https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 13:01:53 +0000 https://vulnerability.circl.lu/sighting/ce2e1780-bcd0-499d-8cf6-32788f175ac8/export {"uuid": "ce2e1780-bcd0-499d-8cf6-32788f175ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21031", "type": "seen", "source": "https://t.me/ctinow/191765", "content": "https://ift.tt/k5Qjm8K\nCVE-2018-21031 | Plex Media Server 1.18.2.2029-36236cc4c Access Control insufficiently protected credentials", "creation_timestamp": "2024-02-23T14:41:19.000000Z"} {"uuid": "ce2e1780-bcd0-499d-8cf6-32788f175ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21031", "type": "seen", "source": "https://t.me/ctinow/191765", "content": "https://ift.tt/k5Qjm8K\nCVE-2018-21031 | Plex Media Server 1.18.2.2029-36236cc4c Access Control insufficiently protected credentials", "creation_timestamp": "2024-02-23T14:41:19.000000Z"} https://vulnerability.circl.lu/sighting/ce2e1780-bcd0-499d-8cf6-32788f175ac8/export Fri, 23 Feb 2024 14:41:19 +0000 https://vulnerability.circl.lu/sighting/92e22d0d-89e8-42f5-93ed-bb701a5f8bc7/export {"uuid": "92e22d0d-89e8-42f5-93ed-bb701a5f8bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21030", "type": "seen", "source": "https://t.me/ctinow/177405", "content": "https://ift.tt/mp0S4QU\nCVE-2018-21030 | Jupyter Notebook up to 5.4.x CSP improper restriction of rendered ui layers (DLA 2432-1)", "creation_timestamp": "2024-02-01T09:07:07.000000Z"} {"uuid": "92e22d0d-89e8-42f5-93ed-bb701a5f8bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21030", "type": "seen", "source": "https://t.me/ctinow/177405", "content": "https://ift.tt/mp0S4QU\nCVE-2018-21030 | Jupyter Notebook up to 5.4.x CSP improper restriction of rendered ui layers (DLA 2432-1)", "creation_timestamp": "2024-02-01T09:07:07.000000Z"} https://vulnerability.circl.lu/sighting/92e22d0d-89e8-42f5-93ed-bb701a5f8bc7/export Thu, 01 Feb 2024 09:07:07 +0000 https://vulnerability.circl.lu/sighting/e712af58-fecb-4259-a122-6f22001025b4/export {"uuid": "e712af58-fecb-4259-a122-6f22001025b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21270", "type": "seen", "source": "https://t.me/cibsecurity/17136", "content": "\u203c CVE-2018-21270 \u203c\n\nVersions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-04T00:26:25.000000Z"} {"uuid": "e712af58-fecb-4259-a122-6f22001025b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21270", "type": "seen", "source": "https://t.me/cibsecurity/17136", "content": "\u203c CVE-2018-21270 \u203c\n\nVersions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-04T00:26:25.000000Z"} https://vulnerability.circl.lu/sighting/e712af58-fecb-4259-a122-6f22001025b4/export Fri, 04 Dec 2020 00:26:25 +0000 https://vulnerability.circl.lu/sighting/5b7507d8-a4d9-420a-bf27-77cc51e95790/export {"uuid": "5b7507d8-a4d9-420a-bf27-77cc51e95790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21269", "type": "seen", "source": "https://t.me/cibsecurity/15597", "content": "\u203c CVE-2018-21269 \u203c\n\ncheckpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T06:29:37.000000Z"} {"uuid": "5b7507d8-a4d9-420a-bf27-77cc51e95790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21269", "type": "seen", "source": "https://t.me/cibsecurity/15597", "content": "\u203c CVE-2018-21269 \u203c\n\ncheckpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T06:29:37.000000Z"} https://vulnerability.circl.lu/sighting/5b7507d8-a4d9-420a-bf27-77cc51e95790/export Tue, 27 Oct 2020 06:29:37 +0000 https://vulnerability.circl.lu/sighting/a4f937f1-8e25-408d-9485-9658446abb54/export {"uuid": "a4f937f1-8e25-408d-9485-9658446abb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21036", "type": "seen", "source": "https://t.me/cibsecurity/13565", "content": "ATENTION\u203c New - CVE-2018-21036\n\nSails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-21T18:55:08.000000Z"} {"uuid": "a4f937f1-8e25-408d-9485-9658446abb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21036", "type": "seen", "source": "https://t.me/cibsecurity/13565", "content": "ATENTION\u203c New - CVE-2018-21036\n\nSails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-21T18:55:08.000000Z"} https://vulnerability.circl.lu/sighting/a4f937f1-8e25-408d-9485-9658446abb54/export Tue, 21 Jul 2020 18:55:08 +0000 https://vulnerability.circl.lu/sighting/4154f6d5-89ad-499d-b0a2-d62a70a1b26c/export {"uuid": "4154f6d5-89ad-499d-b0a2-d62a70a1b26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13176", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T14:55:31.000000Z"} {"uuid": "4154f6d5-89ad-499d-b0a2-d62a70a1b26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13176", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T14:55:31.000000Z"} https://vulnerability.circl.lu/sighting/4154f6d5-89ad-499d-b0a2-d62a70a1b26c/export Wed, 01 Jul 2020 14:55:31 +0000 https://vulnerability.circl.lu/sighting/3a06c040-e8ef-4662-bc6a-71e3e7cf2b78/export {"uuid": "3a06c040-e8ef-4662-bc6a-71e3e7cf2b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13165", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T11:55:36.000000Z"} {"uuid": "3a06c040-e8ef-4662-bc6a-71e3e7cf2b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13165", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T11:55:36.000000Z"} https://vulnerability.circl.lu/sighting/3a06c040-e8ef-4662-bc6a-71e3e7cf2b78/export Wed, 01 Jul 2020 11:55:36 +0000 https://vulnerability.circl.lu/sighting/7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f/export {"uuid": "7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13061", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-25T20:55:30.000000Z"} {"uuid": "7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13061", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-25T20:55:30.000000Z"} https://vulnerability.circl.lu/sighting/7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f/export Thu, 25 Jun 2020 20:55:30 +0000 https://vulnerability.circl.lu/sighting/eb364392-ac18-47dd-bbb6-e25a5971723c/export {"uuid": "eb364392-ac18-47dd-bbb6-e25a5971723c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21248", "type": "seen", "source": "https://t.me/cibsecurity/12902", "content": "ATENTION\u203c New - CVE-2018-21248\n\nAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:37.000000Z"} {"uuid": "eb364392-ac18-47dd-bbb6-e25a5971723c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21248", "type": "seen", "source": "https://t.me/cibsecurity/12902", "content": "ATENTION\u203c New - CVE-2018-21248\n\nAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:37.000000Z"} https://vulnerability.circl.lu/sighting/eb364392-ac18-47dd-bbb6-e25a5971723c/export Fri, 19 Jun 2020 20:55:37 +0000 https://vulnerability.circl.lu/sighting/a374ed83-6d4c-49d7-ab30-0f06ccf62aa9/export {"uuid": "a374ed83-6d4c-49d7-ab30-0f06ccf62aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21249", "type": "seen", "source": "https://t.me/cibsecurity/12901", "content": "ATENTION\u203c New - CVE-2018-21249\n\nAn issue was discovered in Mattermost Server before 5.3.0. It mishandles timing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:36.000000Z"} {"uuid": "a374ed83-6d4c-49d7-ab30-0f06ccf62aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21249", "type": "seen", "source": "https://t.me/cibsecurity/12901", "content": "ATENTION\u203c New - CVE-2018-21249\n\nAn issue was discovered in Mattermost Server before 5.3.0. It mishandles timing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:36.000000Z"} https://vulnerability.circl.lu/sighting/a374ed83-6d4c-49d7-ab30-0f06ccf62aa9/export Fri, 19 Jun 2020 20:55:36 +0000