https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 24 May 2026 09:20:48 +0000 https://db.gcve.eu/sighting/366dbdec-dcca-4692-8abd-cfb5a7f0d0a9/export {"uuid": "366dbdec-dcca-4692-8abd-cfb5a7f0d0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-XR54-GX74-FGHG", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47619\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-07T15:12:02.118Z\n\ud83d\udccf Modified: 2025-05-07T15:12:02.118Z\n\ud83d\udd17 References:\n1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg\n2. https://github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006\n3. https://github.com/syslog-ng/syslog-ng/blob/b0ccc8952d333fbc2d97e51fddc0b569a15e7a7d/lib/transport/tls-verifier.c#L78-L110\n4. https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2", "creation_timestamp": "2025-05-07T15:22:27.000000Z"} {"uuid": "366dbdec-dcca-4692-8abd-cfb5a7f0d0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-XR54-GX74-FGHG", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47619\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.\n\ud83d\udccf Published: 2025-05-07T15:12:02.118Z\n\ud83d\udccf Modified: 2025-05-07T15:12:02.118Z\n\ud83d\udd17 References:\n1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-xr54-gx74-fghg\n2. https://github.com/syslog-ng/syslog-ng/commit/dadfdbecde5bfe710b0a6ee5699f96926b3f9006\n3. https://github.com/syslog-ng/syslog-ng/blob/b0ccc8952d333fbc2d97e51fddc0b569a15e7a7d/lib/transport/tls-verifier.c#L78-L110\n4. https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2", "creation_timestamp": "2025-05-07T15:22:27.000000Z"} https://db.gcve.eu/sighting/366dbdec-dcca-4692-8abd-cfb5a7f0d0a9/export Wed, 07 May 2025 15:22:27 +0000 https://db.gcve.eu/sighting/f1d69c1c-b0c2-4e87-a96f-79cd86eb31b4/export {"uuid": "f1d69c1c-b0c2-4e87-a96f-79cd86eb31b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-xr54-gx74-fghg", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467343284596625", "content": "", "creation_timestamp": "2025-05-07T15:50:46.389105Z"} {"uuid": "f1d69c1c-b0c2-4e87-a96f-79cd86eb31b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-xr54-gx74-fghg", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114467343284596625", "content": "", "creation_timestamp": "2025-05-07T15:50:46.389105Z"} https://db.gcve.eu/sighting/f1d69c1c-b0c2-4e87-a96f-79cd86eb31b4/export Wed, 07 May 2025 15:50:46 +0000