https://vulnerability.circl.lu/sightings/feed 2026-05-04T16:35:49.255664+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f1e7e956-f28d-452c-8524-6022091da655/export 2026-05-04T16:35:49.676880+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "f1e7e956-f28d-452c-8524-6022091da655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32987", "type": "seen", "source": "https://t.me/cibsecurity/29315", "content": "\u203c CVE-2021-32987 \u203c\n\nNull pointer dereference in SuiteLink server while processing command 0x0b\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-23T18:29:34.000000Z"} 2021-09-23T18:29:34+00:00 https://vulnerability.circl.lu/sighting/916964f6-30b7-44a2-a8cb-bc982086fb1e/export 2026-05-04T16:35:49.676768+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "916964f6-30b7-44a2-a8cb-bc982086fb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32985", "type": "seen", "source": "https://t.me/cibsecurity/40129", "content": "\u203c CVE-2021-32985 \u203c\n\nAVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:09.000000Z"} 2022-04-05T00:28:09+00:00 https://vulnerability.circl.lu/sighting/e5a46382-bcce-4cd2-a168-f8c32929f9e3/export 2026-05-04T16:35:49.676649+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e5a46382-bcce-4cd2-a168-f8c32929f9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32984", "type": "seen", "source": "https://t.me/cibsecurity/40131", "content": "\u203c CVE-2021-32984 \u203c\n\nAll programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can connect to the PLC and read the project without authorization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:12.000000Z"} 2022-04-05T00:28:12+00:00 https://vulnerability.circl.lu/sighting/6f262929-b7a6-48e7-a2aa-cdc6f8ceaf7d/export 2026-05-04T16:35:49.676494+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "6f262929-b7a6-48e7-a2aa-cdc6f8ceaf7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32986", "type": "seen", "source": "https://t.me/cibsecurity/40137", "content": "\u203c CVE-2021-32986 \u203c\n\nAfter Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming connections are allowed without authorization. The PLC is only relocked by a power cycle, or when the programming software disconnects correctly.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:21.000000Z"} 2022-04-05T00:28:21+00:00 https://vulnerability.circl.lu/sighting/da41f410-4920-42b3-a2fb-086356c21043/export 2026-05-04T16:35:49.673765+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "da41f410-4920-42b3-a2fb-086356c21043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32989", "type": "seen", "source": "https://t.me/cibsecurity/43336", "content": "\u203c CVE-2021-32989 \u203c\n\nWhen a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-25T18:38:14.000000Z"} 2022-05-25T18:38:14+00:00