CVE Database and Vulnerability Search - Exploit Intel

Skip to content

Vulnerabilities: 381,276
with PoCs: 37,250
CISA KEV: 1,665
Ransomware: 606
with Nuclei: 4,342

Vulnerability search results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-36463MEDIUM	The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects. CWE-767Nov 26, 2024	CVSS6.5v3.1	EPSS0.797%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-34162MEDIUM	The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device communicates with the LDAP server in clear-text. The LDAP password can be retrieved from this clear-text communication. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. CWE-767Nov 26, 2024	CVSS5.3v3.1	EPSS0.785%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2020-26868HIGH	ARC Informatique PcVue Access to Critical Private Variable via Public Method ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit. CWE-668 CWE-767Oct 12, 2020	CVSS7.5v3.1	EPSS2.13%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2016-8380HIGH	Phoenix Contact WebVisit 2985725 - Authentication Bypass The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. CWE-287 CWE-767Apr 5, 2018	CVSS7.3v3.0	EPSS11.1%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX