https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 07 Jun 2026 14:55:05 +0000 https://db.gcve.eu/sighting/215c030e-93bc-42b5-a1ec-e42f9006441c/export {"uuid": "215c030e-93bc-42b5-a1ec-e42f9006441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27875", "type": "seen", "source": "https://t.me/cibsecurity/60126", "content": "\u203c CVE-2023-27875 \u203c\n\nIBM Aspera Faspex 5.0.4 could allow an authenticated user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T15:30:49.000000Z"} {"uuid": "215c030e-93bc-42b5-a1ec-e42f9006441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27875", "type": "seen", "source": "https://t.me/cibsecurity/60126", "content": "\u203c CVE-2023-27875 \u203c\n\nIBM Aspera Faspex 5.0.4 could allow an authenticated user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T15:30:49.000000Z"} https://db.gcve.eu/sighting/215c030e-93bc-42b5-a1ec-e42f9006441c/export Thu, 16 Mar 2023 15:30:49 +0000 https://db.gcve.eu/sighting/228b264a-3fc5-4c04-b0f9-e768cbbdcf3c/export {"uuid": "228b264a-3fc5-4c04-b0f9-e768cbbdcf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27874", "type": "seen", "source": "https://t.me/cibsecurity/60377", "content": "\u203c CVE-2023-27874 \u203c\n\nIBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:34:54.000000Z"} {"uuid": "228b264a-3fc5-4c04-b0f9-e768cbbdcf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27874", "type": "seen", "source": "https://t.me/cibsecurity/60377", "content": "\u203c CVE-2023-27874 \u203c\n\nIBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:34:54.000000Z"} https://db.gcve.eu/sighting/228b264a-3fc5-4c04-b0f9-e768cbbdcf3c/export Tue, 21 Mar 2023 17:34:54 +0000 https://db.gcve.eu/sighting/ef84ba92-620c-44af-a222-326dfa864695/export {"uuid": "ef84ba92-620c-44af-a222-326dfa864695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27873", "type": "seen", "source": "https://t.me/cibsecurity/60379", "content": "\u203c CVE-2023-27873 \u203c\n\nIBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:34:55.000000Z"} {"uuid": "ef84ba92-620c-44af-a222-326dfa864695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27873", "type": "seen", "source": "https://t.me/cibsecurity/60379", "content": "\u203c CVE-2023-27873 \u203c\n\nIBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:34:55.000000Z"} https://db.gcve.eu/sighting/ef84ba92-620c-44af-a222-326dfa864695/export Tue, 21 Mar 2023 17:34:55 +0000 https://db.gcve.eu/sighting/1184ffe7-d22a-4550-82ec-ff66bd8bd56c/export {"uuid": "1184ffe7-d22a-4550-82ec-ff66bd8bd56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27871", "type": "seen", "source": "https://t.me/cibsecurity/60383", "content": "\u203c CVE-2023-27871 \u203c\n\nIBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:35:02.000000Z"} {"uuid": "1184ffe7-d22a-4550-82ec-ff66bd8bd56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27871", "type": "seen", "source": "https://t.me/cibsecurity/60383", "content": "\u203c CVE-2023-27871 \u203c\n\nIBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T17:35:02.000000Z"} https://db.gcve.eu/sighting/1184ffe7-d22a-4550-82ec-ff66bd8bd56c/export Tue, 21 Mar 2023 17:35:02 +0000 https://db.gcve.eu/sighting/ebb05efa-230a-4699-af44-10e314ac4d83/export {"uuid": "ebb05efa-230a-4699-af44-10e314ac4d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27870", "type": "seen", "source": "https://t.me/cibsecurity/63932", "content": "\u203c CVE-2023-27870 \u203c\n\nIBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T01:58:59.000000Z"} {"uuid": "ebb05efa-230a-4699-af44-10e314ac4d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27870", "type": "seen", "source": "https://t.me/cibsecurity/63932", "content": "\u203c CVE-2023-27870 \u203c\n\nIBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T01:58:59.000000Z"} https://db.gcve.eu/sighting/ebb05efa-230a-4699-af44-10e314ac4d83/export Fri, 12 May 2023 01:58:59 +0000 https://db.gcve.eu/sighting/52dc03d0-3693-4c0d-a1fa-ffe9c7ac1461/export {"uuid": "52dc03d0-3693-4c0d-a1fa-ffe9c7ac1461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27871", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27871\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.\n\ud83d\udccf Published: 2023-03-21T14:29:53.076Z\n\ud83d\udccf Modified: 2025-02-25T20:03:41.068Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249613", "creation_timestamp": "2025-02-25T20:23:00.000000Z"} {"uuid": "52dc03d0-3693-4c0d-a1fa-ffe9c7ac1461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27871", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27871\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.\n\ud83d\udccf Published: 2023-03-21T14:29:53.076Z\n\ud83d\udccf Modified: 2025-02-25T20:03:41.068Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249613", "creation_timestamp": "2025-02-25T20:23:00.000000Z"} https://db.gcve.eu/sighting/52dc03d0-3693-4c0d-a1fa-ffe9c7ac1461/export Tue, 25 Feb 2025 20:23:00 +0000 https://db.gcve.eu/sighting/290801f6-3bb6-4239-929e-a82928ee0429/export {"uuid": "290801f6-3bb6-4239-929e-a82928ee0429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5503", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27875\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847.\n\ud83d\udccf Published: 2023-03-16T12:37:09.318Z\n\ud83d\udccf Modified: 2025-02-26T15:06:45.141Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6963662\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249847", "creation_timestamp": "2025-02-26T15:26:04.000000Z"} {"uuid": "290801f6-3bb6-4239-929e-a82928ee0429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5503", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27875\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847.\n\ud83d\udccf Published: 2023-03-16T12:37:09.318Z\n\ud83d\udccf Modified: 2025-02-26T15:06:45.141Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6963662\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249847", "creation_timestamp": "2025-02-26T15:26:04.000000Z"} https://db.gcve.eu/sighting/290801f6-3bb6-4239-929e-a82928ee0429/export Wed, 26 Feb 2025 15:26:04 +0000 https://db.gcve.eu/sighting/3c7bbfde-63c7-4f8e-b16a-4926c5933cb7/export {"uuid": "3c7bbfde-63c7-4f8e-b16a-4926c5933cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27874\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.\n\ud83d\udccf Published: 2023-03-21T14:33:20.252Z\n\ud83d\udccf Modified: 2025-02-26T16:50:16.930Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249845", "creation_timestamp": "2025-02-26T17:24:24.000000Z"} {"uuid": "3c7bbfde-63c7-4f8e-b16a-4926c5933cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27874\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.\n\ud83d\udccf Published: 2023-03-21T14:33:20.252Z\n\ud83d\udccf Modified: 2025-02-26T16:50:16.930Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249845", "creation_timestamp": "2025-02-26T17:24:24.000000Z"} https://db.gcve.eu/sighting/3c7bbfde-63c7-4f8e-b16a-4926c5933cb7/export Wed, 26 Feb 2025 17:24:24 +0000 https://db.gcve.eu/sighting/f8bdc974-94a5-4171-9c9c-045e894fcc2a/export {"uuid": "f8bdc974-94a5-4171-9c9c-045e894fcc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27873", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27873\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nIBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.\n\n\n\ud83d\udccf Published: 2023-03-21T14:37:03.988Z\n\ud83d\udccf Modified: 2025-02-26T16:48:57.047Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249654", "creation_timestamp": "2025-02-26T17:24:25.000000Z"} {"uuid": "f8bdc974-94a5-4171-9c9c-045e894fcc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-27873", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27873\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nIBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.\n\n\n\ud83d\udccf Published: 2023-03-21T14:37:03.988Z\n\ud83d\udccf Modified: 2025-02-26T16:48:57.047Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6964694\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/249654", "creation_timestamp": "2025-02-26T17:24:25.000000Z"} https://db.gcve.eu/sighting/f8bdc974-94a5-4171-9c9c-045e894fcc2a/export Wed, 26 Feb 2025 17:24:25 +0000