The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-52360: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Nov 19, 2024
CVE-2024-52359: Incorrect User Management4.3 MediumN/A0%Nov 19, 2024
CVE-2024-37070: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Nov 19, 2024
CVE-2024-39726: Improper Restriction of XML External Entity Reference8.2 HighN/A0%Nov 15, 2024
CVE-2024-41784: Path Traversal: '...' (Triple Dot)7.5 HighN/A0%Nov 15, 2024
CVE-2024-43189: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Nov 15, 2024
CVE-2024-41785: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 15, 2024
CVE-2024-45670: Weak Password Recovery Mechanism for Forgotten Password5.6 MediumN/A0%Nov 14, 2024
CVE-2024-45642: Permissive Cross-domain Policy with Untrusted Domains5.3 MediumN/A0%Nov 14, 2024
CVE-2024-45099: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Nov 14, 2024
CVE-2024-45087: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Nov 11, 2024
CVE-2024-45088: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 11, 2024
CVE-2024-35146: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 6, 2024
CVE-2024-45086: Improper Restriction of XML External Entity Reference5.5 MediumN/A0%Nov 4, 2024
CVE-2024-41745: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 1, 2024
CVE-2024-41744: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Nov 1, 2024
CVE-2024-41741: Observable Timing Discrepancy5.3 MediumN/A0%Nov 1, 2024
CVE-2024-41738: Use of GET Request Method With Sensitive Query Strings5.9 MediumN/A0%Nov 1, 2024
CVE-2024-10573: Out-of-bounds Write6.7 MediumN/A0%Oct 31, 2024
CVE-2024-10525: Heap-based Buffer Overflow9.8 Critical7.2 High18%Oct 30, 2024
CVE-2024-45656: Use of Hard-coded Credentials9.8 CriticalN/A0%Oct 29, 2024
CVE-2024-30106: Exposure of Sensitive Information to an Unauthorized Actor3.5 LowN/A0%Oct 28, 2024
CVE-2024-38314: Use of Hard-coded Cryptographic Key5.9 MediumN/A0%Oct 24, 2024
CVE-2023-50310: Insufficiently Protected Credentials4.9 MediumN/A0%Oct 23, 2024
CVE-2024-31880: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 23, 2024
2326-2350 of 9776
‹›