https://vulnerability.circl.lu/sightings/feed 2026-06-25T20:46:44.509190+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bc63ffcb-f1b4-440d-9595-d47bafbec7d8/export 2026-06-25T20:46:44.529266+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bc63ffcb-f1b4-440d-9595-d47bafbec7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2044", "type": "seen", "source": "https://t.me/cibsecurity/22398", "content": "\u203c CVE-2021-2044 \u203c\n\nVulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Payables accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-20T18:40:31.000000Z"} 2021-01-20T18:40:31+00:00 https://vulnerability.circl.lu/sighting/b199c2f2-5e26-4aec-9d71-73bfe8b51df6/export 2026-06-25T20:46:44.529117+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b199c2f2-5e26-4aec-9d71-73bfe8b51df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20444", "type": "seen", "source": "https://t.me/cibsecurity/23802", "content": "\u203c CVE-2021-20444 \u203c\n\nIBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196620.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-18T18:50:13.000000Z"} 2021-02-18T18:50:13+00:00 https://vulnerability.circl.lu/sighting/e04d8bda-1d26-4aab-a291-412ea7cff3db/export 2026-06-25T20:46:44.528963+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e04d8bda-1d26-4aab-a291-412ea7cff3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20446", "type": "seen", "source": "https://t.me/cibsecurity/23809", "content": "\u203c CVE-2021-20446 \u203c\n\nIBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-18T18:50:20.000000Z"} 2021-02-18T18:50:20+00:00 https://vulnerability.circl.lu/sighting/ef2dce3c-d2ab-425b-a859-29f479ef8cd6/export 2026-06-25T20:46:44.528798+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef2dce3c-d2ab-425b-a859-29f479ef8cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20445", "type": "seen", "source": "https://t.me/cibsecurity/23813", "content": "\u203c CVE-2021-20445 \u203c\n\nIBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-18T18:50:24.000000Z"} 2021-02-18T18:50:24+00:00 https://vulnerability.circl.lu/sighting/1619c05a-d3b1-4640-9a13-b21dd48bebf6/export 2026-06-25T20:46:44.528622+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1619c05a-d3b1-4640-9a13-b21dd48bebf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20443", "type": "seen", "source": "https://t.me/cibsecurity/23814", "content": "\u203c CVE-2021-20443 \u203c\n\nIBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-18T18:50:25.000000Z"} 2021-02-18T18:50:25+00:00 https://vulnerability.circl.lu/sighting/ad19a918-4224-4dae-89aa-94d5b5a7cc92/export 2026-06-25T20:46:44.528413+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ad19a918-4224-4dae-89aa-94d5b5a7cc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20441", "type": "seen", "source": "https://t.me/cibsecurity/24417", "content": "\u203c CVE-2021-20441 \u203c\n\nIBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196617.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-03T20:46:00.000000Z"} 2021-03-03T20:46:00+00:00 https://vulnerability.circl.lu/sighting/aaa6bf24-ddfb-4ecd-a527-64bd3fc0490d/export 2026-06-25T20:46:44.526527+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aaa6bf24-ddfb-4ecd-a527-64bd3fc0490d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20440", "type": "seen", "source": "https://t.me/cibsecurity/24918", "content": "\u203c CVE-2021-20440 \u203c\n\nIBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider organization. IBM X-Force ID: 196536.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-15T19:29:21.000000Z"} 2021-03-15T19:29:21+00:00