The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-52892: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 6, 2025
CVE-2025-0799: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Feb 6, 2025
CVE-2024-51450: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A0%Feb 6, 2025
CVE-2024-49814: Execution with Unnecessary Privileges7.8 HighN/A0%Feb 6, 2025
CVE-2024-49800: Cleartext Storage of Sensitive Information in Memory4.3 MediumN/A0%Feb 6, 2025
CVE-2024-49798: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Feb 6, 2025
CVE-2024-49797: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Feb 6, 2025
CVE-2024-49796: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Feb 6, 2025
CVE-2024-49795: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Feb 6, 2025
CVE-2024-49794: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Feb 6, 2025
CVE-2024-49793: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 6, 2025
CVE-2024-49792: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 6, 2025
CVE-2024-49791: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Feb 6, 2025
CVE-2024-56473: Improper Output Neutralization for Logs5.3 MediumN/A0%Feb 5, 2025
CVE-2024-56472: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Feb 5, 2025
CVE-2024-56471: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Feb 5, 2025
CVE-2024-56470: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Feb 5, 2025
CVE-2024-38318: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.8 MediumN/A0%Feb 5, 2025
CVE-2024-38317: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 5, 2025
CVE-2024-38316: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Feb 5, 2025
CVE-2024-52365: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Feb 5, 2025
CVE-2024-52364: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 5, 2025
CVE-2024-49348: Incorrect Privilege Assignment4.3 MediumN/A0%Feb 5, 2025
CVE-2024-49352: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Feb 5, 2025
CVE-2024-45658: Generation of Error Message Containing Sensitive Information2.7 LowN/A0%Feb 4, 2025
2101-2125 of 9776
‹›