The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-45096: Exposure of Information Through Directory Listing6.5 MediumN/A0%Sep 5, 2024
CVE-2024-45005: Use of Uninitialized Resource5.5 MediumN/A0%Sep 4, 2024
CVE-2024-45076: Unrestricted Upload of File with Dangerous Type9.9 CriticalN/A0%Sep 4, 2024
CVE-2024-45075: Missing Authentication for Critical Function8.8 HighN/A0%Sep 4, 2024
CVE-2024-45074: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 4, 2024
CVE-2024-39747: Use of Default Credentials8.1 HighN/A0%Aug 31, 2024
CVE-2024-35133: URL Redirection to Untrusted Site6.8 MediumN/A2%Aug 29, 2024
CVE-2024-35118: Use of Hard-coded Credentials4.6 MediumN/A0%Aug 29, 2024
CVE-2022-43915: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Aug 24, 2024
CVE-2024-39746: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Aug 22, 2024
CVE-2024-39745: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Aug 22, 2024
CVE-2024-39744: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 22, 2024
CVE-2024-35151: Authentication Bypass Using an Alternate Path or Channel6.5 MediumN/A0%Aug 22, 2024
CVE-2022-48905: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Aug 22, 2024
CVE-2024-41773: Incorrect Ownership Assignment6.5 MediumN/A0%Aug 20, 2024
CVE-2024-43819: NULL Pointer Dereference5.5 MediumN/A0%Aug 17, 2024
CVE-2023-47728: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Aug 16, 2024
CVE-2022-33162: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A0%Aug 16, 2024
CVE-2024-40705: Asymmetric Resource Consumption (Amplification)6.5 MediumN/A0%Aug 15, 2024
CVE-2024-40704: Insufficiently Protected Credentials4.9 MediumN/A0%Aug 15, 2024
CVE-2024-31905: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Aug 15, 2024
CVE-2024-25024: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Aug 15, 2024
CVE-2024-37529: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Aug 14, 2024
CVE-2024-35152: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Aug 14, 2024
CVE-2024-35136: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A0%Aug 14, 2024
2376-2400 of 9776
‹›