The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-45657: Incorrect Permission Assignment for Critical Resource5.0 MediumN/A0%Feb 4, 2025
CVE-2024-43187: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Feb 4, 2025
CVE-2024-40700: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 4, 2025
CVE-2024-35138: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Feb 4, 2025
CVE-2024-45659: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Feb 4, 2025
CVE-2024-49349: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 31, 2025
CVE-2024-49339: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-49807: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 31, 2025
CVE-2024-47116: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 31, 2025
CVE-2024-47103: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2024-45089: Observable Discrepancy4.3 MediumN/A0%Jan 31, 2025
CVE-2024-40696: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 31, 2025
CVE-2023-38739: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jan 31, 2025
CVE-2024-45650: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Jan 31, 2025
CVE-2022-43916: Improper Restriction of Communication Channel to Intended Endpoints6.8 MediumN/A0%Jan 30, 2025
CVE-2023-37413: Observable Response Discrepancy5.3 MediumN/A0%Jan 29, 2025
CVE-2023-37412: Execution with Unnecessary Privileges4.4 MediumN/A0%Jan 29, 2025
CVE-2023-37398: Weak Password Requirements5.9 MediumN/A0%Jan 29, 2025
CVE-2023-35907: Weak Password Requirements5.9 MediumN/A0%Jan 29, 2025
CVE-2023-33838: Use of a One-Way Hash without a Salt4.4 MediumN/A0%Jan 29, 2025
CVE-2023-35017: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Jan 29, 2025
CVE-2024-22315: Improper Restriction of Communication Channel to Intended Endpoints4.0 MediumN/A0%Jan 28, 2025
CVE-2024-27263: Channel Accessible by Non-Endpoint5.3 MediumN/A0%Jan 28, 2025
CVE-2023-50316: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Jan 28, 2025
CVE-2024-28786: Cleartext Transmission of Sensitive Information6.5 MediumN/A0%Jan 28, 2025
2126-2150 of 9776
‹›