https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 14:21:01 +0000 https://db.gcve.eu/sighting/347731db-0e06-4a0f-8c02-bb81f7915d31/export {"uuid": "347731db-0e06-4a0f-8c02-bb81f7915d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-45411", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpcgntea2u", "content": "", "creation_timestamp": "2026-05-20T10:32:42.867934Z"} {"uuid": "347731db-0e06-4a0f-8c02-bb81f7915d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-45411", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbpcgntea2u", "content": "", "creation_timestamp": "2026-05-20T10:32:42.867934Z"} https://db.gcve.eu/sighting/347731db-0e06-4a0f-8c02-bb81f7915d31/export Wed, 20 May 2026 10:32:42 +0000 https://db.gcve.eu/sighting/915811f6-fac0-47d5-9ad1-22a4d6d9cdc3/export {"uuid": "915811f6-fac0-47d5-9ad1-22a4d6d9cdc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-45410", "type": "seen", "source": "https://gist.github.com/fernandinand/80cb943bc13477d76a3adff5cb86715c", "content": "", "creation_timestamp": "2026-04-22T13:26:30.000000Z"} {"uuid": "915811f6-fac0-47d5-9ad1-22a4d6d9cdc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-45410", "type": "seen", "source": "https://gist.github.com/fernandinand/80cb943bc13477d76a3adff5cb86715c", "content": "", "creation_timestamp": "2026-04-22T13:26:30.000000Z"} https://db.gcve.eu/sighting/915811f6-fac0-47d5-9ad1-22a4d6d9cdc3/export Wed, 22 Apr 2026 13:26:30 +0000 https://db.gcve.eu/sighting/4dd41792-ddfe-4d96-91cb-0a1bb860b158/export {"uuid": "4dd41792-ddfe-4d96-91cb-0a1bb860b158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45417", "type": "seen", "source": "https://t.me/cvedetector/18926", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45417 - Zoom macOS Installer Resource Consumption Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45417 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"25 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:27.000000Z"} {"uuid": "4dd41792-ddfe-4d96-91cb-0a1bb860b158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45417", "type": "seen", "source": "https://t.me/cvedetector/18926", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45417 - Zoom macOS Installer Resource Consumption Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45417 \nPublished : Feb. 25, 2025, 8:15 p.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"25 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T23:14:27.000000Z"} https://db.gcve.eu/sighting/4dd41792-ddfe-4d96-91cb-0a1bb860b158/export Tue, 25 Feb 2025 23:14:27 +0000 https://db.gcve.eu/sighting/2d374ba3-d203-40a4-b7d9-905e358159b3/export {"uuid": "2d374ba3-d203-40a4-b7d9-905e358159b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45417", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45417\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.\n\ud83d\udccf Published: 2025-02-25T19:49:22.296Z\n\ud83d\udccf Modified: 2025-02-25T19:49:22.296Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-24039/", "creation_timestamp": "2025-02-25T20:23:14.000000Z"} {"uuid": "2d374ba3-d203-40a4-b7d9-905e358159b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45417", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45417\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access.\n\ud83d\udccf Published: 2025-02-25T19:49:22.296Z\n\ud83d\udccf Modified: 2025-02-25T19:49:22.296Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-24039/", "creation_timestamp": "2025-02-25T20:23:14.000000Z"} https://db.gcve.eu/sighting/2d374ba3-d203-40a4-b7d9-905e358159b3/export Tue, 25 Feb 2025 20:23:14 +0000 https://db.gcve.eu/sighting/23703926-cb59-4f82-accb-91c4dc2e01ad/export {"uuid": "23703926-cb59-4f82-accb-91c4dc2e01ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45418", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45418\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.\n\ud83d\udccf Published: 2025-02-25T19:52:25.471Z\n\ud83d\udccf Modified: 2025-02-25T20:07:09.959Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-24040/", "creation_timestamp": "2025-02-25T20:22:57.000000Z"} {"uuid": "23703926-cb59-4f82-accb-91c4dc2e01ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45418", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45418\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.\n\ud83d\udccf Published: 2025-02-25T19:52:25.471Z\n\ud83d\udccf Modified: 2025-02-25T20:07:09.959Z\n\ud83d\udd17 References:\n1. https://www.zoom.com/en/trust/security-bulletin/zsb-24040/", "creation_timestamp": "2025-02-25T20:22:57.000000Z"} https://db.gcve.eu/sighting/23703926-cb59-4f82-accb-91c4dc2e01ad/export Tue, 25 Feb 2025 20:22:57 +0000 https://db.gcve.eu/sighting/04f6c636-e68f-4333-92e9-077eaf5c5434/export {"uuid": "04f6c636-e68f-4333-92e9-077eaf5c5434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45419", "type": "seen", "source": "https://t.me/cvedetector/11517", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45419 - Zoom Privileged Information Disclosure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45419 \nPublished : Nov. 19, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"19 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T21:51:19.000000Z"} {"uuid": "04f6c636-e68f-4333-92e9-077eaf5c5434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45419", "type": "seen", "source": "https://t.me/cvedetector/11517", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45419 - Zoom Privileged Information Disclosure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45419 \nPublished : Nov. 19, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"19 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T21:51:19.000000Z"} https://db.gcve.eu/sighting/04f6c636-e68f-4333-92e9-077eaf5c5434/export Tue, 19 Nov 2024 21:51:19 +0000 https://db.gcve.eu/sighting/6313c4aa-e3f4-4688-8660-a64eb6573879/export {"uuid": "6313c4aa-e3f4-4688-8660-a64eb6573879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45410", "type": "seen", "source": "https://t.me/cvedetector/6086", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45410 - Traefik HTTP/1.1 Header Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45410 \nPublished : Sept. 19, 2024, 11:15 p.m. | 41\u00a0minutes ago \nDescription : Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modify these headers. Since the application trusts the value of these headers, security implications might arise, if they can be modified. For HTTP/1.1, however, it was found that some of theses custom headers can indeed be removed and in certain cases manipulated. The attack relies on the HTTP/1.1 behavior, that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been addressed in release versions 2.11.9 and 3.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T02:11:46.000000Z"} {"uuid": "6313c4aa-e3f4-4688-8660-a64eb6573879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45410", "type": "seen", "source": "https://t.me/cvedetector/6086", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45410 - Traefik HTTP/1.1 Header Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-45410 \nPublished : Sept. 19, 2024, 11:15 p.m. | 41\u00a0minutes ago \nDescription : Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modify these headers. Since the application trusts the value of these headers, security implications might arise, if they can be modified. For HTTP/1.1, however, it was found that some of theses custom headers can indeed be removed and in certain cases manipulated. The attack relies on the HTTP/1.1 behavior, that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been addressed in release versions 2.11.9 and 3.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T02:11:46.000000Z"} https://db.gcve.eu/sighting/6313c4aa-e3f4-4688-8660-a64eb6573879/export Fri, 20 Sep 2024 02:11:46 +0000 https://db.gcve.eu/sighting/dde5b3eb-850d-4b1d-a935-eb351f763fea/export {"uuid": "dde5b3eb-850d-4b1d-a935-eb351f763fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-45410", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-62c8-mh53-4cqv", "content": "", "creation_timestamp": "2024-09-19T13:44:39.000000Z"} {"uuid": "dde5b3eb-850d-4b1d-a935-eb351f763fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-45410", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-62c8-mh53-4cqv", "content": "", "creation_timestamp": "2024-09-19T13:44:39.000000Z"} https://db.gcve.eu/sighting/dde5b3eb-850d-4b1d-a935-eb351f763fea/export Thu, 19 Sep 2024 13:44:39 +0000 https://db.gcve.eu/sighting/0bfcdc18-6f4a-416a-8dc0-4b65c583dd10/export {"uuid": "0bfcdc18-6f4a-416a-8dc0-4b65c583dd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45415", "type": "seen", "source": "https://t.me/cvedetector/5770", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45415 - ZTE HTTPD Stack-based Buffer Overflow RCE\", \n \"Content\": \"CVE ID : CVE-2024-45415 \nPublished : Sept. 16, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksum on the stack without validating it. An unauthenticated attacker can get RCE as root by exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T23:43:37.000000Z"} {"uuid": "0bfcdc18-6f4a-416a-8dc0-4b65c583dd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45415", "type": "seen", "source": "https://t.me/cvedetector/5770", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45415 - ZTE HTTPD Stack-based Buffer Overflow RCE\", \n \"Content\": \"CVE ID : CVE-2024-45415 \nPublished : Sept. 16, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksum on the stack without validating it. An unauthenticated attacker can get RCE as root by exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T23:43:37.000000Z"} https://db.gcve.eu/sighting/0bfcdc18-6f4a-416a-8dc0-4b65c583dd10/export Mon, 16 Sep 2024 23:43:37 +0000 https://db.gcve.eu/sighting/5a18f108-e2f7-48b0-8909-48134212c5c6/export {"uuid": "5a18f108-e2f7-48b0-8909-48134212c5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45414", "type": "seen", "source": "https://t.me/cvedetector/5769", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45414 - ZTE HTTPD Root Stack Buffer Overflow\", \n \"Content\": \"CVE ID : CVE-2024-45414 \nPublished : Sept. 16, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checking its length. An unauthenticated attacker can get RCE as root by exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T23:43:36.000000Z"} {"uuid": "5a18f108-e2f7-48b0-8909-48134212c5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45414", "type": "seen", "source": "https://t.me/cvedetector/5769", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-45414 - ZTE HTTPD Root Stack Buffer Overflow\", \n \"Content\": \"CVE ID : CVE-2024-45414 \nPublished : Sept. 16, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checking its length. An unauthenticated attacker can get RCE as root by exploiting this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T23:43:36.000000Z"} https://db.gcve.eu/sighting/5a18f108-e2f7-48b0-8909-48134212c5c6/export Mon, 16 Sep 2024 23:43:36 +0000