<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-24T12:16:04.718314+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13957128-cb13-49af-9af7-5af4984d97f2/export</id>
    <title>13957128-cb13-49af-9af7-5af4984d97f2</title>
    <updated>2026-07-24T12:16:04.738168+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13957128-cb13-49af-9af7-5af4984d97f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-12404", "type": "seen", "source": "https://t.me/ctinow/168377", "content": "https://ift.tt/T9nCvhm\nCVE-2018-12404 | Oracle Fujitsu M10-1 NSS cryptographic issues (BID-107260)", "creation_timestamp": "2024-01-15T14:41:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13957128-cb13-49af-9af7-5af4984d97f2/export"/>
    <published>2024-01-15T14:41:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/079fcab4-cd76-495f-9c67-d7205a2516f6/export</id>
    <title>079fcab4-cd76-495f-9c67-d7205a2516f6</title>
    <updated>2026-07-24T12:16:04.740753+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "079fcab4-cd76-495f-9c67-d7205a2516f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-12400", "type": "seen", "source": "https://t.me/cibsecurity/2788", "content": "ATENTION\u203c New - CVE-2018-12400\n\nIn private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox &amp;lt; 63.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-02-28T20:24:16.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/079fcab4-cd76-495f-9c67-d7205a2516f6/export"/>
    <published>2019-02-28T20:24:16+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1292249c-fc40-4310-b244-04911c750757/export</id>
    <title>1292249c-fc40-4310-b244-04911c750757</title>
    <updated>2026-07-24T12:16:04.740860+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1292249c-fc40-4310-b244-04911c750757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-12401", "type": "seen", "source": "https://t.me/cibsecurity/2787", "content": "ATENTION\u203c New - CVE-2018-12401\n\nSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox &amp;lt; 63.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-02-28T20:24:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1292249c-fc40-4310-b244-04911c750757/export"/>
    <published>2019-02-28T20:24:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/688efbc1-ac47-4388-b1a8-02235f29cdcd/export</id>
    <title>688efbc1-ac47-4388-b1a8-02235f29cdcd</title>
    <updated>2026-07-24T12:16:04.740933+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "688efbc1-ac47-4388-b1a8-02235f29cdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-12402", "type": "seen", "source": "https://t.me/cibsecurity/2786", "content": "ATENTION\u203c New - CVE-2018-12402\n\nThe internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of \"Save Page As...\" functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by including resources otherwise unreachable to the malicious page, if they can convince the visitor to save the complete web page. Similarly, SameSite cookies are sent on cross-origin requests when the \"Save Page As...\" menu item is selected to save a page, which can result in saving the wrong version of resources based on those cookies. This vulnerability affects Firefox &amp;lt; 63.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-02-28T20:24:14.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/688efbc1-ac47-4388-b1a8-02235f29cdcd/export"/>
    <published>2019-02-28T20:24:14+00:00</published>
  </entry>
</feed>
