https://vulnerability.circl.lu/sightings/feed 2026-07-10T14:22:00.557913+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/928495a6-fd37-49b3-a7d3-01d3c8d5f8e7/export 2026-07-10T14:22:00.579197+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "928495a6-fd37-49b3-a7d3-01d3c8d5f8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40752\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nIBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:\u00a0 236687.\n\ud83d\udccf Published: 2022-11-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:11:57.429Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6833566\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/236687", "creation_timestamp": "2025-03-06T20:34:09.000000Z"} 2025-03-06T20:34:09+00:00 https://vulnerability.circl.lu/sighting/f6c65909-0901-4ee5-bfab-5e6534926904/export 2026-07-10T14:22:00.582243+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f6c65909-0901-4ee5-bfab-5e6534926904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4075", "type": "seen", "source": "https://t.me/cibsecurity/53228", "content": "\u203c CVE-2022-4075 \u203c\n\nA vulnerability has been found in Banhammer Plugin and classified as problematic. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214042 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:31.000000Z"} 2022-11-20T16:36:31+00:00 https://vulnerability.circl.lu/sighting/8ba094e4-7cc5-4157-8ff0-7a8c23804ba4/export 2026-07-10T14:22:00.582378+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8ba094e4-7cc5-4157-8ff0-7a8c23804ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40751", "type": "seen", "source": "https://t.me/cibsecurity/53084", "content": "\u203c CVE-2022-40751 \u203c\n\nIBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including \"Manage Security\" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:18:09.000000Z"} 2022-11-17T20:18:09+00:00 https://vulnerability.circl.lu/sighting/4b26adbd-3f3e-4fc7-9386-e946802a1446/export 2026-07-10T14:22:00.582484+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4b26adbd-3f3e-4fc7-9386-e946802a1446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40750", "type": "seen", "source": "https://t.me/cibsecurity/52937", "content": "\u203c CVE-2022-40750 \u203c\n\nIBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:55:09.000000Z"} 2022-11-13T05:55:09+00:00 https://vulnerability.circl.lu/sighting/959a5944-43ff-42e7-b0db-9597ea6fc08f/export 2026-07-10T14:22:00.582588+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "959a5944-43ff-42e7-b0db-9597ea6fc08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40756", "type": "seen", "source": "https://t.me/cibsecurity/50801", "content": "\u203c CVE-2022-40756 \u203c\n\nIf folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-30T22:36:32.000000Z"} 2022-09-30T22:36:32+00:00 https://vulnerability.circl.lu/sighting/59abf6bb-a770-4ab8-99c5-deb3cc671a93/export 2026-07-10T14:22:00.582687+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "59abf6bb-a770-4ab8-99c5-deb3cc671a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40754", "type": "seen", "source": "https://t.me/cibsecurity/50182", "content": "\u203c CVE-2022-40754 \u203c\n\nIn Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T12:40:46.000000Z"} 2022-09-21T12:40:46+00:00 https://vulnerability.circl.lu/sighting/df56bd0c-f418-42f8-b400-21d1e66e4fc6/export 2026-07-10T14:22:00.582781+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df56bd0c-f418-42f8-b400-21d1e66e4fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40757", "type": "seen", "source": "https://t.me/cibsecurity/50002", "content": "\u203c CVE-2022-40757 \u203c\n\nA Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACComputeFinal with an excessive size value of messageLen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-17T02:35:18.000000Z"} 2022-09-17T02:35:18+00:00