<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-28T14:15:58.005047+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d559f576-b9dc-40dd-a16b-558e7bfbdceb/export</id>
    <title>d559f576-b9dc-40dd-a16b-558e7bfbdceb</title>
    <updated>2026-05-28T14:15:58.378749+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d559f576-b9dc-40dd-a16b-558e7bfbdceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38784", "type": "seen", "source": "https://t.me/cibsecurity/49028", "content": "\u203c CVE-2022-38784 \u203c\n\nPoppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-30T07:35:02.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d559f576-b9dc-40dd-a16b-558e7bfbdceb/export"/>
    <published>2022-08-30T07:35:02+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0f16e45d-3bfc-40fa-ae3b-3739dc59914e/export</id>
    <title>0f16e45d-3bfc-40fa-ae3b-3739dc59914e</title>
    <updated>2026-05-28T14:15:58.378662+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0f16e45d-3bfc-40fa-ae3b-3739dc59914e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3878", "type": "seen", "source": "https://t.me/cibsecurity/52603", "content": "\u203c CVE-2022-3878 \u203c\n\nA vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchase_order/browse_data. The manipulation of the argument tb_search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213039.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-07T18:34:30.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0f16e45d-3bfc-40fa-ae3b-3739dc59914e/export"/>
    <published>2022-11-07T18:34:30+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e1ebb31-98fb-4922-ad2a-d58cdb5a6513/export</id>
    <title>3e1ebb31-98fb-4922-ad2a-d58cdb5a6513</title>
    <updated>2026-05-28T14:15:58.378547+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e1ebb31-98fb-4922-ad2a-d58cdb5a6513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38787", "type": "seen", "source": "https://t.me/cibsecurity/63782", "content": "\u203c CVE-2022-38787 \u203c\n\nImproper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T18:25:43.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e1ebb31-98fb-4922-ad2a-d58cdb5a6513/export"/>
    <published>2023-05-10T18:25:43+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/226e0035-4ffc-4fdd-bfbf-dc7ab3fd322a/export</id>
    <title>226e0035-4ffc-4fdd-bfbf-dc7ab3fd322a</title>
    <updated>2026-05-28T14:15:58.376485+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "226e0035-4ffc-4fdd-bfbf-dc7ab3fd322a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38784", "type": "seen", "source": "https://t.me/arpsyndicate/2026", "content": "#ExploitObserverAlert\n\nCVE-2022-38784\n\nDESCRIPTION: Exploit Observer has 15 entries related to CVE-2022-38784. Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.\n\nFIRST-EPSS: 0.001060000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-18T16:55:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/226e0035-4ffc-4fdd-bfbf-dc7ab3fd322a/export"/>
    <published>2023-12-18T16:55:03+00:00</published>
  </entry>
</feed>
