https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 31 Jul 2026 22:56:14 +0000 https://db.gcve.eu/sighting/01301f17-6e87-405f-b63d-94c73f399ce5/export {"uuid": "01301f17-6e87-405f-b63d-94c73f399ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55890", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44ehcyv2f", "content": "", "creation_timestamp": "2025-12-20T21:02:59.296521Z"} {"uuid": "01301f17-6e87-405f-b63d-94c73f399ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55890", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44ehcyv2f", "content": "", "creation_timestamp": "2025-12-20T21:02:59.296521Z"} https://db.gcve.eu/sighting/01301f17-6e87-405f-b63d-94c73f399ce5/export Sat, 20 Dec 2025 21:02:59 +0000 https://db.gcve.eu/sighting/38410e25-83ca-4a20-8c40-cd7ea3f4a9f4/export {"uuid": "38410e25-83ca-4a20-8c40-cd7ea3f4a9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/cvedetector/21509", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55895 - IBM InfoSphere Information Server Information Disclosure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-55895 \nPublished : March 29, 2025, 1:15 p.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"29 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T17:10:02.000000Z"} {"uuid": "38410e25-83ca-4a20-8c40-cd7ea3f4a9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/cvedetector/21509", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55895 - IBM InfoSphere Information Server Information Disclosure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-55895 \nPublished : March 29, 2025, 1:15 p.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"29 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T17:10:02.000000Z"} https://db.gcve.eu/sighting/38410e25-83ca-4a20-8c40-cd7ea3f4a9f4/export Sat, 29 Mar 2025 17:10:02 +0000 https://db.gcve.eu/sighting/81f682d0-3ab3-4ace-8371-7b9cbd8b7be6/export {"uuid": "81f682d0-3ab3-4ace-8371-7b9cbd8b7be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9542", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55895\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.\n\ud83d\udccf Published: 2025-03-29T12:22:50.518Z\n\ud83d\udccf Modified: 2025-03-29T12:22:50.518Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7185450", "creation_timestamp": "2025-03-29T13:28:42.000000Z"} {"uuid": "81f682d0-3ab3-4ace-8371-7b9cbd8b7be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9542", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55895\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.\n\ud83d\udccf Published: 2025-03-29T12:22:50.518Z\n\ud83d\udccf Modified: 2025-03-29T12:22:50.518Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7185450", "creation_timestamp": "2025-03-29T13:28:42.000000Z"} https://db.gcve.eu/sighting/81f682d0-3ab3-4ace-8371-7b9cbd8b7be6/export Sat, 29 Mar 2025 13:28:42 +0000 https://db.gcve.eu/sighting/1b0d9a90-8d00-451a-ac2c-7e5de10db86a/export {"uuid": "1b0d9a90-8d00-451a-ac2c-7e5de10db86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "Telegram/q9ifg7yJf4xGEYmIIenvJSNU6X_bXi9Gjjqd5Nkc9MHGWTQq", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"} {"uuid": "1b0d9a90-8d00-451a-ac2c-7e5de10db86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "Telegram/q9ifg7yJf4xGEYmIIenvJSNU6X_bXi9Gjjqd5Nkc9MHGWTQq", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"} https://db.gcve.eu/sighting/1b0d9a90-8d00-451a-ac2c-7e5de10db86a/export Mon, 24 Feb 2025 14:08:41 +0000 https://db.gcve.eu/sighting/b1a101cd-1320-4aa6-bfcc-e8de069d963c/export {"uuid": "b1a101cd-1320-4aa6-bfcc-e8de069d963c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114056818035334137", "content": "", "creation_timestamp": "2025-02-24T03:48:48.161901Z"} {"uuid": "b1a101cd-1320-4aa6-bfcc-e8de069d963c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114056818035334137", "content": "", "creation_timestamp": "2025-02-24T03:48:48.161901Z"} https://db.gcve.eu/sighting/b1a101cd-1320-4aa6-bfcc-e8de069d963c/export Mon, 24 Feb 2025 03:48:48 +0000 https://db.gcve.eu/sighting/61a81bdb-0d97-409c-8335-e8507bde8f6c/export {"uuid": "61a81bdb-0d97-409c-8335-e8507bde8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/cvedetector/18771", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55898 - IBM i Unqualified Library Call Privilege Escalation Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-55898 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"24 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:41.000000Z"} {"uuid": "61a81bdb-0d97-409c-8335-e8507bde8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/cvedetector/18771", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55898 - IBM i Unqualified Library Call Privilege Escalation Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-55898 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"24 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:41.000000Z"} https://db.gcve.eu/sighting/61a81bdb-0d97-409c-8335-e8507bde8f6c/export Mon, 24 Feb 2025 03:44:41 +0000 https://db.gcve.eu/sighting/055bd47a-5755-4b29-9cc4-fcbdb8a9d82f/export {"uuid": "055bd47a-5755-4b29-9cc4-fcbdb8a9d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5116", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55898\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.\n\ud83d\udccf Published: 2025-02-24T02:01:55.854Z\n\ud83d\udccf Modified: 2025-02-24T02:01:55.854Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7183835", "creation_timestamp": "2025-02-24T02:21:31.000000Z"} {"uuid": "055bd47a-5755-4b29-9cc4-fcbdb8a9d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5116", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55898\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.\n\ud83d\udccf Published: 2025-02-24T02:01:55.854Z\n\ud83d\udccf Modified: 2025-02-24T02:01:55.854Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7183835", "creation_timestamp": "2025-02-24T02:21:31.000000Z"} https://db.gcve.eu/sighting/055bd47a-5755-4b29-9cc4-fcbdb8a9d82f/export Mon, 24 Feb 2025 02:21:31 +0000 https://db.gcve.eu/sighting/611902af-9823-4c36-b15f-10dbbe813c38/export {"uuid": "611902af-9823-4c36-b15f-10dbbe813c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3litiuhjcfs2y", "content": "", "creation_timestamp": "2025-02-23T09:18:28.608203Z"} {"uuid": "611902af-9823-4c36-b15f-10dbbe813c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3litiuhjcfs2y", "content": "", "creation_timestamp": "2025-02-23T09:18:28.608203Z"} https://db.gcve.eu/sighting/611902af-9823-4c36-b15f-10dbbe813c38/export Sun, 23 Feb 2025 09:18:28 +0000 https://db.gcve.eu/sighting/cbbcedc2-4978-4cc6-b3a3-ea8e70f61b78/export {"uuid": "cbbcedc2-4978-4cc6-b3a3-ea8e70f61b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lirprb5m2z2o", "content": "", "creation_timestamp": "2025-02-22T16:16:37.830090Z"} {"uuid": "cbbcedc2-4978-4cc6-b3a3-ea8e70f61b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lirprb5m2z2o", "content": "", "creation_timestamp": "2025-02-22T16:16:37.830090Z"} https://db.gcve.eu/sighting/cbbcedc2-4978-4cc6-b3a3-ea8e70f61b78/export Sat, 22 Feb 2025 16:16:37 +0000 https://db.gcve.eu/sighting/71c33a34-9226-40c1-a3c3-13b7fb4764ca/export {"uuid": "71c33a34-9226-40c1-a3c3-13b7fb4764ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55893\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cLog Module\u201d allows attackers to remove log entries. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T20:00:15.247Z\n\ud83d\udccf Modified: 2025-01-15T15:44:53.027Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-cjfr-9f5r-3q93\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-003", "creation_timestamp": "2025-01-15T15:55:08.000000Z"} {"uuid": "71c33a34-9226-40c1-a3c3-13b7fb4764ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-55893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55893\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cLog Module\u201d allows attackers to remove log entries. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T20:00:15.247Z\n\ud83d\udccf Modified: 2025-01-15T15:44:53.027Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-cjfr-9f5r-3q93\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-003", "creation_timestamp": "2025-01-15T15:55:08.000000Z"} https://db.gcve.eu/sighting/71c33a34-9226-40c1-a3c3-13b7fb4764ca/export Wed, 15 Jan 2025 15:55:08 +0000