https://db.gcve.eu/sightings/feed 2026-08-24T22:07:40.352073+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/8bae7dcd-55cb-44e4-b0cf-d27da8aaa377/export 2026-08-24T22:07:40.379102+00:00 sync_user https://db.gcve.eu/user/sync_user {"uuid": "8bae7dcd-55cb-44e4-b0cf-d27da8aaa377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-54458", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:02.966005Z"} 2026-07-28T16:16:02.966005+00:00 https://db.gcve.eu/sighting/ed5fcc0c-a840-4343-aee7-add3881c6908/export 2026-08-24T22:07:40.380964+00:00 sync_user https://db.gcve.eu/user/sync_user {"uuid": "ed5fcc0c-a840-4343-aee7-add3881c6908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-54456", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00 https://db.gcve.eu/sighting/1973a1d9-ecc8-4303-b929-d39db56e5000/export 2026-08-24T22:07:40.381085+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "1973a1d9-ecc8-4303-b929-d39db56e5000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54458", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"} 2025-12-03T14:14:49.267740+00:00 https://db.gcve.eu/sighting/9ada851e-ba11-4959-b923-5ee289d0ecfd/export 2026-08-24T22:07:40.382080+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "9ada851e-ba11-4959-b923-5ee289d0ecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54458", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrtheiu25s2v", "content": "", "creation_timestamp": "2025-06-17T21:38:25.341061Z"} 2025-06-17T21:38:25.341061+00:00 https://db.gcve.eu/sighting/3b837709-f606-4cd5-9e33-319d8235382d/export 2026-08-24T22:07:40.382190+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "3b837709-f606-4cd5-9e33-319d8235382d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54455", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5blbot2f", "content": "", "creation_timestamp": "2025-01-11T13:16:55.895538Z"} 2025-01-11T13:16:55.895538+00:00 https://db.gcve.eu/sighting/6ba764b3-16d5-47dc-9346-c31a228a56e0/export 2026-08-24T22:07:40.382276+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "6ba764b3-16d5-47dc-9346-c31a228a56e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54455", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1306", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-54455\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Fix general protection fault in ivpu_bo_list()\n\nCheck if ctx is not NULL before accessing its fields.\n\ud83d\udccf Published: 2025-01-11T12:35:42.392Z\n\ud83d\udccf Modified: 2025-01-11T12:35:42.392Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a1e597ee5920a6aabdf4dfc3bf76e55e1b115e23\n2. https://git.kernel.org/stable/c/4b2efb9db0c22a130bbd1275e489b42c02d08050", "creation_timestamp": "2025-01-11T13:06:28.000000Z"} 2025-01-11T13:06:28+00:00 https://db.gcve.eu/sighting/0fafd0a1-ff3e-42f1-9d2f-a16ac9691e8c/export 2026-08-24T22:07:40.382372+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "0fafd0a1-ff3e-42f1-9d2f-a16ac9691e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54454", "type": "seen", "source": "https://t.me/cvedetector/13800", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54454 - Kurmi Provisioning Suite Observable Response Discrepancy Directory Brute Force\", \n \"Content\": \"CVE ID : CVE-2024-54454 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or not. This allows confirmation of valid usernames. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:52.000000Z"} 2024-12-27T21:52:52+00:00 https://db.gcve.eu/sighting/cf28c295-134a-4c81-9fff-ec13e7c9cfca/export 2026-08-24T22:07:40.382468+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "cf28c295-134a-4c81-9fff-ec13e7c9cfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54453", "type": "seen", "source": "https://t.me/cvedetector/13799", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54453 - Kurmi Provisioning Suite Path Traversal Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-54453 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in the DocServlet servlet allows remote attackers to retrieve any file from the Kurmi web application installation folder, e.g., files such as the obfuscated and/or compiled Kurmi source code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:48.000000Z"} 2024-12-27T21:52:48+00:00 https://db.gcve.eu/sighting/f2160179-cae5-4519-a6b7-de33e09f2301/export 2026-08-24T22:07:40.382556+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "f2160179-cae5-4519-a6b7-de33e09f2301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54452", "type": "seen", "source": "https://t.me/cvedetector/13798", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54452 - Kurmi Provisioning Suite Directory Traversal and Local File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-54452 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote attackers (authenticated as administrators) to trigger the display of unintended files. Any file accessible to the Kurmi user account could be displayed, e.g., configuration files with information such as the database password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:47.000000Z"} 2024-12-27T21:52:47+00:00 https://db.gcve.eu/sighting/0fe3c080-3a43-4c95-9ce2-c95e2f55dc1d/export 2026-08-24T22:07:40.382644+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "0fe3c080-3a43-4c95-9ce2-c95e2f55dc1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-54451", "type": "seen", "source": "https://t.me/cvedetector/13797", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54451 - Kurmi Provisioning Suite XSS Locator Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-54451 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15 allows remote attackers (authenticated as system administrators) to inject arbitrary web script or HTML via the COMPONENT_fields(htmlTitle) field, which is rendered in other pages of the application for all users (if the graphical customization has been activated by a super-administrator). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"27 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:46.000000Z"} 2024-12-27T21:52:46+00:00