The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-27317: Improper Limitation of a Pathname to a Restricted Directory8.4 HighN/A1%Mar 12, 2024
CVE-2024-27135: Improper Control of Dynamically-Managed Code Resources8.5 HighN/A0%Mar 12, 2024
CVE-2022-34321: Missing Authentication for Critical Function8.2 HighN/A0%Mar 12, 2024
CVE-2024-28098: Incorrect Authorization6.4 MediumN/A0%Mar 12, 2024
CVE-2023-41313: Observable Timing Discrepancy9.8 CriticalN/A0%Mar 12, 2024
CVE-2023-50740: Insertion of Sensitive Information into Log File5.3 MediumN/A0%Mar 6, 2024
CVE-2024-26580: Deserialization of Untrusted Data9.1 CriticalN/A0%Mar 6, 2024
CVE-2024-27138: Incorrect Authorization7.5 HighN/A0%Mar 1, 2024
CVE-2024-27139: Incorrect Authorization7.5 HighN/A1%Mar 1, 2024
CVE-2024-27140: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A6%Mar 1, 2024
CVE-2023-50378: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Mar 1, 2024
CVE-2024-26280: Incorrect Default Permissions4.7 MediumN/A0%Mar 1, 2024
CVE-2024-27906: Missing Authorization5.9 MediumN/A0%Feb 29, 2024
CVE-2024-23946: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A3%Feb 28, 2024
CVE-2024-25065: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Feb 28, 2024
CVE-2024-23807: Use After Free9.8 CriticalN/A1%Feb 28, 2024
CVE-2024-26016: Incorrect Authorization4.3 MediumN/A0%Feb 28, 2024
CVE-2024-24779: Incorrect Authorization5.0 MediumN/A0%Feb 28, 2024
CVE-2024-24772: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A1%Feb 28, 2024
CVE-2024-24773: Incorrect Authorization4.9 MediumN/A0%Feb 28, 2024
CVE-2024-27315: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Feb 28, 2024
CVE-2023-50380: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Feb 27, 2024
CVE-2024-21742: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.3 MediumN/A1%Feb 27, 2024
CVE-2024-27905: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A3%Feb 27, 2024
CVE-2023-51747: Improper Input Validation7.1 HighN/A0%Feb 27, 2024
1876-1900 of 4467
‹›