https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:26:32.205773+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ce2e1780-bcd0-499d-8cf6-32788f175ac8/export 2026-09-17T10:26:32.225431+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ce2e1780-bcd0-499d-8cf6-32788f175ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21031", "type": "seen", "source": "https://t.me/ctinow/191765", "content": "https://ift.tt/k5Qjm8K\nCVE-2018-21031 | Plex Media Server 1.18.2.2029-36236cc4c Access Control insufficiently protected credentials", "creation_timestamp": "2024-02-23T14:41:19.000000Z"} 2024-02-23T14:41:19+00:00 https://vulnerability.circl.lu/sighting/92e22d0d-89e8-42f5-93ed-bb701a5f8bc7/export 2026-09-17T10:26:32.228288+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "92e22d0d-89e8-42f5-93ed-bb701a5f8bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21030", "type": "seen", "source": "https://t.me/ctinow/177405", "content": "https://ift.tt/mp0S4QU\nCVE-2018-21030 | Jupyter Notebook up to 5.4.x CSP improper restriction of rendered ui layers (DLA 2432-1)", "creation_timestamp": "2024-02-01T09:07:07.000000Z"} 2024-02-01T09:07:07+00:00 https://vulnerability.circl.lu/sighting/e712af58-fecb-4259-a122-6f22001025b4/export 2026-09-17T10:26:32.228427+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e712af58-fecb-4259-a122-6f22001025b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21270", "type": "seen", "source": "https://t.me/cibsecurity/17136", "content": "\u203c CVE-2018-21270 \u203c\n\nVersions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-04T00:26:25.000000Z"} 2020-12-04T00:26:25+00:00 https://vulnerability.circl.lu/sighting/5b7507d8-a4d9-420a-bf27-77cc51e95790/export 2026-09-17T10:26:32.228537+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5b7507d8-a4d9-420a-bf27-77cc51e95790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21269", "type": "seen", "source": "https://t.me/cibsecurity/15597", "content": "\u203c CVE-2018-21269 \u203c\n\ncheckpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T06:29:37.000000Z"} 2020-10-27T06:29:37+00:00 https://vulnerability.circl.lu/sighting/a4f937f1-8e25-408d-9485-9658446abb54/export 2026-09-17T10:26:32.228661+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a4f937f1-8e25-408d-9485-9658446abb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21036", "type": "seen", "source": "https://t.me/cibsecurity/13565", "content": "ATENTION\u203c New - CVE-2018-21036\n\nSails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-21T18:55:08.000000Z"} 2020-07-21T18:55:08+00:00 https://vulnerability.circl.lu/sighting/4154f6d5-89ad-499d-b0a2-d62a70a1b26c/export 2026-09-17T10:26:32.228755+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4154f6d5-89ad-499d-b0a2-d62a70a1b26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13176", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T14:55:31.000000Z"} 2020-07-01T14:55:31+00:00 https://vulnerability.circl.lu/sighting/3a06c040-e8ef-4662-bc6a-71e3e7cf2b78/export 2026-09-17T10:26:32.228848+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3a06c040-e8ef-4662-bc6a-71e3e7cf2b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13165", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T11:55:36.000000Z"} 2020-07-01T11:55:36+00:00 https://vulnerability.circl.lu/sighting/7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f/export 2026-09-17T10:26:32.228945+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13061", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-25T20:55:30.000000Z"} 2020-06-25T20:55:30+00:00 https://vulnerability.circl.lu/sighting/eb364392-ac18-47dd-bbb6-e25a5971723c/export 2026-09-17T10:26:32.229044+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb364392-ac18-47dd-bbb6-e25a5971723c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21248", "type": "seen", "source": "https://t.me/cibsecurity/12902", "content": "ATENTION\u203c New - CVE-2018-21248\n\nAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:37.000000Z"} 2020-06-19T20:55:37+00:00 https://vulnerability.circl.lu/sighting/a374ed83-6d4c-49d7-ab30-0f06ccf62aa9/export 2026-09-17T10:26:32.229138+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a374ed83-6d4c-49d7-ab30-0f06ccf62aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-21249", "type": "seen", "source": "https://t.me/cibsecurity/12901", "content": "ATENTION\u203c New - CVE-2018-21249\n\nAn issue was discovered in Mattermost Server before 5.3.0. It mishandles timing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-19T20:55:36.000000Z"} 2020-06-19T20:55:36+00:00