https://vulnerability.circl.lu/sightings/feed 2026-06-29T22:55:10.703528+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0a3b71ad-7199-4654-bcab-f2e8f47b7df8/export 2026-06-29T22:55:10.720926+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0a3b71ad-7199-4654-bcab-f2e8f47b7df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35506", "type": "seen", "source": "https://t.me/cibsecurity/29971", "content": "\u203c CVE-2021-35506 \u203c\n\nAfian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-05T16:30:43.000000Z"} 2021-10-05T16:30:43+00:00 https://vulnerability.circl.lu/sighting/6a8f6c36-fada-4ed7-8597-99215bd68055/export 2026-06-29T22:55:10.722664+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6a8f6c36-fada-4ed7-8597-99215bd68055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35503", "type": "seen", "source": "https://t.me/cibsecurity/29965", "content": "\u203c CVE-2021-35503 \u203c\n\nAfian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-05T16:30:36.000000Z"} 2021-10-05T16:30:36+00:00 https://vulnerability.circl.lu/sighting/4b78e6ba-a165-4a20-aad9-ca2a07c37cea/export 2026-06-29T22:55:10.722859+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4b78e6ba-a165-4a20-aad9-ca2a07c37cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35505", "type": "seen", "source": "https://t.me/cibsecurity/29960", "content": "\u203c CVE-2021-35505 \u203c\n\nAfian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-05T16:30:30.000000Z"} 2021-10-05T16:30:30+00:00 https://vulnerability.circl.lu/sighting/f6ba28a3-9336-4374-b6ae-82452263bff5/export 2026-06-29T22:55:10.723019+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f6ba28a3-9336-4374-b6ae-82452263bff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35504", "type": "seen", "source": "https://t.me/cibsecurity/29956", "content": "\u203c CVE-2021-35504 \u203c\n\nAfian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-05T16:30:25.000000Z"} 2021-10-05T16:30:25+00:00 https://vulnerability.circl.lu/sighting/a9c6ddbe-de47-4356-bbbf-c1ca43ed8d0e/export 2026-06-29T22:55:10.723174+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a9c6ddbe-de47-4356-bbbf-c1ca43ed8d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35502", "type": "seen", "source": "https://t.me/cibsecurity/25724", "content": "\u203c CVE-2021-35502 \u203c\n\napp/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-26T00:19:50.000000Z"} 2021-06-26T00:19:50+00:00 https://vulnerability.circl.lu/sighting/b54b7e40-5fa8-48b1-964a-77f9f4a9ffe1/export 2026-06-29T22:55:10.723336+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b54b7e40-5fa8-48b1-964a-77f9f4a9ffe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35501", "type": "seen", "source": "https://t.me/cibsecurity/25714", "content": "\u203c CVE-2021-35501 \u203c\n\nPandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-25T20:19:41.000000Z"} 2021-06-25T20:19:41+00:00