The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-40679: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Jan 8, 2025
CVE-2024-40702: Improper Certificate Validation8.2 HighN/A0%Jan 7, 2025
CVE-2024-28778: Use of Hard-coded Credentials6.5 MediumN/A0%Jan 7, 2025
CVE-2024-25037: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jan 7, 2025
CVE-2022-22363: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jan 7, 2025
CVE-2021-20455: Generation of Error Message Containing Sensitive Information3.7 LowN/A0%Jan 7, 2025
CVE-2024-45640: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Jan 7, 2025
CVE-2024-45100: Allocation of Resources Without Limits or Throttling4.9 MediumN/A0%Jan 7, 2025
CVE-2024-52893: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jan 7, 2025
CVE-2024-52891: Improper Output Neutralization for Logs5.4 MediumN/A0%Jan 7, 2025
CVE-2024-52367: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Jan 7, 2025
CVE-2024-52366: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Jan 7, 2025
CVE-2024-51472: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)3.1 LowN/A0%Jan 6, 2025
CVE-2024-56765: Use After Free7.8 HighN/A0%Jan 6, 2025
CVE-2024-31914: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 6, 2025
CVE-2024-31913: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jan 6, 2025
CVE-2024-41768: Missing Standardized Error Handling Mechanism6.5 MediumN/A0%Jan 4, 2025
CVE-2024-41767: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jan 4, 2025
CVE-2024-41766: Inefficient Regular Expression Complexity7.5 HighN/A0%Jan 4, 2025
CVE-2024-41765: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jan 4, 2025
CVE-2024-41763: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Jan 4, 2025
CVE-2024-55897: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Jan 3, 2025
CVE-2024-55896: User Interface (UI) Misrepresentation of Critical Information5.4 MediumN/A0%Jan 3, 2025
CVE-2024-5591: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jan 3, 2025
CVE-2024-41780: Exposure of Private Personal Information to an Unauthorized Actor4.2 MediumN/A0%Jan 3, 2025
2226-2250 of 9776
‹›