https://vulnerability.circl.lu/sightings/feed 2026-06-20T19:05:12.820668+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/28c0a483-1ab6-4c30-bee0-22b7fb7d268e/export 2026-06-20T19:05:13.193330+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "28c0a483-1ab6-4c30-bee0-22b7fb7d268e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36192", "type": "seen", "source": "https://t.me/cibsecurity/31711", "content": "\u203c CVE-2021-36192 \u203c\n\nAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-03T13:23:35.000000Z"} 2021-11-03T13:23:35+00:00 https://vulnerability.circl.lu/sighting/d64292de-4ff9-4c66-92ca-ded643be716d/export 2026-06-20T19:05:13.193243+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d64292de-4ff9-4c66-92ca-ded643be716d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36198", "type": "seen", "source": "https://t.me/cibsecurity/33395", "content": "\u203c CVE-2021-36198 \u203c\n\nSuccessful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-06T20:20:52.000000Z"} 2021-12-06T20:20:52+00:00 https://vulnerability.circl.lu/sighting/ee64dceb-577a-4b9d-a446-40d97f743643/export 2026-06-20T19:05:13.193165+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ee64dceb-577a-4b9d-a446-40d97f743643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36191", "type": "seen", "source": "https://t.me/cibsecurity/33579", "content": "\u203c CVE-2021-36191 \u203c\n\nA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:40.000000Z"} 2021-12-08T16:22:40+00:00 https://vulnerability.circl.lu/sighting/39cbcfa5-a078-4f87-a0a3-a044ed04ba53/export 2026-06-20T19:05:13.193074+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "39cbcfa5-a078-4f87-a0a3-a044ed04ba53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36190", "type": "seen", "source": "https://t.me/cibsecurity/33584", "content": "\u203c CVE-2021-36190 \u203c\n\nA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:48.000000Z"} 2021-12-08T16:22:48+00:00 https://vulnerability.circl.lu/sighting/f2348872-62ef-4f07-ba9d-c511f46adf95/export 2026-06-20T19:05:13.192944+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f2348872-62ef-4f07-ba9d-c511f46adf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36195", "type": "seen", "source": "https://t.me/cibsecurity/33637", "content": "\u203c CVE-2021-36195 \u203c\n\nMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T22:22:56.000000Z"} 2021-12-08T22:22:56+00:00 https://vulnerability.circl.lu/sighting/29a51147-79c0-4e45-a3cb-52f9ff9f2886/export 2026-06-20T19:05:13.190823+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "29a51147-79c0-4e45-a3cb-52f9ff9f2886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36193", "type": "seen", "source": "https://t.me/cibsecurity/36694", "content": "\u203c CVE-2021-36193 \u203c\n\nMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-02T14:28:20.000000Z"} 2022-02-02T14:28:20+00:00