The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-43177: Improper Certificate Validation5.9 MediumN/A0%Oct 22, 2024
CVE-2024-43173: Sensitive Cookie with Improper SameSite Attribute3.7 LowN/A0%Oct 22, 2024
CVE-2022-49029: Use After Free7.8 HighN/A0%Oct 21, 2024
CVE-2022-48954: Use After Free8.8 HighN/A0%Oct 21, 2024
CVE-2024-45072: Improper Restriction of XML External Entity Reference5.5 MediumN/A0%Oct 16, 2024
CVE-2024-45071: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Oct 16, 2024
CVE-2024-49340: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 16, 2024
CVE-2024-45085: Improper Check for Unusual or Exceptional Conditions5.9 MediumN/A0%Oct 15, 2024
CVE-2024-45073: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 30, 2024
CVE-2024-43191: Deserialization of Untrusted Data7.2 HighN/A0%Sep 26, 2024
CVE-2024-31899: Plaintext Storage of a Password4.3 MediumN/A0%Sep 26, 2024
CVE-2023-46175: Insertion of Sensitive Information into Log File4.4 MediumN/A0%Sep 26, 2024
CVE-2024-38324: Improper Validation of Certificate with Host Mismatch5.9 MediumN/A0%Sep 25, 2024
CVE-2022-43845: Sensitive Cookie Without 'HttpOnly' Flag3.7 LowN/A0%Sep 25, 2024
CVE-2021-38963: Improper Neutralization of Formula Elements in a CSV File8.0 HighN/A0%Sep 25, 2024
CVE-2024-40703: Insufficiently Protected Credentials5.5 MediumN/A0%Sep 22, 2024
CVE-2024-43188: Client-Side Enforcement of Server-Side Security4.9 MediumN/A0%Sep 18, 2024
CVE-2024-38315: Insufficient Session Expiration6.3 MediumN/A0%Sep 16, 2024
CVE-2024-43180: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Sep 13, 2024
CVE-2024-27257: Inclusion of Sensitive Information in Source Code4.3 MediumN/A0%Sep 10, 2024
CVE-2024-40681: Incorrect Privilege Assignment7.5 HighN/A0%Sep 7, 2024
CVE-2024-40680: Memory Allocation with Excessive Size Value5.5 MediumN/A0%Sep 7, 2024
CVE-2024-37068: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 7, 2024
CVE-2024-45098: Trusting HTTP Permission Methods on the Server Side6.8 MediumN/A0%Sep 5, 2024
CVE-2024-45097: Trusting HTTP Permission Methods on the Server Side5.9 MediumN/A0%Sep 5, 2024
2351-2375 of 9776
‹›