https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 20 Jul 2026 09:11:29 +0000 https://vulnerability.circl.lu/sighting/f4f5e34a-ae4d-4d85-88e4-8f319da55b48/export {"uuid": "f4f5e34a-ae4d-4d85-88e4-8f319da55b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.838768Z"} {"uuid": "f4f5e34a-ae4d-4d85-88e4-8f319da55b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.838768Z"} https://vulnerability.circl.lu/sighting/f4f5e34a-ae4d-4d85-88e4-8f319da55b48/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/4a1553b5-bd6b-4c81-a449-7892c8218076/export {"uuid": "4a1553b5-bd6b-4c81-a449-7892c8218076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.831846Z"} {"uuid": "4a1553b5-bd6b-4c81-a449-7892c8218076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.831846Z"} https://vulnerability.circl.lu/sighting/4a1553b5-bd6b-4c81-a449-7892c8218076/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/1ebfaee9-d659-49ad-b2d9-e7712618aea1/export {"uuid": "1ebfaee9-d659-49ad-b2d9-e7712618aea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.567732Z"} {"uuid": "1ebfaee9-d659-49ad-b2d9-e7712618aea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.567732Z"} https://vulnerability.circl.lu/sighting/1ebfaee9-d659-49ad-b2d9-e7712618aea1/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/bdd0404b-b16d-4631-b165-c29c263a69d3/export {"uuid": "bdd0404b-b16d-4631-b165-c29c263a69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.558055Z"} {"uuid": "bdd0404b-b16d-4631-b165-c29c263a69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.558055Z"} https://vulnerability.circl.lu/sighting/bdd0404b-b16d-4631-b165-c29c263a69d3/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/a3d62e15-7c3a-44d0-93f6-ae78b0df3e20/export {"uuid": "a3d62e15-7c3a-44d0-93f6-ae78b0df3e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.109448Z"} {"uuid": "a3d62e15-7c3a-44d0-93f6-ae78b0df3e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.109448Z"} https://vulnerability.circl.lu/sighting/a3d62e15-7c3a-44d0-93f6-ae78b0df3e20/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/26cf9f1d-968f-468b-865d-f868cce28c97/export {"uuid": "26cf9f1d-968f-468b-865d-f868cce28c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.100987Z"} {"uuid": "26cf9f1d-968f-468b-865d-f868cce28c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442108664352339", "content": "", "creation_timestamp": "2024-11-07T14:20:08.100987Z"} https://vulnerability.circl.lu/sighting/26cf9f1d-968f-468b-865d-f868cce28c97/export Thu, 07 Nov 2024 14:20:08 +0000 https://vulnerability.circl.lu/sighting/07992011-0a22-4c86-9fd6-146a9679a245/export {"uuid": "07992011-0a22-4c86-9fd6-146a9679a245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://t.me/cvedetector/10032", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20514 - Cisco EPNM/Prime Infrastructure Stored XSS Attack\", \n \"Content\": \"CVE ID : CVE-2024-20514 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability, the attacker must have at least a low-privileged account on an affected device. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:57.000000Z"} {"uuid": "07992011-0a22-4c86-9fd6-146a9679a245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20514", "type": "seen", "source": "https://t.me/cvedetector/10032", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20514 - Cisco EPNM/Prime Infrastructure Stored XSS Attack\", \n \"Content\": \"CVE ID : CVE-2024-20514 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability, the attacker must have at least a low-privileged account on an affected device. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:57.000000Z"} https://vulnerability.circl.lu/sighting/07992011-0a22-4c86-9fd6-146a9679a245/export Wed, 06 Nov 2024 19:10:57 +0000 https://vulnerability.circl.lu/sighting/059a0908-f15f-43df-b39a-84756455a344/export {"uuid": "059a0908-f15f-43df-b39a-84756455a344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://t.me/cvedetector/10031", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20511 - Cisco Unified Communications Manager/Cisco Unified Communications Manager Session Management Edition Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-20511 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:56.000000Z"} {"uuid": "059a0908-f15f-43df-b39a-84756455a344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20511", "type": "seen", "source": "https://t.me/cvedetector/10031", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20511 - Cisco Unified Communications Manager/Cisco Unified Communications Manager Session Management Edition Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-20511 \nPublished : Nov. 6, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T19:10:56.000000Z"} https://vulnerability.circl.lu/sighting/059a0908-f15f-43df-b39a-84756455a344/export Wed, 06 Nov 2024 19:10:56 +0000 https://vulnerability.circl.lu/sighting/6647d671-0efa-463d-a597-85f0eb83c2cc/export {"uuid": "6647d671-0efa-463d-a597-85f0eb83c2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20512", "type": "seen", "source": "https://t.me/cvedetector/8106", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20512 - Cisco Unified Contact Center Management Portal Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-20512 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:21.000000Z"} {"uuid": "6647d671-0efa-463d-a597-85f0eb83c2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20512", "type": "seen", "source": "https://t.me/cvedetector/8106", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20512 - Cisco Unified Contact Center Management Portal Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-20512 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. \n \nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:21.000000Z"} https://vulnerability.circl.lu/sighting/6647d671-0efa-463d-a597-85f0eb83c2cc/export Wed, 16 Oct 2024 19:44:21 +0000 https://vulnerability.circl.lu/sighting/0411c274-8e17-4767-9280-bbdf36d9074b/export {"uuid": "0411c274-8e17-4767-9280-bbdf36d9074b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20513", "type": "seen", "source": "https://t.me/cvedetector/6865", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20513 - Cisco Meraki AnyConnect SSL VPN DoS\", \n \"Content\": \"CVE ID : CVE-2024-20513 \nPublished : Oct. 2, 2024, 7:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. \n \nThis vulnerability is due to insufficient entropy for handlers that are used during SSL VPN session establishment. An unauthenticated attacker could exploit this vulnerability by brute forcing valid session handlers. An authenticated attacker could exploit this vulnerability by connecting to the AnyConnect VPN service of an affected device to retrieve a valid session handler and, based on that handler, predict further valid session handlers. The attacker would then send a crafted HTTPS request using the brute-forced or predicted session handler to the AnyConnect VPN server of the device. A successful exploit could allow the attacker to terminate targeted SSL VPN sessions, forcing remote users to initiate new VPN connections and reauthenticate. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T22:13:11.000000Z"} {"uuid": "0411c274-8e17-4767-9280-bbdf36d9074b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20513", "type": "seen", "source": "https://t.me/cvedetector/6865", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-20513 - Cisco Meraki AnyConnect SSL VPN DoS\", \n \"Content\": \"CVE ID : CVE-2024-20513 \nPublished : Oct. 2, 2024, 7:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. \n \nThis vulnerability is due to insufficient entropy for handlers that are used during SSL VPN session establishment. An unauthenticated attacker could exploit this vulnerability by brute forcing valid session handlers. An authenticated attacker could exploit this vulnerability by connecting to the AnyConnect VPN service of an affected device to retrieve a valid session handler and, based on that handler, predict further valid session handlers. The attacker would then send a crafted HTTPS request using the brute-forced or predicted session handler to the AnyConnect VPN server of the device. A successful exploit could allow the attacker to terminate targeted SSL VPN sessions, forcing remote users to initiate new VPN connections and reauthenticate. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T22:13:11.000000Z"} https://vulnerability.circl.lu/sighting/0411c274-8e17-4767-9280-bbdf36d9074b/export Wed, 02 Oct 2024 22:13:11 +0000