<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-31T19:00:15.135368+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/53f96544-f363-4fa5-831c-c96de59d3b13/export</id>
    <title>53f96544-f363-4fa5-831c-c96de59d3b13</title>
    <updated>2026-05-31T19:00:15.510872+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "53f96544-f363-4fa5-831c-c96de59d3b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38371", "type": "seen", "source": "https://t.me/cibsecurity/27066", "content": "\u203c CVE-2021-38371 \u203c\n\nThe STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T18:37:20.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/53f96544-f363-4fa5-831c-c96de59d3b13/export"/>
    <published>2021-08-10T18:37:20+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5f340b4b-7060-4c47-b6e5-5a6aa6975076/export</id>
    <title>5f340b4b-7060-4c47-b6e5-5a6aa6975076</title>
    <updated>2026-05-31T19:00:15.510798+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5f340b4b-7060-4c47-b6e5-5a6aa6975076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38372", "type": "seen", "source": "https://t.me/cibsecurity/27070", "content": "\u203c CVE-2021-38372 \u203c\n\nIn KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T18:37:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5f340b4b-7060-4c47-b6e5-5a6aa6975076/export"/>
    <published>2021-08-10T18:37:27+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbf60a30-ebdd-4062-9891-f3db01181ed4/export</id>
    <title>bbf60a30-ebdd-4062-9891-f3db01181ed4</title>
    <updated>2026-05-31T19:00:15.510723+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbf60a30-ebdd-4062-9891-f3db01181ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38370", "type": "seen", "source": "https://t.me/cibsecurity/27077", "content": "\u203c CVE-2021-38370 \u203c\n\nIn Alpine through 2.24, untagged responses from an IMAP server are accepted before STARTTLS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T18:37:35.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbf60a30-ebdd-4062-9891-f3db01181ed4/export"/>
    <published>2021-08-10T18:37:35+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3af977e1-0fdb-4809-afc4-1ec718939815/export</id>
    <title>3af977e1-0fdb-4809-afc4-1ec718939815</title>
    <updated>2026-05-31T19:00:15.510642+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3af977e1-0fdb-4809-afc4-1ec718939815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38373", "type": "seen", "source": "https://t.me/cibsecurity/27078", "content": "\u203c CVE-2021-38373 \u203c\n\nIn KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless \"Server requires authentication\" is checked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T18:37:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3af977e1-0fdb-4809-afc4-1ec718939815/export"/>
    <published>2021-08-10T18:37:36+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0db1370a-4459-4b27-b58a-5e9014e1f33d/export</id>
    <title>0db1370a-4459-4b27-b58a-5e9014e1f33d</title>
    <updated>2026-05-31T19:00:15.510531+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0db1370a-4459-4b27-b58a-5e9014e1f33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38379", "type": "seen", "source": "https://t.me/cibsecurity/31274", "content": "\u203c CVE-2021-38379 \u203c\n\nThe Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-27T18:16:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0db1370a-4459-4b27-b58a-5e9014e1f33d/export"/>
    <published>2021-10-27T18:16:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c4ef5436-205b-4bb1-bd39-dcaea5c1ea3e/export</id>
    <title>c4ef5436-205b-4bb1-bd39-dcaea5c1ea3e</title>
    <updated>2026-05-31T19:00:15.508993+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c4ef5436-205b-4bb1-bd39-dcaea5c1ea3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3837", "type": "seen", "source": "https://t.me/cibsecurity/34869", "content": "\u203c CVE-2021-3837 \u203c\n\nopenwhyd is vulnerable to Improper Authorization\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-03T18:44:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c4ef5436-205b-4bb1-bd39-dcaea5c1ea3e/export"/>
    <published>2022-01-03T18:44:27+00:00</published>
  </entry>
</feed>
