{"vulnerability": "CVE-2024-5837", "sightings": [{"uuid": "d422e5e5-43dc-49ee-9dc4-a9ba0427bb27", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58374", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f11902b4-8a1f-4cbe-8047-bffb0ecb4f09", "content": "", "creation_timestamp": "2026-08-30T01:01:34.183115Z"}, {"uuid": "e6e4cd70-217e-4fe1-938d-3c7fbb46d427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58376", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtihme3bxq2u", "content": "CVE-2024-58376 - renovate\nIf you use Renovate and have it configured to update Helm charts, an attacker with access to the repository can inject malicious commands by manipulating the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#renovate #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-08-20T05:00:05.489800Z"}, {"uuid": "43fd28af-d4b7-48d3-897b-2f059479e2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58376", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4hmiay725", "content": "\ud83d\udea8 CVE-2024-58376 \u2014 CVSS 9.3 CRITICAL\n\nRenovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager'...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2024-58376\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:07:55.578792Z"}, {"uuid": "3f32238a-3b20-44fb-b331-06521b9b317b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58376", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mth55dr5k32f", "content": "CVE-2024-58376 - renovate\nVersions of Renovate between 37.158.0 and 37.199.0 contain a security flaw that lets attackers with certain permissions execute their own code. This could allow them to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#renovate #renovatebot #CVE #infosec", "creation_timestamp": "2026-08-19T16:20:04.695569Z"}, {"uuid": "903a08cb-c804-4240-ba78-f11f8fb238e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58374", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/295c205e-a54d-4e99-acbb-0dc68150265b", "content": "", "creation_timestamp": "2026-08-29T11:00:33.033734Z"}, {"uuid": "a6880e99-9e38-4b72-b595-1cafdf5016ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hxe6tpcwdauj", "content": "CVE-2024-58374 - Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree\nCVE ID : CVE-2024-58374\n \n Published : Aug. 13, 2026, 5:21 p.m. | 51\u00a0minutes ago\n \n Description : Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet end...", "creation_timestamp": "2026-08-13T18:40:51.828302Z"}, {"uuid": "0b74435a-214b-4cc5-b588-df664aaf9a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58377", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxcjfbz2p", "content": "\ud83d\udea8 CVE-2024-58377 \u2014 CVSS 9.3 CRITICAL\n\nNokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xml...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2024-58377\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:07:41.727530Z"}, {"uuid": "64dc749e-aeff-41ae-87af-62c920d85945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58378", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxkocp42c", "content": "\ud83d\udea8 CVE-2024-58378 \u2014 CVSS 9.3 CRITICAL\n\nNokogiri before 1.15.6 and 1.16.x before 1.16.2 (CRuby, when using the packaged libxml2) is affected by a u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2024-58378\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:07:50.132651Z"}, {"uuid": "a284f526-3686-4161-ad39-7521bb3546b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwmug243p2i", "content": "CVE-2024-58370 - SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service\nCVE ID : CVE-2024-58370\n \n Published : July 18, 2026, 2:17 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested...", "creation_timestamp": "2026-07-18T15:55:46.047119Z"}, {"uuid": "4ea9c928-89ad-42d6-8c5a-205af8f5e2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58377", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwwc56uex23", "content": "CVE-2024-58377 - nokogiri\nVersions of the Nokogiri library earlier than 1.16.5 ship with an older copy of the libxml2 XML processor that contains a known weakness. The flaw is in a command\u2011line tool\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nokogiri #sparklemotion #CVE #infosec", "creation_timestamp": "2026-08-25T23:00:05.400100Z"}]}