https://vulnerability.circl.lu/sightings/feed 2026-09-01T01:33:02.908545+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/51118813-69d7-4e2e-ad3d-916b60228ffc/export 2026-09-01T01:33:02.936766+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "51118813-69d7-4e2e-ad3d-916b60228ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38941", "type": "seen", "source": "https://t.me/cibsecurity/45415", "content": "\u203c CVE-2021-38941 \u203c\n\nIBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-30T20:38:42.000000Z"} 2022-06-30T20:38:42+00:00 https://vulnerability.circl.lu/sighting/cedf5b67-5884-44de-a8e9-594686c04a3f/export 2026-09-01T01:33:02.937973+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cedf5b67-5884-44de-a8e9-594686c04a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38944", "type": "seen", "source": "https://t.me/cibsecurity/42959", "content": "\u203c CVE-2021-38944 \u203c\n\nIBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 211236.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T00:28:46.000000Z"} 2022-05-19T00:28:46+00:00 https://vulnerability.circl.lu/sighting/cfe6da2d-32a3-46bf-aad0-871a324dd3d0/export 2026-09-01T01:33:02.938061+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cfe6da2d-32a3-46bf-aad0-871a324dd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38946", "type": "seen", "source": "https://t.me/cibsecurity/41329", "content": "\u203c CVE-2021-38946 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211240.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:27:57.000000Z"} 2022-04-22T20:27:57+00:00 https://vulnerability.circl.lu/sighting/9bb581da-6ba2-4a85-80d2-8d5621e6e56f/export 2026-09-01T01:33:02.938132+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9bb581da-6ba2-4a85-80d2-8d5621e6e56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38947", "type": "seen", "source": "https://t.me/cibsecurity/33872", "content": "\u203c CVE-2021-38947 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:15.000000Z"} 2021-12-13T20:11:15+00:00 https://vulnerability.circl.lu/sighting/e335959f-461f-44ef-884a-49391ab6b437/export 2026-09-01T01:33:02.938196+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e335959f-461f-44ef-884a-49391ab6b437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38949", "type": "seen", "source": "https://t.me/cibsecurity/32485", "content": "\u203c CVE-2021-38949 \u203c\n\nIBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-17T16:26:28.000000Z"} 2021-11-17T16:26:28+00:00 https://vulnerability.circl.lu/sighting/66f7b79b-93b4-4fb9-adeb-785c768b1502/export 2026-09-01T01:33:02.938256+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "66f7b79b-93b4-4fb9-adeb-785c768b1502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38948", "type": "seen", "source": "https://t.me/cibsecurity/31612", "content": "\u203c CVE-2021-38948 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T19:22:51.000000Z"} 2021-11-02T19:22:51+00:00