<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-22T22:05:54.549361+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/307881b3-a598-4bac-ba07-54881062637f/export</id>
    <title>307881b3-a598-4bac-ba07-54881062637f</title>
    <updated>2026-07-22T22:05:54.573267+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "307881b3-a598-4bac-ba07-54881062637f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24038", "type": "seen", "source": "https://t.me/cibsecurity/27610", "content": "\u203c CVE-2021-24038 \u203c\n\nDue to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T20:18:20.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/307881b3-a598-4bac-ba07-54881062637f/export"/>
    <published>2021-08-19T20:18:20+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/84f848dd-8901-4f45-ace8-c172fbd79408/export</id>
    <title>84f848dd-8901-4f45-ace8-c172fbd79408</title>
    <updated>2026-07-22T22:05:54.576079+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "84f848dd-8901-4f45-ace8-c172fbd79408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24036", "type": "seen", "source": "https://t.me/cibsecurity/26431", "content": "\u203c CVE-2021-24036 \u203c\n\nPassing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-23T07:37:06.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/84f848dd-8901-4f45-ace8-c172fbd79408/export"/>
    <published>2021-07-23T07:37:06+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/44d49d3e-f73d-4f03-ad24-f54c33beaee7/export</id>
    <title>44d49d3e-f73d-4f03-ad24-f54c33beaee7</title>
    <updated>2026-07-22T22:05:54.576229+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "44d49d3e-f73d-4f03-ad24-f54c33beaee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24037", "type": "seen", "source": "https://t.me/cibsecurity/25475", "content": "\u203c CVE-2021-24037 \u203c\n\nA use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-16T02:39:10.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/44d49d3e-f73d-4f03-ad24-f54c33beaee7/export"/>
    <published>2021-06-16T02:39:10+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/cc9a920f-1390-437a-82c7-2d7ac46b6c8f/export</id>
    <title>cc9a920f-1390-437a-82c7-2d7ac46b6c8f</title>
    <updated>2026-07-22T22:05:54.576324+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "cc9a920f-1390-437a-82c7-2d7ac46b6c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-24033", "type": "seen", "source": "https://t.me/cibsecurity/24584", "content": "\u203c CVE-2021-24033 \u203c\n\nreact-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T07:51:05.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/cc9a920f-1390-437a-82c7-2d7ac46b6c8f/export"/>
    <published>2021-03-09T07:51:05+00:00</published>
  </entry>
</feed>
