The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-41783: Improper Neutralization of Special Elements used in a Command9.1 CriticalN/A0%Jan 19, 2025
CVE-2024-41743: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jan 19, 2025
CVE-2024-41742: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jan 19, 2025
CVE-2024-38337: Incorrect Permission Assignment for Critical Resource9.1 CriticalN/A0%Jan 19, 2025
CVE-2024-57923: Reachable Assertion5.5 MediumN/A0%Jan 19, 2025
CVE-2024-45654: Reliance on Untrusted Inputs in a Security Decision4.3 MediumN/A0%Jan 19, 2025
CVE-2024-45653: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Jan 19, 2025
CVE-2024-45652: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jan 19, 2025
CVE-2024-45662: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jan 18, 2025
CVE-2024-49824: Client-Side Enforcement of Server-Side Security6.5 MediumN/A0%Jan 18, 2025
CVE-2024-49354: Exposure of Sensitive Information Due to Incompatible Policies5.3 MediumN/A0%Jan 18, 2025
CVE-2024-47113: XML Injection (aka Blind XPath Injection)8.1 HighN/A0%Jan 18, 2025
CVE-2024-47106: Files or Directories Accessible to External Parties5.3 MediumN/A0%Jan 18, 2025
CVE-2024-51448: Insecure Inherited Permissions6.7 MediumN/A0%Jan 18, 2025
CVE-2024-49338: Improper Management of Sensitive Trace Data4.4 MediumN/A0%Jan 18, 2025
CVE-2024-51462: Modification of Assumed-Immutable Data (MAID)4.0 MediumN/A0%Jan 17, 2025
CVE-2024-52363: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jan 17, 2025
CVE-2024-41746: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jan 16, 2025
CVE-2024-52898: Generation of Error Message Containing Sensitive Information6.2 MediumN/A0%Jan 14, 2025
CVE-2024-51456: Use of RSA Algorithm without OAEP5.9 MediumN/A0%Jan 12, 2025
CVE-2024-49785: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2025
CVE-2021-29669: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 12, 2025
CVE-2024-41787: Time-of-check Time-of-use (TOCTOU) Race Condition9.8 CriticalN/A0%Jan 10, 2025
CVE-2024-43176: Improper Ownership Management5.4 MediumN/A0%Jan 9, 2025
CVE-2022-22491: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Jan 9, 2025
2201-2225 of 9776
‹›