The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-35111: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jan 25, 2025
CVE-2023-38716: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jan 25, 2025
CVE-2023-38714: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jan 25, 2025
CVE-2023-38713: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jan 25, 2025
CVE-2023-38271: Insertion of Sensitive Information into Log File4.3 MediumN/A0%Jan 25, 2025
CVE-2023-38013: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Jan 25, 2025
CVE-2023-38012: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Jan 25, 2025
CVE-2024-35122: Incorrect Privilege Assignment2.8 LowN/A0%Jan 24, 2025
CVE-2024-45077: Improper Control of Filename for Include/Require Statement in PHP Program6.5 MediumN/A0%Jan 24, 2025
CVE-2024-41757: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Jan 24, 2025
CVE-2024-40706: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Jan 24, 2025
CVE-2024-40693: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Jan 24, 2025
CVE-2024-25034: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Jan 24, 2025
CVE-2024-41739: Uncontrolled Search Path Element8.8 HighN/A0%Jan 24, 2025
CVE-2025-23227: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 23, 2025
CVE-2024-45672: Modification of Assumed-Immutable Data (MAID)6.0 MediumN/A0%Jan 23, 2025
CVE-2023-50309: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 23, 2025
CVE-2023-32340: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Jan 23, 2025
CVE-2024-51457: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jan 22, 2025
CVE-2024-31903: Deserialization of Untrusted Data8.8 HighN/A17%Jan 22, 2025
CVE-2024-45091: Insertion of Sensitive Information into Log File6.2 MediumN/A0%Jan 21, 2025
CVE-2024-22349: Use of Web Browser Cache Containing Sensitive Information3.3 LowN/A0%Jan 20, 2025
CVE-2024-22348: Permissive Cross-domain Policy with Untrusted Domains7.5 HighN/A0%Jan 20, 2025
CVE-2024-22347: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A0%Jan 20, 2025
CVE-2024-45647: Unverified Password Change5.6 MediumN/A0%Jan 20, 2025
2176-2200 of 9776
‹›