The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-25042: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 18, 2024
CVE-2024-52361: Plaintext Storage of a Password5.7 MediumN/A0%Dec 18, 2024
CVE-2024-47119: Improper Certificate Validation5.9 MediumN/A0%Dec 18, 2024
CVE-2023-50956: Plaintext Storage of a Password4.4 MediumN/A0%Dec 18, 2024
CVE-2024-47104: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Dec 18, 2024
CVE-2024-49820: Cleartext Transmission of Sensitive Information3.7 LowN/A0%Dec 17, 2024
CVE-2024-49819: Cleartext Transmission of Sensitive Information4.1 MediumN/A0%Dec 17, 2024
CVE-2024-49818: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Dec 17, 2024
CVE-2024-49817: Password in Configuration File4.4 MediumN/A0%Dec 17, 2024
CVE-2024-49816: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Dec 17, 2024
CVE-2024-31892: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Dec 14, 2024
CVE-2024-31891: Execution with Unnecessary Privileges7.8 HighN/A0%Dec 14, 2024
CVE-2024-52901: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Dec 12, 2024
CVE-2024-51460: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Dec 11, 2024
CVE-2023-23472: Exposure of Sensitive System Information to an Unauthorized Control Sphere3.1 LowN/A0%Dec 11, 2024
CVE-2023-37395: Use of a Broken or Risky Cryptographic Algorithm2.5 LowN/A0%Dec 11, 2024
CVE-2024-35117: Cleartext Storage of Sensitive Information4.4 MediumN/A0%Dec 11, 2024
CVE-2024-47117: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Dec 10, 2024
CVE-2024-47107: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 7, 2024
CVE-2024-41762: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Dec 7, 2024
CVE-2024-47115: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Dec 7, 2024
CVE-2024-37071: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Dec 7, 2024
CVE-2024-51465: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Dec 4, 2024
CVE-2024-45676: Insufficient Type Distinction4.3 MediumN/A0%Dec 3, 2024
CVE-2024-41777: Use of Hard-coded Credentials7.5 HighN/A0%Dec 3, 2024
2276-2300 of 9776
‹›