<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 31 May 2026 07:19:41 +0000</lastBuildDate>
    <item>
      <title>e6b32b00-3795-4222-aba3-5dab2f597464</title>
      <link>https://vulnerability.circl.lu/sighting/e6b32b00-3795-4222-aba3-5dab2f597464/export</link>
      <description>{"uuid": "e6b32b00-3795-4222-aba3-5dab2f597464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40647", "type": "seen", "source": "https://t.me/cibsecurity/49831", "content": "\u203c CVE-2022-40647 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17558.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:38.000000Z"}</description>
      <content:encoded>{"uuid": "e6b32b00-3795-4222-aba3-5dab2f597464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40647", "type": "seen", "source": "https://t.me/cibsecurity/49831", "content": "\u203c CVE-2022-40647 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17558.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6b32b00-3795-4222-aba3-5dab2f597464/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:27:38 +0000</pubDate>
    </item>
    <item>
      <title>00d5e964-6624-47dd-970a-eb7aecf3e5c3</title>
      <link>https://vulnerability.circl.lu/sighting/00d5e964-6624-47dd-970a-eb7aecf3e5c3/export</link>
      <description>{"uuid": "00d5e964-6624-47dd-970a-eb7aecf3e5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40641", "type": "seen", "source": "https://t.me/cibsecurity/49832", "content": "\u203c CVE-2022-40641 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17317.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:39.000000Z"}</description>
      <content:encoded>{"uuid": "00d5e964-6624-47dd-970a-eb7aecf3e5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40641", "type": "seen", "source": "https://t.me/cibsecurity/49832", "content": "\u203c CVE-2022-40641 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17317.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00d5e964-6624-47dd-970a-eb7aecf3e5c3/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:27:39 +0000</pubDate>
    </item>
    <item>
      <title>e635a726-94d0-48df-a242-f8a6e2b9e2fb</title>
      <link>https://vulnerability.circl.lu/sighting/e635a726-94d0-48df-a242-f8a6e2b9e2fb/export</link>
      <description>{"uuid": "e635a726-94d0-48df-a242-f8a6e2b9e2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40649", "type": "seen", "source": "https://t.me/cibsecurity/49833", "content": "\u203c CVE-2022-40649 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17565.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:40.000000Z"}</description>
      <content:encoded>{"uuid": "e635a726-94d0-48df-a242-f8a6e2b9e2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40649", "type": "seen", "source": "https://t.me/cibsecurity/49833", "content": "\u203c CVE-2022-40649 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17565.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e635a726-94d0-48df-a242-f8a6e2b9e2fb/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:27:40 +0000</pubDate>
    </item>
    <item>
      <title>86ab2426-daff-4029-8544-7b99006d4e56</title>
      <link>https://vulnerability.circl.lu/sighting/86ab2426-daff-4029-8544-7b99006d4e56/export</link>
      <description>{"uuid": "86ab2426-daff-4029-8544-7b99006d4e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40645", "type": "seen", "source": "https://t.me/cibsecurity/49840", "content": "\u203c CVE-2022-40645 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17540.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:47.000000Z"}</description>
      <content:encoded>{"uuid": "86ab2426-daff-4029-8544-7b99006d4e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40645", "type": "seen", "source": "https://t.me/cibsecurity/49840", "content": "\u203c CVE-2022-40645 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17540.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86ab2426-daff-4029-8544-7b99006d4e56/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:27:47 +0000</pubDate>
    </item>
    <item>
      <title>69e321c1-dbc2-42e6-912c-b0e52d22f3f9</title>
      <link>https://vulnerability.circl.lu/sighting/69e321c1-dbc2-42e6-912c-b0e52d22f3f9/export</link>
      <description>{"uuid": "69e321c1-dbc2-42e6-912c-b0e52d22f3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40643", "type": "seen", "source": "https://t.me/cibsecurity/49844", "content": "\u203c CVE-2022-40643 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17407.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:55.000000Z"}</description>
      <content:encoded>{"uuid": "69e321c1-dbc2-42e6-912c-b0e52d22f3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40643", "type": "seen", "source": "https://t.me/cibsecurity/49844", "content": "\u203c CVE-2022-40643 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17407.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:27:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/69e321c1-dbc2-42e6-912c-b0e52d22f3f9/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:27:55 +0000</pubDate>
    </item>
    <item>
      <title>52e8657d-0d5f-4c21-8c7b-3133c25410c2</title>
      <link>https://vulnerability.circl.lu/sighting/52e8657d-0d5f-4c21-8c7b-3133c25410c2/export</link>
      <description>{"uuid": "52e8657d-0d5f-4c21-8c7b-3133c25410c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40640", "type": "seen", "source": "https://t.me/cibsecurity/49848", "content": "\u203c CVE-2022-40640 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17308.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:01.000000Z"}</description>
      <content:encoded>{"uuid": "52e8657d-0d5f-4c21-8c7b-3133c25410c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40640", "type": "seen", "source": "https://t.me/cibsecurity/49848", "content": "\u203c CVE-2022-40640 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17308.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52e8657d-0d5f-4c21-8c7b-3133c25410c2/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:28:01 +0000</pubDate>
    </item>
    <item>
      <title>8d0bb695-ac0c-49ff-8ada-fde9f5ff2377</title>
      <link>https://vulnerability.circl.lu/sighting/8d0bb695-ac0c-49ff-8ada-fde9f5ff2377/export</link>
      <description>{"uuid": "8d0bb695-ac0c-49ff-8ada-fde9f5ff2377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/cibsecurity/49850", "content": "\u203c CVE-2022-40648 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:04.000000Z"}</description>
      <content:encoded>{"uuid": "8d0bb695-ac0c-49ff-8ada-fde9f5ff2377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/cibsecurity/49850", "content": "\u203c CVE-2022-40648 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d0bb695-ac0c-49ff-8ada-fde9f5ff2377/export</guid>
      <pubDate>Thu, 15 Sep 2022 20:28:04 +0000</pubDate>
    </item>
    <item>
      <title>cb464ead-346e-43f7-938e-b06ef2a06589</title>
      <link>https://vulnerability.circl.lu/sighting/cb464ead-346e-43f7-938e-b06ef2a06589/export</link>
      <description>{"uuid": "cb464ead-346e-43f7-938e-b06ef2a06589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "seen", "source": "https://t.me/cibsecurity/53205", "content": "\u203c CVE-2022-4064 \u203c\n\nA vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to apply a patch to fix this issue. VDB-214026 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T06:15:31.000000Z"}</description>
      <content:encoded>{"uuid": "cb464ead-346e-43f7-938e-b06ef2a06589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "seen", "source": "https://t.me/cibsecurity/53205", "content": "\u203c CVE-2022-4064 \u203c\n\nA vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to apply a patch to fix this issue. VDB-214026 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T06:15:31.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb464ead-346e-43f7-938e-b06ef2a06589/export</guid>
      <pubDate>Sun, 20 Nov 2022 06:15:31 +0000</pubDate>
    </item>
    <item>
      <title>3a736258-c261-4afd-8cae-ddd90f187cb4</title>
      <link>https://vulnerability.circl.lu/sighting/3a736258-c261-4afd-8cae-ddd90f187cb4/export</link>
      <description>{"uuid": "3a736258-c261-4afd-8cae-ddd90f187cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/arpsyndicate/2688", "content": "#ExploitObserverAlert\n\nCVE-2022-40648\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-40648. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-08T22:23:11.000000Z"}</description>
      <content:encoded>{"uuid": "3a736258-c261-4afd-8cae-ddd90f187cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40648", "type": "seen", "source": "https://t.me/arpsyndicate/2688", "content": "#ExploitObserverAlert\n\nCVE-2022-40648\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-40648. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-08T22:23:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3a736258-c261-4afd-8cae-ddd90f187cb4/export</guid>
      <pubDate>Mon, 08 Jan 2024 22:23:11 +0000</pubDate>
    </item>
    <item>
      <title>cafd0b6a-263d-4ebd-b95e-47fbdff24a74</title>
      <link>https://vulnerability.circl.lu/sighting/cafd0b6a-263d-4ebd-b95e-47fbdff24a74/export</link>
      <description>{"uuid": "cafd0b6a-263d-4ebd-b95e-47fbdff24a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4064\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.3 is able to address this issue. The patch is identified as 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2022-11-19T00:00:00\n\ud83d\udccf Modified: 2025-03-28T05:29:58.623Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.214026\n2. https://vuldb.com/?ctiid.214026\n3. https://github.com/petergoldstein/dalli/issues/932\n4. https://github.com/petergoldstein/dalli/pull/933\n5. https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d\n6. https://github.com/petergoldstein/dalli/releases/tag/v3.2.3\n7. https://github.com/advisories/GHSA-3xg8-cc8f-9wv2", "creation_timestamp": "2025-03-28T06:29:45.000000Z"}</description>
      <content:encoded>{"uuid": "cafd0b6a-263d-4ebd-b95e-47fbdff24a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4064", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4064\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.3 is able to address this issue. The patch is identified as 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2022-11-19T00:00:00\n\ud83d\udccf Modified: 2025-03-28T05:29:58.623Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.214026\n2. https://vuldb.com/?ctiid.214026\n3. https://github.com/petergoldstein/dalli/issues/932\n4. https://github.com/petergoldstein/dalli/pull/933\n5. https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d\n6. https://github.com/petergoldstein/dalli/releases/tag/v3.2.3\n7. https://github.com/advisories/GHSA-3xg8-cc8f-9wv2", "creation_timestamp": "2025-03-28T06:29:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cafd0b6a-263d-4ebd-b95e-47fbdff24a74/export</guid>
      <pubDate>Fri, 28 Mar 2025 06:29:45 +0000</pubDate>
    </item>
  </channel>
</rss>
