024-31862: Improper Input Validation5.3 MediumN/A0%Apr 9, 2024
CVE-2022-47894: Improper Input Validation5.3 MediumN/A0%Apr 9, 2024
CVE-2021-28656: Cross-Site Request Forgery (CSRF)5.4 MediumN/A2%Apr 9, 2024
CVE-2024-31860: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Apr 9, 2024
CVE-2024-24746: Loop with Unreachable Exit Condition7.5 HighN/A0%Apr 6, 2024
CVE-2024-27316: Allocation of Resources Without Limits or Throttling7.5 HighN/A89%Apr 4, 2024
CVE-2024-24795: Improper Neutralization of CRLF Sequences in HTTP Headers6.3 MediumN/A1%Apr 4, 2024
CVE-2023-38709: Improper Validation of Specified Quantity in Input7.3 HighN/A3%Apr 4, 2024
1826-1850 of 4467
‹›