https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 01 Sep 2026 01:33:03 +0000 https://vulnerability.circl.lu/sighting/51118813-69d7-4e2e-ad3d-916b60228ffc/export {"uuid": "51118813-69d7-4e2e-ad3d-916b60228ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38941", "type": "seen", "source": "https://t.me/cibsecurity/45415", "content": "\u203c CVE-2021-38941 \u203c\n\nIBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-30T20:38:42.000000Z"} {"uuid": "51118813-69d7-4e2e-ad3d-916b60228ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38941", "type": "seen", "source": "https://t.me/cibsecurity/45415", "content": "\u203c CVE-2021-38941 \u203c\n\nIBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-30T20:38:42.000000Z"} https://vulnerability.circl.lu/sighting/51118813-69d7-4e2e-ad3d-916b60228ffc/export Thu, 30 Jun 2022 20:38:42 +0000 https://vulnerability.circl.lu/sighting/cedf5b67-5884-44de-a8e9-594686c04a3f/export {"uuid": "cedf5b67-5884-44de-a8e9-594686c04a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38944", "type": "seen", "source": "https://t.me/cibsecurity/42959", "content": "\u203c CVE-2021-38944 \u203c\n\nIBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 211236.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T00:28:46.000000Z"} {"uuid": "cedf5b67-5884-44de-a8e9-594686c04a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38944", "type": "seen", "source": "https://t.me/cibsecurity/42959", "content": "\u203c CVE-2021-38944 \u203c\n\nIBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 211236.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T00:28:46.000000Z"} https://vulnerability.circl.lu/sighting/cedf5b67-5884-44de-a8e9-594686c04a3f/export Thu, 19 May 2022 00:28:46 +0000 https://vulnerability.circl.lu/sighting/cfe6da2d-32a3-46bf-aad0-871a324dd3d0/export {"uuid": "cfe6da2d-32a3-46bf-aad0-871a324dd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38946", "type": "seen", "source": "https://t.me/cibsecurity/41329", "content": "\u203c CVE-2021-38946 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211240.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:27:57.000000Z"} {"uuid": "cfe6da2d-32a3-46bf-aad0-871a324dd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38946", "type": "seen", "source": "https://t.me/cibsecurity/41329", "content": "\u203c CVE-2021-38946 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211240.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:27:57.000000Z"} https://vulnerability.circl.lu/sighting/cfe6da2d-32a3-46bf-aad0-871a324dd3d0/export Fri, 22 Apr 2022 20:27:57 +0000 https://vulnerability.circl.lu/sighting/9bb581da-6ba2-4a85-80d2-8d5621e6e56f/export {"uuid": "9bb581da-6ba2-4a85-80d2-8d5621e6e56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38947", "type": "seen", "source": "https://t.me/cibsecurity/33872", "content": "\u203c CVE-2021-38947 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:15.000000Z"} {"uuid": "9bb581da-6ba2-4a85-80d2-8d5621e6e56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38947", "type": "seen", "source": "https://t.me/cibsecurity/33872", "content": "\u203c CVE-2021-38947 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:15.000000Z"} https://vulnerability.circl.lu/sighting/9bb581da-6ba2-4a85-80d2-8d5621e6e56f/export Mon, 13 Dec 2021 20:11:15 +0000 https://vulnerability.circl.lu/sighting/e335959f-461f-44ef-884a-49391ab6b437/export {"uuid": "e335959f-461f-44ef-884a-49391ab6b437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38949", "type": "seen", "source": "https://t.me/cibsecurity/32485", "content": "\u203c CVE-2021-38949 \u203c\n\nIBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-17T16:26:28.000000Z"} {"uuid": "e335959f-461f-44ef-884a-49391ab6b437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38949", "type": "seen", "source": "https://t.me/cibsecurity/32485", "content": "\u203c CVE-2021-38949 \u203c\n\nIBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-17T16:26:28.000000Z"} https://vulnerability.circl.lu/sighting/e335959f-461f-44ef-884a-49391ab6b437/export Wed, 17 Nov 2021 16:26:28 +0000 https://vulnerability.circl.lu/sighting/66f7b79b-93b4-4fb9-adeb-785c768b1502/export {"uuid": "66f7b79b-93b4-4fb9-adeb-785c768b1502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38948", "type": "seen", "source": "https://t.me/cibsecurity/31612", "content": "\u203c CVE-2021-38948 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T19:22:51.000000Z"} {"uuid": "66f7b79b-93b4-4fb9-adeb-785c768b1502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38948", "type": "seen", "source": "https://t.me/cibsecurity/31612", "content": "\u203c CVE-2021-38948 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T19:22:51.000000Z"} https://vulnerability.circl.lu/sighting/66f7b79b-93b4-4fb9-adeb-785c768b1502/export Tue, 02 Nov 2021 19:22:51 +0000