https://vulnerability.circl.lu/sightings/feed 2026-07-22T22:25:44.846673+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3b2a6507-aa0a-4b8f-983f-c3d7ae0a4b3d/export 2026-07-22T22:25:44.871706+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3b2a6507-aa0a-4b8f-983f-c3d7ae0a4b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22875\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: \nIBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356.\n\n\n\ud83d\udccf Published: 2023-01-17T18:22:21.437Z\n\ud83d\udccf Modified: 2025-04-04T18:09:32.880Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6855643\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/244356", "creation_timestamp": "2025-04-04T18:36:24.000000Z"} 2025-04-04T18:36:24+00:00 https://vulnerability.circl.lu/sighting/84ed6a93-492b-4981-91c0-a923275eaa74/export 2026-07-22T22:25:44.873207+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "84ed6a93-492b-4981-91c0-a923275eaa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2287", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1220", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-2287\n\ud83d\udd39 Description: The Orbit Fox by ThemeIsle WordPress plugin before 2.10.24 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user may force the server to access any URL of their choosing.\n\ud83d\udccf Published: 2023-05-30T07:49:17.119Z\n\ud83d\udccf Modified: 2025-01-10T20:55:53.771Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1b36a184-2138-4a65-8940-07e7764669bb", "creation_timestamp": "2025-01-10T21:03:37.000000Z"} 2025-01-10T21:03:37+00:00 https://vulnerability.circl.lu/sighting/d238f69d-33e4-4246-bfdf-619f00218d47/export 2026-07-22T22:25:44.873301+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d238f69d-33e4-4246-bfdf-619f00218d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22870", "type": "seen", "source": "https://t.me/cibsecurity/69816", "content": "\u203c CVE-2023-22870 \u203c\n\nIBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 244121.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T07:16:49.000000Z"} 2023-09-05T07:16:49+00:00 https://vulnerability.circl.lu/sighting/c4e79736-36f9-4067-b430-2bc031c34e7d/export 2026-07-22T22:25:44.873372+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c4e79736-36f9-4067-b430-2bc031c34e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22877", "type": "seen", "source": "https://t.me/cibsecurity/69261", "content": "\u203c CVE-2023-22877 \u203c\n\nIBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-28T07:21:29.000000Z"} 2023-08-28T07:21:29+00:00 https://vulnerability.circl.lu/sighting/58664a5d-3429-4de0-adb5-e1ef496fafb1/export 2026-07-22T22:25:44.873438+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "58664a5d-3429-4de0-adb5-e1ef496fafb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22878", "type": "seen", "source": "https://t.me/cibsecurity/64462", "content": "\u203c CVE-2023-22878 \u203c\n\nIBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T20:33:26.000000Z"} 2023-05-19T20:33:26+00:00 https://vulnerability.circl.lu/sighting/5afd30fe-0d4c-4e14-afd7-ef629d85dea5/export 2026-07-22T22:25:44.873508+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5afd30fe-0d4c-4e14-afd7-ef629d85dea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22874", "type": "seen", "source": "https://t.me/cibsecurity/63368", "content": "\u203c CVE-2023-22874 \u203c\n\nIBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T18:25:06.000000Z"} 2023-05-05T18:25:06+00:00 https://vulnerability.circl.lu/sighting/daff0e68-b420-4e79-ae28-aff5b23f2ee5/export 2026-07-22T22:25:44.873581+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "daff0e68-b420-4e79-ae28-aff5b23f2ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22876", "type": "seen", "source": "https://t.me/cibsecurity/60082", "content": "\u203c CVE-2023-22876 \u203c\n\nIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T21:30:07.000000Z"} 2023-03-15T21:30:07+00:00 https://vulnerability.circl.lu/sighting/7de2c449-46ea-4c25-b36f-e4a980db552b/export 2026-07-22T22:25:44.873647+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7de2c449-46ea-4c25-b36f-e4a980db552b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22875", "type": "seen", "source": "https://t.me/cibsecurity/56616", "content": "\u203c CVE-2023-22875 \u203c\n\nIBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T22:15:36.000000Z"} 2023-01-17T22:15:36+00:00