The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2024-38330: Uncontrolled Search Path Element7.0 HighN/A0%Jul 8, 2024
CVE-2024-39723: Missing Protection Mechanism for Alternate Hardware Interface4.6 MediumN/A0%Jul 8, 2024
CVE-2024-20893: Out-of-bounds Write6.1 MediumN/A0%Jul 2, 2024
CVE-2024-28794: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 30, 2024
CVE-2023-50964: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 30, 2024
CVE-2024-31898: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Jun 30, 2024
CVE-2024-28797: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 30, 2024
CVE-2023-50953: Generation of Error Message Containing Sensitive Information5.4 MediumN/A0%Jun 30, 2024
CVE-2023-50952: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Jun 30, 2024
CVE-2024-35119: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jun 30, 2024
CVE-2024-31902: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 30, 2024
CVE-2024-28798: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jun 30, 2024
CVE-2023-50954: Use of GET Request Method With Sensitive Query Strings4.3 MediumN/A0%Jun 30, 2024
CVE-2024-28795: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 30, 2024
CVE-2023-35022: Improper Authorization3.3 LowN/A0%Jun 30, 2024
CVE-2024-38322: Observable Response Discrepancy5.3 MediumN/A0%Jun 28, 2024
CVE-2024-35156: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Jun 28, 2024
CVE-2024-35116: Memory Allocation with Excessive Size Value5.9 MediumN/A0%Jun 28, 2024
CVE-2024-25053: Improper Certificate Validation5.9 MediumN/A0%Jun 28, 2024
CVE-2024-25041: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 28, 2024
CVE-2024-25031: Improper Restriction of Excessive Authentication Attempts6.5 MediumN/A0%Jun 28, 2024
CVE-2022-38383: Use of Web Browser Cache Containing Sensitive Information4.0 MediumN/A0%Jun 28, 2024
CVE-2024-35155: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Jun 28, 2024
CVE-2024-31919: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Jun 28, 2024
CVE-2024-31912: Incorrect Privilege Assignment7.5 HighN/A0%Jun 28, 2024
2451-2475 of 9776
‹›