https://db.gcve.eu/sightings/feed 2026-07-27T16:55:35.556654+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/5d4633bc-76aa-4e52-904a-c13b3018924d/export 2026-07-27T16:55:35.573596+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "5d4633bc-76aa-4e52-904a-c13b3018924d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38385", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38385\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: \nIBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777.\n\n\n\ud83d\udccf Published: 2022-11-11T18:19:55.616Z\n\ud83d\udccf Modified: 2025-05-01T13:52:39.520Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6833586\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/233777", "creation_timestamp": "2025-05-01T14:15:38.000000Z"} 2025-05-01T14:15:38+00:00 https://db.gcve.eu/sighting/3b383631-3a29-4604-a979-217c1ac454eb/export 2026-07-27T16:55:35.575591+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "3b383631-3a29-4604-a979-217c1ac454eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38387", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38387\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786.\n\ud83d\udccf Published: 2022-11-11T18:16:00.169Z\n\ud83d\udccf Modified: 2025-05-01T13:58:18.515Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6833584\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/233786", "creation_timestamp": "2025-05-01T14:15:30.000000Z"} 2025-05-01T14:15:30+00:00 https://db.gcve.eu/sighting/4eff744f-acf5-48a8-922a-a5aab87702f9/export 2026-07-27T16:55:35.575706+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "4eff744f-acf5-48a8-922a-a5aab87702f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38382", "type": "seen", "source": "https://t.me/cvedetector/2943", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2022-38382 - IBM Cloud Pak for Security (CP4S) Session Traversal Vulnerability\", \n \"Content\": \"CVE ID : CVE-2022-38382 \nPublished : Aug. 13, 2024, 2:15 a.m. | 38\u00a0minutes ago \nDescription : IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another user to obtain sensitive information. IBM X-Force ID: 233672. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"13 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T05:23:36.000000Z"} 2024-08-13T05:23:36+00:00 https://db.gcve.eu/sighting/f8501c00-e99e-483b-bdb1-26c401c7e13a/export 2026-07-27T16:55:35.575801+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "f8501c00-e99e-483b-bdb1-26c401c7e13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3838", "type": "seen", "source": "https://t.me/cibsecurity/53999", "content": "\u203c CVE-2022-3838 \u203c\n\nThe WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-05T20:40:00.000000Z"} 2022-12-05T20:40:00+00:00 https://db.gcve.eu/sighting/e4a40f36-1b60-4029-be6f-3acb6d41f057/export 2026-07-27T16:55:35.575889+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "e4a40f36-1b60-4029-be6f-3acb6d41f057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38388", "type": "seen", "source": "https://t.me/cibsecurity/51131", "content": "\u203c CVE-2022-38388 \u203c\n\nIBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T20:26:05.000000Z"} 2022-10-11T20:26:05+00:00