{"vulnerability": "CVE-2021-3905", "sightings": [{"uuid": "f0ff994e-c8c1-42f1-b801-360a200fc47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39056", "type": "seen", "source": "https://t.me/cibsecurity/35429", "content": "\u203c CVE-2021-39056 \u203c\n\nThe IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-13T20:18:27.000000Z"}, {"uuid": "ded4133d-cea4-4795-aa7d-fa4e543ca628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39055", "type": "seen", "source": "https://t.me/cibsecurity/38894", "content": "\u203c CVE-2021-39055 \u203c\n\nIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214534.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-14T19:18:24.000000Z"}, {"uuid": "64f0f634-245d-46e9-b003-01bbe8d1148f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39051", "type": "seen", "source": "https://t.me/cibsecurity/38888", "content": "\u203c CVE-2021-39051 \u203c\n\nIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-14T19:18:16.000000Z"}, {"uuid": "a110d434-c236-4bf5-ae16-1ef51f11229a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3905", "type": "seen", "source": "https://t.me/arpsyndicate/850", "content": "#ExploitObserverAlert\n\nCVE-2021-3905\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2021-3905. A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.\n\nFIRST-EPSS: 0.001650000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-01T09:08:00.000000Z"}, {"uuid": "47e1af25-4947-43e1-b3ad-526a4c267c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39059", "type": "seen", "source": "https://t.me/cibsecurity/42382", "content": "\u203c CVE-2021-39059 \u203c\n\nIBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214619.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T20:34:25.000000Z"}, {"uuid": "d68bfdd8-d59b-453d-8599-9ce829bbadd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39057", "type": "seen", "source": "https://t.me/cibsecurity/33878", "content": "\u203c CVE-2021-39057 \u203c\n\nIBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T22:12:14.000000Z"}, {"uuid": "3a6322cf-f87e-49d6-9f8a-964dd8c9e50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39058", "type": "seen", "source": "https://t.me/cibsecurity/33873", "content": "\u203c CVE-2021-39058 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:16.000000Z"}, {"uuid": "6274cce7-d90b-4b6d-bd39-c72b6d100496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39054", "type": "seen", "source": "https://t.me/cibsecurity/33874", "content": "\u203c CVE-2021-39054 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 214525.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:20.000000Z"}, {"uuid": "bc4f92fa-9bdc-48fb-9071-844fcaf44138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39053", "type": "seen", "source": "https://t.me/cibsecurity/33864", "content": "\u203c CVE-2021-39053 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:07.000000Z"}, {"uuid": "d7bcef49-918c-4715-a1d3-e65e0326c9a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39050", "type": "seen", "source": "https://t.me/cibsecurity/33882", "content": "\u203c CVE-2021-39050 \u203c\n\nIBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 214440.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T22:12:20.000000Z"}, {"uuid": "fc98b385-25e5-465c-bb39-3a5128cb5930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39052", "type": "seen", "source": "https://t.me/cibsecurity/33868", "content": "\u203c CVE-2021-39052 \u203c\n\nIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T20:11:11.000000Z"}]}