The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-41776: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Dec 3, 2024
CVE-2024-41775: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Dec 3, 2024
CVE-2024-25020: Unrestricted Upload of File with Dangerous Type5.5 MediumN/A0%Dec 3, 2024
CVE-2024-40691: Unrestricted Upload of File with Dangerous Type8.0 HighN/A0%Dec 3, 2024
CVE-2024-25036: Authentication Bypass Using an Alternate Path or Channel4.3 MediumN/A0%Dec 3, 2024
CVE-2024-25035: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Dec 3, 2024
CVE-2024-25019: Unrestricted Upload of File with Dangerous Type5.5 MediumN/A0%Dec 3, 2024
CVE-2021-29892: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Dec 3, 2024
CVE-2024-53979: Cleartext Storage of Sensitive Information8.2 HighN/A0%Nov 29, 2024
CVE-2024-53865: Cleartext Storage of Sensitive Information8.2 HighN/A0%Nov 29, 2024
CVE-2024-49806: Use of Hard-coded Credentials9.4 CriticalN/A0%Nov 29, 2024
CVE-2024-49805: Use of Hard-coded Credentials9.4 CriticalN/A0%Nov 29, 2024
CVE-2024-49804: Execution with Unnecessary Privileges7.8 HighN/A0%Nov 29, 2024
CVE-2024-49803: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Nov 29, 2024
CVE-2017-13320: Out-of-bounds Read6.5 MediumN/A0%Nov 27, 2024
CVE-2024-49353: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A0%Nov 26, 2024
CVE-2024-49351: Plaintext Storage of a Password5.5 MediumN/A0%Nov 26, 2024
CVE-2024-52899: Improper Control of Generation of Code8.5 HighN/A0%Nov 26, 2024
CVE-2023-45181: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 25, 2024
CVE-2023-26280: Incorrect Privilege Assignment5.3 MediumN/A0%Nov 25, 2024
CVE-2024-35160: Insufficient Session Expiration4.3 MediumN/A0%Nov 23, 2024
CVE-2024-41761: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Nov 23, 2024
CVE-2024-41781: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.1 MediumN/A0%Nov 22, 2024
CVE-2024-41779: Time-of-check Time-of-use (TOCTOU) Race Condition9.8 CriticalN/A0%Nov 22, 2024
CVE-2024-45663: Undefined Security Weakness6.5 MediumN/A0%Nov 21, 2024
2301-2325 of 9776
‹›