The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-54181: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A0%Dec 30, 2024
CVE-2024-56701: Undefined Security Weakness5.5 MediumN/A0%Dec 28, 2024
CVE-2024-53210: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Dec 27, 2024
CVE-2024-52906: Concurrent Execution using Shared Resource with Improper Synchronization5.5 MediumN/A0%Dec 25, 2024
CVE-2024-47102: Incorrect Authorization5.5 MediumN/A0%Dec 25, 2024
CVE-2024-39727: Use of Web Link to Untrusted Target with window.opener Access6.1 MediumN/A0%Dec 25, 2024
CVE-2024-39725: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Dec 25, 2024
CVE-2024-51464: Authentication Bypass Using an Alternate Path or Channel4.3 MediumN/A0%Dec 21, 2024
CVE-2024-51463: Server-Side Request Forgery (SSRF)5.4 MediumN/A1%Dec 21, 2024
CVE-2024-51466: Improper Neutralization of Special Elements used in an Expression Language Statement9.0 CriticalN/A0%Dec 20, 2024
CVE-2024-40695: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Dec 20, 2024
CVE-2024-28767: Improper Neutralization of Special Elements used in an OS Command6.8 MediumN/A0%Dec 20, 2024
CVE-2024-52897: Generation of Error Message Containing Sensitive Information6.2 MediumN/A0%Dec 19, 2024
CVE-2024-51471: Out-of-bounds Read5.3 MediumN/A0%Dec 19, 2024
CVE-2024-49336: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Dec 19, 2024
CVE-2024-52896: Generation of Error Message Containing Sensitive Information6.2 MediumN/A0%Dec 19, 2024
CVE-2024-35141: Execution with Unnecessary Privileges7.8 HighN/A0%Dec 19, 2024
CVE-2023-30443: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Dec 19, 2024
CVE-2022-33954: Insufficiently Protected Credentials4.6 MediumN/A0%Dec 19, 2024
CVE-2021-39081: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Dec 19, 2024
CVE-2021-29827: Improper Restriction of Rendered UI Layers or Frames5.2 MediumN/A0%Dec 19, 2024
CVE-2021-20553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 19, 2024
CVE-2024-51470: Improper Check for Unusual or Exceptional Conditions6.5 MediumN/A0%Dec 18, 2024
CVE-2024-45082: URL Redirection to Untrusted Site6.8 MediumN/A0%Dec 18, 2024
CVE-2024-41752: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Dec 18, 2024
2251-2275 of 9776
‹›