CVE Program partner
XI
Exodus Intelligence
CVEs, 365 days037 all time, 0 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
| Organisation | Exodus Intelligence |
| Role | CNA |
| Type | Bug Bounty Provider, Researcher |
| Reports to | mitre |
| Scope | Vulnerabilities discovered by Exodus Intelligence as well as acquisitions from independent researchers via its Research Sponsorship Program (RSP). |
| Advisories | https://blog.exodusintel.com/advisories/ |
Latest CVEs · RSS
- CVE-2024-24622 2024-07-25 · CVSS 8.8Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain cod
- CVE-2024-24623 2024-07-25 · CVSS 8.8Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerabili
- CVE-2024-24621 2024-07-25 · CVSS 9.8Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulner
- CVE-2024-23630 2024-01-25 · CVSS 9.0An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device.
- CVE-2024-23629 2024-01-25 · CVSS 9.6An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs a
- CVE-2024-23628 2024-01-25 · CVSS 9.0A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability
- CVE-2024-23627 2024-01-25 · CVSS 9.0A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability t
- CVE-2024-23626 2024-01-25 · CVSS 9.0A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achie
- CVE-2024-23625 2024-01-25 · CVSS 9.6A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerab
- CVE-2024-23624 2024-01-25 · CVSS 9.6A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain c
- CVE-2024-23622 2024-01-25 · CVSS 10.0A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability
- CVE-2024-23621 2024-01-25 · CVSS 10.0A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve
- CVE-2024-23620 2024-01-25 · CVSS 8.8An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability
- CVE-2024-23619 2024-01-25 · CVSS 9.8A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achi
- CVE-2024-23618 2024-01-25 · CVSS 9.6An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve co
- CVE-2024-23617 2024-01-25 · CVSS 9.6A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerabi
- CVE-2024-23616 2024-01-25 · CVSS 10.0A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability t
- CVE-2024-23615 2024-01-25 · CVSS 10.0A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to ac
- CVE-2024-23614 2024-01-25 · CVSS 10.0A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to ach
- CVE-2024-23613 2024-01-25 · CVSS 10.0A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit
- CVE-2023-43824 2024-01-18 · CVSS 8.8A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unau
- CVE-2023-43823 2024-01-18 · CVSS 8.8A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthe
- CVE-2023-43822 2024-01-18 · CVSS 8.8A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote,
- CVE-2023-43821 2024-01-18 · CVSS 8.8A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote
- CVE-2023-43820 2024-01-18 · CVSS 8.8A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A rem