The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-2700: Cleartext Storage of Sensitive Information in an Environment Variable7.0 HighN/A0%Apr 4, 2024
CVE-2024-29008: Improper Input Validation6.4 MediumN/A0%Apr 4, 2024
CVE-2024-29007: Server-Side Request Forgery (SSRF)7.3 HighN/A0%Apr 4, 2024
CVE-2024-29006: Authentication Bypass by Spoofing9.8 CriticalN/A0%Apr 4, 2024
CVE-2024-29834: Incorrect Authorization6.4 MediumN/A0%Apr 2, 2024
CVE-2024-1300: Missing Release of Resource after Effective Lifetime5.4 MediumN/A1%Apr 2, 2024
CVE-2024-23537: Improper Privilege Management8.4 HighN/A0%Mar 29, 2024
CVE-2024-23538: Improper Neutralization of Special Elements used in an SQL Command9.9 CriticalN/A0%Mar 29, 2024
CVE-2024-23539: Improper Neutralization of Special Elements used in an SQL Command8.3 HighN/A1%Mar 29, 2024
CVE-2024-1023: Missing Release of Memory after Effective Lifetime6.5 MediumN/A2%Mar 27, 2024
CVE-2024-1521: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Mar 27, 2024
CVE-2024-29735: Improper Preservation of Permissions5.3 MediumN/A0%Mar 26, 2024
CVE-2023-5685: Uncontrolled Resource Consumption7.5 HighN/A3%Mar 22, 2024
CVE-2024-27438: Download of Code Without Integrity Check9.8 CriticalN/A3%Mar 21, 2024
CVE-2024-26307: Concurrent Execution using Shared Resource with Improper Synchronization5.3 MediumN/A0%Mar 21, 2024
CVE-2024-29131: Out-of-bounds Write7.3 HighN/A0%Mar 21, 2024
CVE-2024-29133: Out-of-bounds Write5.4 MediumN/A1%Mar 21, 2024
CVE-2024-27439: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Mar 19, 2024
CVE-2024-24683: Improper Input Validation6.5 MediumN/A0%Mar 19, 2024
CVE-2024-28752: Server-Side Request Forgery (SSRF)9.3 CriticalN/A1%Mar 15, 2024
CVE-2024-23944: Missing Authorization5.3 MediumN/A0%Mar 15, 2024
CVE-2024-28746: Improper Preservation of Permissions8.1 HighN/A0%Mar 14, 2024
CVE-2024-23672: Incomplete Cleanup6.3 MediumN/A1%Mar 13, 2024
CVE-2024-24549: Improper Input Validation7.5 HighN/A52%Mar 13, 2024
CVE-2024-27894: Improper Input Validation8.5 HighN/A0%Mar 12, 2024
1851-1875 of 4467
‹›