<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T08:58:48.510895+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad7e04ba-6e07-4364-917e-a82c0bb1c860/export</id>
    <title>ad7e04ba-6e07-4364-917e-a82c0bb1c860</title>
    <updated>2026-06-25T08:58:48.535036+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad7e04ba-6e07-4364-917e-a82c0bb1c860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21740", "type": "seen", "source": "https://t.me/cibsecurity/36781", "content": "\u203c CVE-2022-21740 \u203c\n\nTensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-03T18:29:58.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad7e04ba-6e07-4364-917e-a82c0bb1c860/export"/>
    <published>2022-02-03T18:29:58+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c6f7c51e-faf6-4eab-a88a-f3cf3ece2830/export</id>
    <title>c6f7c51e-faf6-4eab-a88a-f3cf3ece2830</title>
    <updated>2026-06-25T08:58:48.534930+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c6f7c51e-faf6-4eab-a88a-f3cf3ece2830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21741", "type": "seen", "source": "https://t.me/cibsecurity/36782", "content": "\u203c CVE-2022-21741 \u203c\n\nTensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-03T18:29:58.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c6f7c51e-faf6-4eab-a88a-f3cf3ece2830/export"/>
    <published>2022-02-03T18:29:58+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2950e7fa-22d7-41ba-9ef2-5c48bf547a03/export</id>
    <title>2950e7fa-22d7-41ba-9ef2-5c48bf547a03</title>
    <updated>2026-06-25T08:58:48.534832+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2950e7fa-22d7-41ba-9ef2-5c48bf547a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21743", "type": "seen", "source": "https://t.me/cibsecurity/41854", "content": "\u203c CVE-2022-21743 \u203c\n\nIn ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06371108; Issue ID: ALPS06371108.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-04T00:34:17.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2950e7fa-22d7-41ba-9ef2-5c48bf547a03/export"/>
    <published>2022-05-04T00:34:17+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8ea9d133-3da2-4798-9bc2-f664b4cfb6b3/export</id>
    <title>8ea9d133-3da2-4798-9bc2-f664b4cfb6b3</title>
    <updated>2026-06-25T08:58:48.534733+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8ea9d133-3da2-4798-9bc2-f664b4cfb6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21749", "type": "seen", "source": "https://t.me/cibsecurity/43873", "content": "\u203c CVE-2022-21749 \u203c\n\nIn telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06511058; Issue ID: ALPS06511058.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-06T22:30:13.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8ea9d133-3da2-4798-9bc2-f664b4cfb6b3/export"/>
    <published>2022-06-06T22:30:13+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6d92a2b1-f9aa-4dd4-a7d7-d90213453e2a/export</id>
    <title>6d92a2b1-f9aa-4dd4-a7d7-d90213453e2a</title>
    <updated>2026-06-25T08:58:48.534611+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6d92a2b1-f9aa-4dd4-a7d7-d90213453e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21745", "type": "seen", "source": "https://t.me/cibsecurity/43883", "content": "\u203c CVE-2022-21745 \u203c\n\nIn WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468872; Issue ID: ALPS06468872.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-06T22:30:24.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6d92a2b1-f9aa-4dd4-a7d7-d90213453e2a/export"/>
    <published>2022-06-06T22:30:24+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c0a4b27-a709-469a-883e-8716285787a7/export</id>
    <title>3c0a4b27-a709-469a-883e-8716285787a7</title>
    <updated>2026-06-25T08:58:48.534315+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c0a4b27-a709-469a-883e-8716285787a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21742", "type": "seen", "source": "https://t.me/cibsecurity/44817", "content": "\u203c CVE-2022-21742 \u203c\n\nRealtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-20T12:26:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c0a4b27-a709-469a-883e-8716285787a7/export"/>
    <published>2022-06-20T12:26:25+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2af40d9a-e40b-476c-a797-21f79b9753d4/export</id>
    <title>2af40d9a-e40b-476c-a797-21f79b9753d4</title>
    <updated>2026-06-25T08:58:48.531086+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2af40d9a-e40b-476c-a797-21f79b9753d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2174", "type": "seen", "source": "https://t.me/cibsecurity/44937", "content": "\u203c CVE-2022-2174 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-22T16:28:34.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2af40d9a-e40b-476c-a797-21f79b9753d4/export"/>
    <published>2022-06-22T16:28:34+00:00</published>
  </entry>
</feed>
