https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 15 May 2026 10:40:25 +0000 https://db.gcve.eu/sighting/c0324903-11cd-40ea-b9fa-de83f5dc1cb5/export {"uuid": "c0324903-11cd-40ea-b9fa-de83f5dc1cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45373", "type": "seen", "source": "https://t.me/cibsecurity/71803", "content": "\u203c CVE-2023-45373 \u203c\n\nAn issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:45.000000Z"} {"uuid": "c0324903-11cd-40ea-b9fa-de83f5dc1cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45373", "type": "seen", "source": "https://t.me/cibsecurity/71803", "content": "\u203c CVE-2023-45373 \u203c\n\nAn issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:45.000000Z"} https://db.gcve.eu/sighting/c0324903-11cd-40ea-b9fa-de83f5dc1cb5/export Mon, 09 Oct 2023 12:15:45 +0000 https://db.gcve.eu/sighting/a38199e9-6129-4525-b339-3b9ee76fb86c/export {"uuid": "a38199e9-6129-4525-b339-3b9ee76fb86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45370", "type": "seen", "source": "https://t.me/cibsecurity/71807", "content": "\u203c CVE-2023-45370 \u203c\n\nAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManagerLogo and Special:SportsTeamsManagerLogo do not check for the sportsteamsmanager user right, and thus an attacker may be able to affect pages that are concerned with sports teams.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:52.000000Z"} {"uuid": "a38199e9-6129-4525-b339-3b9ee76fb86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45370", "type": "seen", "source": "https://t.me/cibsecurity/71807", "content": "\u203c CVE-2023-45370 \u203c\n\nAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManagerLogo and Special:SportsTeamsManagerLogo do not check for the sportsteamsmanager user right, and thus an attacker may be able to affect pages that are concerned with sports teams.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:52.000000Z"} https://db.gcve.eu/sighting/a38199e9-6129-4525-b339-3b9ee76fb86c/export Mon, 09 Oct 2023 12:15:52 +0000 https://db.gcve.eu/sighting/c292ded1-9678-4427-9c1a-aa4cf2c5fd8a/export {"uuid": "c292ded1-9678-4427-9c1a-aa4cf2c5fd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45371", "type": "seen", "source": "https://t.me/cibsecurity/71809", "content": "\u203c CVE-2023-45371 \u203c\n\nAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:54.000000Z"} {"uuid": "c292ded1-9678-4427-9c1a-aa4cf2c5fd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45371", "type": "seen", "source": "https://t.me/cibsecurity/71809", "content": "\u203c CVE-2023-45371 \u203c\n\nAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:54.000000Z"} https://db.gcve.eu/sighting/c292ded1-9678-4427-9c1a-aa4cf2c5fd8a/export Mon, 09 Oct 2023 12:15:54 +0000 https://db.gcve.eu/sighting/48b5034a-51ed-4192-ab7e-fc31800a6e9c/export {"uuid": "48b5034a-51ed-4192-ab7e-fc31800a6e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45372", "type": "seen", "source": "https://t.me/cibsecurity/71811", "content": "\u203c CVE-2023-45372 \u203c\n\nAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:56.000000Z"} {"uuid": "48b5034a-51ed-4192-ab7e-fc31800a6e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45372", "type": "seen", "source": "https://t.me/cibsecurity/71811", "content": "\u203c CVE-2023-45372 \u203c\n\nAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running (e.g., AbuseFilter).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:56.000000Z"} https://db.gcve.eu/sighting/48b5034a-51ed-4192-ab7e-fc31800a6e9c/export Mon, 09 Oct 2023 12:15:56 +0000 https://db.gcve.eu/sighting/971c7a9b-0566-42b6-a42f-12e995775f26/export {"uuid": "971c7a9b-0566-42b6-a42f-12e995775f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45374", "type": "seen", "source": "https://t.me/cibsecurity/71813", "content": "\u203c CVE-2023-45374 \u203c\n\nAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:58.000000Z"} {"uuid": "971c7a9b-0566-42b6-a42f-12e995775f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45374", "type": "seen", "source": "https://t.me/cibsecurity/71813", "content": "\u203c CVE-2023-45374 \u203c\n\nAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T12:15:58.000000Z"} https://db.gcve.eu/sighting/971c7a9b-0566-42b6-a42f-12e995775f26/export Mon, 09 Oct 2023 12:15:58 +0000 https://db.gcve.eu/sighting/889b8826-e9af-4cbe-96c4-ba0fe9040a6c/export {"uuid": "889b8826-e9af-4cbe-96c4-ba0fe9040a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45379", "type": "seen", "source": "https://t.me/cibsecurity/72570", "content": "\u203c CVE-2023-45379 \u203c\n\nIn the module \"Rotator Img\" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T16:47:59.000000Z"} {"uuid": "889b8826-e9af-4cbe-96c4-ba0fe9040a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45379", "type": "seen", "source": "https://t.me/cibsecurity/72570", "content": "\u203c CVE-2023-45379 \u203c\n\nIn the module \"Rotator Img\" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T16:47:59.000000Z"} https://db.gcve.eu/sighting/889b8826-e9af-4cbe-96c4-ba0fe9040a6c/export Thu, 19 Oct 2023 16:47:59 +0000 https://db.gcve.eu/sighting/097cb220-8c77-4989-9621-43c373498b78/export {"uuid": "097cb220-8c77-4989-9621-43c373498b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45376", "type": "seen", "source": "https://t.me/cibsecurity/72630", "content": "\u203c CVE-2023-45376 \u203c\n\nIn the module \"Carousels Pack - Instagram, Products, Brands, Supplier\" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T00:34:51.000000Z"} {"uuid": "097cb220-8c77-4989-9621-43c373498b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45376", "type": "seen", "source": "https://t.me/cibsecurity/72630", "content": "\u203c CVE-2023-45376 \u203c\n\nIn the module \"Carousels Pack - Instagram, Products, Brands, Supplier\" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T00:34:51.000000Z"} https://db.gcve.eu/sighting/097cb220-8c77-4989-9621-43c373498b78/export Fri, 20 Oct 2023 00:34:51 +0000 https://db.gcve.eu/sighting/75384bdc-a83b-4a50-b6a3-94be5c33ee7f/export {"uuid": "75384bdc-a83b-4a50-b6a3-94be5c33ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4537", "type": "seen", "source": "https://t.me/ctinow/185389", "content": "https://ift.tt/svwdYux\nCVE-2023-4537", "creation_timestamp": "2024-02-15T10:25:21.000000Z"} {"uuid": "75384bdc-a83b-4a50-b6a3-94be5c33ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4537", "type": "seen", "source": "https://t.me/ctinow/185389", "content": "https://ift.tt/svwdYux\nCVE-2023-4537", "creation_timestamp": "2024-02-15T10:25:21.000000Z"} https://db.gcve.eu/sighting/75384bdc-a83b-4a50-b6a3-94be5c33ee7f/export Thu, 15 Feb 2024 10:25:21 +0000