{"vulnerability": "3954", "sightings": [{"uuid": "ce20dfd4-4db3-4866-96c0-07bc63866c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-3954", "type": "seen", "source": "MISP/5bc752ce-d1e8-4326-876d-08c10a021402", "content": "", "creation_timestamp": "2018-10-17T15:21:09.000000Z"}, {"uuid": "7fcb1ba6-4e1e-4464-a2b7-eb11c32813b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-33954", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676780870003217", "content": "", "creation_timestamp": "2024-12-19T01:00:21.244570Z"}, {"uuid": "076e4517-707b-4b97-b474-50c1486453fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23954", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jnlzsl2n", "content": "", "creation_timestamp": "2025-01-16T21:21:06.446966Z"}, {"uuid": "12aaab56-5085-4476-abf8-a13ce03595cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113952018883330797", "content": "", "creation_timestamp": "2025-02-05T15:36:59.984391Z"}, {"uuid": "e97c69a3-1e65-4c15-9abf-baa9e7fcea81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgxsjbsnx2r", "content": "", "creation_timestamp": "2025-02-05T16:16:01.149163Z"}, {"uuid": "3dd6769d-7b0b-44bc-a068-fbd8c28a78fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39547", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lmwq2oz54n2v", "content": "", "creation_timestamp": "2025-04-16T13:45:59.513381Z"}, {"uuid": "54fa9d04-4a16-4ca0-a362-ab2227b7ac82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39542", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114354325420006907", "content": "", "creation_timestamp": "2025-04-17T16:48:51.490384Z"}, {"uuid": "9b84f12a-8441-436c-8710-ac5c9f3f87a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3brewt2j", "content": "", "creation_timestamp": "2025-04-17T18:24:18.213241Z"}, {"uuid": "a7f4f966-92aa-4989-87d1-a76b310eb0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43954", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnbfs7gpwjp2", "content": "", "creation_timestamp": "2025-04-20T19:41:44.493785Z"}, {"uuid": "7c009338-e206-4c9e-a338-aa8001783ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnbqbk3tpn2u", "content": "", "creation_timestamp": "2025-04-20T22:49:08.334412Z"}, {"uuid": "f614d349-e912-4e3a-8e6e-27aab3b74b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43954", "type": "seen", "source": "https://bsky.app/profile/aethlios.bsky.social/post/3lnkopyzjms2s", "content": "", "creation_timestamp": "2025-04-24T12:15:23.226952Z"}, {"uuid": "264bd95a-639a-469d-b48e-585f01afee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnqvnigal32l", "content": "", "creation_timestamp": "2025-04-26T23:35:12.419663Z"}, {"uuid": "36b4b765-8813-4624-b4ec-8b59c2f68a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3954", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqyqfikrh72", "content": "", "creation_timestamp": "2025-04-27T00:30:41.493092Z"}, {"uuid": "0c1bf1fb-f754-4c5e-8f4e-7d8914be0ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-9395406660", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lu6dvark2227", "content": "", "creation_timestamp": "2025-07-17T16:25:53.456339Z"}, {"uuid": "721bf037-6150-4780-a5e4-ad53e71cf1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-13954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7mpeimbge2g", "content": "", "creation_timestamp": "2025-12-10T09:05:38.163571Z"}, {"uuid": "42fa82eb-ab70-47d7-9951-bf6e660d92d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-53954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3maev7vbg3c2o", "content": "", "creation_timestamp": "2025-12-19T23:54:26.892056Z"}, {"uuid": "53289d0e-5f01-47e8-bf21-99be683b3ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2c43xfaz2m", "content": "", "creation_timestamp": "2026-01-22T23:01:09.460256Z"}, {"uuid": "b42dd46b-320f-45d9-be38-7a6a084aecce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2df2652s2c", "content": "", "creation_timestamp": "2026-01-22T23:24:08.564849Z"}, {"uuid": "d8634a9a-90e6-452e-8929-c7b59062dc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3md2l2o4vlia2", "content": "", "creation_timestamp": "2026-01-23T01:42:56.889590Z"}, {"uuid": "10671f95-4ea6-4add-bf22-b35e683706ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3md3dtdnuhk2x", "content": "", "creation_timestamp": "2026-01-23T09:04:44.620140Z"}, {"uuid": "664ac6ce-d6f6-4099-9009-0da33084c044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://gist.github.com/alon710/0d58b6056becdd68dbeaae2a14eaefa9", "content": "", "creation_timestamp": "2026-01-24T21:22:41.000000Z"}, {"uuid": "5d08c77b-6b72-48b1-a7d7-b03521ad2741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://gist.github.com/alon710/cecbab75d3b11747b96af6081b44ff83", "content": "", "creation_timestamp": "2026-01-24T22:17:48.000000Z"}, {"uuid": "5df704b4-5400-4c1d-8ee6-1d6f1ace5f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-23954", "type": "seen", "source": "https://gist.github.com/alon710/543753c27c7f6e4098be705e7a0f8833", "content": "", "creation_timestamp": "2026-01-24T22:17:46.000000Z"}, {"uuid": "761e3704-07b1-4709-8554-51d5044f4f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2008-3954", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/6396", "content": "", "creation_timestamp": "2008-09-07T00:00:00.000000Z"}, {"uuid": "7b2c1877-1824-41d0-ba28-2482f38f7794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2008-3954", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/6401", "content": "", "creation_timestamp": "2008-09-09T00:00:00.000000Z"}, {"uuid": "942b2f4f-e49c-45b5-8912-3b98992681b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-3954", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3954", "content": "", "creation_timestamp": "2026-03-11T19:16:23.000000Z"}, {"uuid": "d547d74f-6b27-4287-8e3b-e79d9890f1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-33954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi353nq2bp2d", "content": "", "creation_timestamp": "2026-03-27T22:10:07.859675Z"}, {"uuid": "9b9c6aa8-b8b6-4ba7-b8e1-79a3c65ed131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12619", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43954\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.\n\ud83d\udccf Published: 2025-04-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-20T18:29:20.072Z\n\ud83d\udd17 References:\n1. https://github.com/quasarframework/quasar-ui-qmarkdown/commit/b61dff84851c45369cf931db5bd93db177c657f6\n2. https://github.com/quasarframework/quasar-ui-qmarkdown/compare/v2.0.4...v2.0.5", "creation_timestamp": "2025-04-20T19:02:15.000000Z"}, {"uuid": "aa557bdc-6ae6-47d0-aca0-3d907a342948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://t.me/cvedetector/17314", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39564 - Juniper Junos OS/ Junos OS Evolved Double-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-39564 \nPublished : Feb. 5, 2025, 4:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : This is a similar, but different vulnerability than the issue reported as CVE-2024-39549.  \n  \nA\u00a0double-free vulnerability\u00a0in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This double free of memory is causing an rpd crash, leading to a Denial of Service (DoS).  \n  \n  \nThis issue affects:  \n  \nJunos OS:\u00a0  *  from 22.4 before 22.4R3-S4.  \n  \n  \nJunos OS Evolved:  *  from 22.4 before 22.4R3-S4-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T19:09:22.000000Z"}, {"uuid": "2c63819b-713d-41de-869a-0c36e229304b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13588", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3954\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some unknown functionality of the component Referer Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-26T21:31:03.683Z\n\ud83d\udccf Modified: 2025-04-26T21:31:03.683Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.306290\n2. https://vuldb.com/?ctiid.306290\n3. https://vuldb.com/?submit.555938\n4. https://everydaysparkling.com/p/2c56b9ec-5747-40a3-b089-ff796f23ebd4/", "creation_timestamp": "2025-04-26T22:10:21.000000Z"}, {"uuid": "ff16063e-2dd4-42f5-95ee-5d729a7e68f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-39544", "type": "published-proof-of-concept", "source": "Telegram/qw6naPQmOSFEqbc3iRVV_M5dhGETt1a49wBj6uReZM5MuI0", "content": "", "creation_timestamp": "2026-04-14T21:25:30.000000Z"}, {"uuid": "9e08cf5e-00c3-45d0-bb1f-7b79f0b607a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23954", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23954\n\ud83d\udd39 Description: Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T19:50:37.910Z\n\ud83d\udd17 References:\n1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217", "creation_timestamp": "2025-01-09T20:16:36.000000Z"}, {"uuid": "1ef23b76-3cbb-463e-bd99-aa532ec339d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23954\n\ud83d\udd39 Description: Missing Authorization vulnerability in AWcode & KingfisherFox Salvador \u2013 AI Image Generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador \u2013 AI Image Generator: from n/a through 1.0.11.\n\ud83d\udccf Published: 2025-01-16T20:08:08.694Z\n\ud83d\udccf Modified: 2025-01-17T20:24:36.547Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/salvador-ai-image-generator/vulnerability/wordpress-salvador-ai-image-generator-plugin-1-0-11-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-17T20:57:50.000000Z"}, {"uuid": "91499a43-471b-4d1e-9933-df4db8d7e672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "Telegram/UKN70kYyOdK4hkPijZIJYvgyxzTTAk1ExHru45EJsyiMAXsU", "content": "", "creation_timestamp": "2025-02-14T10:05:09.000000Z"}, {"uuid": "21c49a59-0bfd-4f8a-9587-b3df43d145c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-39541\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-02-20T15:15:08.533\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828\n2. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828", "creation_timestamp": "2025-02-12T19:08:48.000000Z"}, {"uuid": "4b4ee03c-bdc2-4b65-8e1f-bf003e97d937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-39540\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-02-20T15:15:08.323\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828\n2. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828", "creation_timestamp": "2025-02-12T19:08:32.000000Z"}, {"uuid": "877c9071-0923-47bb-b97d-df9c1f383f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-39549\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not properly freed in all circumstances, leading to a Denial of Service (DoS).\n\nConsumed memory can be freed by manually restarting Routing Protocol Daemon (rpd).\n\nMemory utilization could be monitored by:\u00a0\nuser@host> show system memory or show system monitor memory status\n\nThis issue affects:\n\nJunos OS:\u00a0  *  All versions before 21.2R3-S8,\u00a0\n  *  from 21.4 before 21.4R3-S8,\n\n  *  from 22.2 before 22.2R3-S4,\u00a0\n  *  from 22.3 before 22.3R3-S3,\u00a0\n  *  from 22.4 before 22.4R3-S3,\n  *  from 23.2 before 23.2R2-S1,\u00a0\n  *  from 23.4 before 23.4R1-S2, 23.4R2.\n\n\nJunos OS Evolved:\n  *  All versions before 21.2R3-S8-EVO, \n  *  from 21.4 before 21.4R3-S8-EVO,\n  *  from 22.2 before 22.2R3-S4-EVO, \n  *  from 22.3 before 22.3R3-S3-EVO, \n  *  from 22.4 before 22.4R3-S3-EVO,\n\n  *  from 23.2 before 23.2R2-S1-EVO, \n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.\n\ud83d\udccf Published: 2024-07-11T16:27:19.238Z\n\ud83d\udccf Modified: 2025-02-26T18:16:27.497Z\n\ud83d\udd17 References:\n1. https://supportportal.juniper.net/JSA83011", "creation_timestamp": "2025-02-26T18:24:07.000000Z"}, {"uuid": "505c54df-7fa3-4b73-b0b1-cac78069c736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-39564\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: This is a similar, but different vulnerability than the issue reported as CVE-2024-39549.\n\nA\u00a0double-free vulnerability\u00a0in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This double free of memory is causing an rpd crash, leading to a Denial of Service (DoS).\n\n\nThis issue affects:\n\nJunos OS:\u00a0  *  from 22.4 before 22.4R3-S4.\n\n\nJunos OS Evolved:  *  from 22.4 before 22.4R3-S4-EVO.\n\ud83d\udccf Published: 2025-02-05T15:31:23.063Z\n\ud83d\udccf Modified: 2025-02-26T18:16:35.494Z\n\ud83d\udd17 References:\n1. https://supportportal.juniper.net/JSA83011", "creation_timestamp": "2025-02-26T18:24:06.000000Z"}, {"uuid": "48111cf2-bf07-487b-b0f8-a65737204c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39543", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12049", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39543\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored XSS. This issue affects Royal Elementor Addons: from n/a through 1.3.977.\n\ud83d\udccf Published: 2025-04-16T12:44:40.666Z\n\ud83d\udccf Modified: 2025-04-16T13:42:00.851Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-plugin-1-3-977-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:05.000000Z"}, {"uuid": "27895c68-3dc3-4d2a-94d5-b516c4f52734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12048", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39544\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi WP Tools allows Path Traversal. This issue affects WP Tools: from n/a through 5.18.\n\ud83d\udccf Published: 2025-04-16T12:44:40.080Z\n\ud83d\udccf Modified: 2025-04-16T13:42:28.396Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wptools/vulnerability/wordpress-wp-tools-plugin-5-18-csrf-to-arbitrary-file-deletion-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:04.000000Z"}, {"uuid": "7dd6cbb6-8bd1-4ef2-a1a2-b34e6be9eb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39546", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12045", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39546\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor allows Cross Site Request Forgery. This issue affects ElementsReady Addons for Elementor: from n/a through 6.6.2.\n\ud83d\udccf Published: 2025-04-16T12:44:38.814Z\n\ud83d\udccf Modified: 2025-04-16T13:43:30.340Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/element-ready-lite/vulnerability/wordpress-elementsready-addons-for-elementor-6-6-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:01.000000Z"}, {"uuid": "9a3a3d85-25a2-4e6f-abdb-41bdcd3bdd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39547\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser allows Stored XSS. This issue affects Internal Link Optimiser: from n/a through 5.1.3.\n\ud83d\udccf Published: 2025-04-16T12:44:38.197Z\n\ud83d\udccf Modified: 2025-04-16T13:44:01.700Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/internal-link-finder/vulnerability/wordpress-internal-link-optimiser-plugin-5-1-3-csrf-to-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:00.000000Z"}, {"uuid": "1b1e7be9-e959-4d17-92db-67c484f18e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39545", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12046", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39545\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in miniOrange WordPress REST API Authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress REST API Authentication: from n/a through 3.6.3.\n\ud83d\udccf Published: 2025-04-16T12:44:39.462Z\n\ud83d\udccf Modified: 2025-04-16T13:43:01.174Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-rest-api-authentication/vulnerability/wordpress-wordpress-rest-api-authentication-3-6-3-settings-change-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:02.000000Z"}, {"uuid": "4ad284aa-f074-4ab2-84b5-d7cd96fa980d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-39540", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12050", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-39540\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flipclock allows DOM-Based XSS. This issue affects WP Flipclock: from n/a through 1.9.\n\ud83d\udccf Published: 2025-04-16T12:45:44.743Z\n\ud83d\udccf Modified: 2025-04-16T13:41:31.053Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-flipclock/vulnerability/wordpress-wp-flipclock-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-16T13:56:07.000000Z"}, {"uuid": "47fc6f61-89c6-49c8-a6e5-c4aa28faab8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-39540", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkiw32l2rt2l", "content": "", "creation_timestamp": "2026-04-27T20:32:06.471377Z"}, {"uuid": "2fb7ba61-c0a0-4868-b52d-9b33fab895e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-13954", "type": "seen", "source": "Telegram/RYuO9rnZyZatuBLmi4stN6fr4cvIa3LCbuSc0quitWP1aoWi", "content": "", "creation_timestamp": "2020-06-01T02:07:41.000000Z"}, {"uuid": "350fab6e-21fc-4d94-88a4-ab1b46faab82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3954", "type": "seen", "source": "https://t.me/cvedetector/23812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3954 - ChurchCRM Referer Handler Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3954 \nPublished : April 26, 2025, 10:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some unknown functionality of the component Referer Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-27T02:06:50.000000Z"}, {"uuid": "7ddc7adc-d527-439a-97f9-fdbabae3e8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43954", "type": "seen", "source": "https://t.me/cvedetector/23418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-43954 - QMarkdown Quasar-ui-QMarkdown Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-43954 \nPublished : April 20, 2025, 7:15 p.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-20T23:45:20.000000Z"}, {"uuid": "f67c9d6b-e630-4454-b6ba-7127a60acd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-23954", "type": "seen", "source": "https://t.me/cvedetector/15638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23954 - AWcode KingfisherFox Salvador AI Image Generator Missing Authorization\", \n  \"Content\": \"CVE ID : CVE-2025-23954 \nPublished : Jan. 16, 2025, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Missing Authorization vulnerability in AWcode & KingfisherFox Salvador \u2013 AI Image Generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador \u2013 AI Image Generator: from n/a through 1.0.11. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T22:56:01.000000Z"}, {"uuid": "9ae8c0b2-970c-4669-86a9-5aae2a16ea1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-33954", "type": "seen", "source": "https://t.me/cvedetector/13295", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-33954 - IBM Robotic Process Automation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2022-33954 \nPublished : Dec. 19, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected credentials. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T03:05:39.000000Z"}, {"uuid": "f3bbbee6-a7ec-499e-b6ab-be7aef422599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53954", "type": "seen", "source": "https://t.me/cvedetector/12589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53954 - Animate Integer Underflow Allows Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-53954 \nPublished : Dec. 10, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T23:20:55.000000Z"}, {"uuid": "f0476a29-b109-45da-b58e-459fa5e276cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43954", "type": "seen", "source": "https://t.me/cvedetector/4425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43954 - Themeum Droip Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43954 \nPublished : Aug. 29, 2024, 4:15 p.m. | 21\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Themeum Droip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Droip: from n/a through 1.1.1. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T18:44:11.000000Z"}, {"uuid": "e9016f1b-2bf8-4a3f-82dd-c6c05a05e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39543", "type": "seen", "source": "https://t.me/cvedetector/685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39543 - A Buffer Copy without Checking Size of Input\u00a0vulne\", \n  \"Content\": \"CVE ID : CVE-2024-39543 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A Buffer Copy without Checking Size of Input\u00a0vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to send specific RPKI-RTR packets resulting in a crash,\u00a0creating a Denial of Service (DoS) condition.\u00a0Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.  \n  \nThis issue affects\u00a0  \n  \nJunos OS:\u00a0  \n  \n  \n  \n  *  All versions before 21.2R3-S8,\u00a0  \n  *  from 21.4 before 21.4R3-S8,  \n  *  from 22.2 before 22.2R3-S4,\u00a0  \n  *  from 22.3 before 22.3R3-S3,\u00a0  \n  *  from 22.4 before 22.4R3-S2,\u00a0  \n  *  from 23.2 before 23.2R2-S1,\u00a0  \n  *  from 23.4 before 23.4R2.  \n  \n  \n  \nJunos OS Evolved:  *  All versions before 21.2R3-S8-EVO,  \n  *  from 21.4 before 21.4R3-S8-EVO,  \n  *  from 22.2 before 22.2R3-S4-EVO,\u00a0  \n  *  from 22.3 before 22.3R3-S3-EVO,  \n  *  from 22.4 before 22.4R3-S2-EVO,\u00a0  \n  *  from 23.2 before 23.2R2-S1-EVO,  \n  *  from 23.4 before 23.4R2-EVO. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T20:00:02.000000Z"}, {"uuid": "289f6e97-7800-4dc0-aac3-c4d06f7da3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39540", "type": "seen", "source": "https://t.me/cvedetector/689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39540 - An Improper Check for Unusual or Exceptional Condi\", \n  \"Content\": \"CVE ID : CVE-2024-39540 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).  \n  \nWhen an affected device receives specific valid TCP traffic, the pfe crashes and restarts leading to a momentary but complete service outage.  \n  \nThis issue affects Junos OS:  \n  \n21.2 releases from 21.2R3-S5 before 21.2R3-S6.  \n  \nThis issue does not affect earlier or later releases. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T20:00:07.000000Z"}, {"uuid": "a483957a-94e7-4cc8-8038-f19b44787325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39542", "type": "seen", "source": "https://t.me/cvedetector/688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39542 - An Improper Validation of Syntactic Correctness of\", \n  \"Content\": \"CVE ID : CVE-2024-39542 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600, MX304, and Junos OS Evolved on ACX Series and PTX Series allows an unauthenticated, network based attacker to cause a Denial-of-Service (DoS).  \n  \nThis issue can occur in two scenarios:  \n  \n1. If a device, which is configured with SFLOW and ECMP, receives specific valid transit traffic, which is subject to sampling, the packetio process crashes, which in turn leads to an evo-aftman crash and causes the FPC to stop working until it is restarted. (This scenario is only applicable to PTX but not to ACX or MX.)  \n  \n2. If a device receives a malformed CFM packet on an interface configured with CFM, the packetio process crashes, which in turn leads to an evo-aftman crash and causes the FPC to stop working until it is restarted.\u00a0Please note that the CVSS score is for the formally more severe issue 1.  \n  \nThe CVSS score for scenario 2. is: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  \n  \n  \n  \n  \nThis issue affects Junos OS:  \n  \n  \n  \n  *  All versions before\u00a021.2R3-S4,  \n  *  21.4 versions before 21.4R2,  \n  *  22.2 versions before 22.2R3-S2;\u00a0  \n  \n  \n  \n  \nJunos OS Evolved:  \n  \n  \n  \n  \n  *  All versions before\u00a021.2R3-S8-EVO,  \n  *  21.4 versions before 21.4R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T20:00:06.000000Z"}, {"uuid": "0e51da4a-b5e4-48e0-8284-d076b7d74890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39548", "type": "seen", "source": "https://t.me/cvedetector/684", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39548 - An Uncontrolled Resource Consumption vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-39548 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.  \n  \nThis issue affects both IPv4 and IPv6.\u00a0  \n  \nChanges in memory usage can be monitored using the following CLI command:  \nuser@device> show system memory node  | grep evo-aftmann  \nThis issue affects Junos OS Evolved:\u00a0  \n  \n  \n  \n  *  All versions before 21.2R3-S8-EVO,\u00a0  \n  *  21.3 versions before 21.3R3-S5-EVO,\u00a0  \n  *  21.4 versions before 21.4R3-S5-EVO,\u00a0  \n  *  22.1 versions before 22.1R3-S4-EVO,\u00a0  \n  *  22.2 versions before 22.2R3-S4-EVO,  \n  *  22.3 versions before 22.3R3-S3-EVO,  \n  *  22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,\u00a0  \n  *  23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T19:59:58.000000Z"}, {"uuid": "c4bafbd3-af72-4600-81b4-5f0615926577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39546", "type": "seen", "source": "https://t.me/cvedetector/683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39546 - A Missing Authorization vulnerability in the Socke\", \n  \"Content\": \"CVE ID : CVE-2024-39546 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.\u00a0  \n  \nThis issue affects Junos OS Evolved:\u00a0  \n  \n  \n  \n  *  All versions prior to 21.2R3-S8-EVO,\u00a0  \n  *  21.4 versions prior to\u00a0 21.4R3-S6-EVO,\u00a0  \n  *  22.1 versions prior to 22.1R3-S5-EVO,\u00a0  \n  *  22.2 versions prior to 22.2R3-S3-EVO,\u00a0  \n  *  22.3 versions prior to 22.3R3-S3-EVO,\u00a0  \n  *  22.4 versions prior to 22.4R3-EVO,\u00a0  \n  *  23.2 versions prior to 23.2R2-EVO. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T19:59:57.000000Z"}, {"uuid": "01a4d230-2414-4fa3-acd6-a7a95ae24848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39549", "type": "seen", "source": "https://t.me/cvedetector/681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39549 - A Missing Release of Memory after Effective Lifeti\", \n  \"Content\": \"CVE ID : CVE-2024-39549 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not properly freed in all circumstances, leading to a Denial of Service (DoS).  \n  \nConsumed memory can be freed by manually restarting Routing Protocol Daemon (rpd).  \n  \nMemory utilization could be monitored by:\u00a0  \nuser@host> show system memory or show system monitor memory status  \n  \nThis issue affects:  \n  \nJunos OS:\u00a0  *  All versions before 21.2R3-S8,\u00a0  \n  *  from 21.4 before 21.4R3-S8,  \n  \n  *  from 22.2 before 22.2R3-S4,\u00a0  \n  *  from 22.3 before 22.3R3-S3,\u00a0  \n  *  from 22.4 before 22.4R3-S3,  \n  *  from 23.2 before 23.2R2-S1,\u00a0  \n  *  from 23.4 before 23.4R1-S2, 23.4R2,  \n  *  from 24.2 before\u00a024.2R2-EVO.  \n  \n  \nJunos OS Evolved:  \n  *  All versions before 21.2R3-S8-EVO,   \n  *  from 21.4 before 21.4R3-S8-EVO,  \n  *  from 22.2 before 22.2R3-S4-EVO,   \n  *  from 22.3 before 22.3R3-S3-EVO,   \n  *  from 22.4 before 22.4R3-S3-EVO,  \n  \n  *  from 23.2 before 23.2R2-S1-EVO,   \n  *  from 23.4 before 23.4R1-S2, 23.4R2,  \n  *  from 24.2 before 24.2R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T19:59:55.000000Z"}, {"uuid": "0c4d76f7-baed-4ecf-833f-c2a952300111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39541", "type": "seen", "source": "https://t.me/cvedetector/687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39541 - An Improper Handling of Exceptional Conditions vul\", \n  \"Content\": \"CVE ID : CVE-2024-39541 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).  \n  \nWhen conflicting information (IP or ISO addresses) about a node is added to the Traffic Engineering (TE) database and then a subsequent operation attempts to process these, rpd will crash and restart.  \n  \nThis issue affects:  \n  \nJunos OS:  \n  \n  \n  \n  *  22.4 versions before 22.4R3-S1,  \n  *  23.2 versions before 23.2R2,\u00a0  \n  *  23.4 versions before 23.4R1-S1, 23.4R2,\u00a0  \n  \n  \n  \n  \nThis issue does not affect Junos OS versions earlier than 22.4R1.  \n  \nJunos OS Evolved:  \n  \n  \n  \n  *  22.4-EVO versions before 22.4R3-S2-EVO,  \n  *  23.2-EVO versions before 23.2R2-EVO,  \n  *  23.4-EVO versions before 23.4R1-S1-EVO, 23.4R2-EVO,  \n  \n  \n  \n  \n  \n  \nThis issue does not affect Junos OS Evolved versions earlier than   \n  \nbefore 22.4R1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T20:00:05.000000Z"}, {"uuid": "7f29dec4-412e-4786-820e-8822b7f46da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39545", "type": "seen", "source": "https://t.me/cvedetector/686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39545 - An Improper Check for Unusual or Exceptional Condi\", \n  \"Content\": \"CVE ID : CVE-2024-39545 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon (iked) of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350 allows allows an unauthenticated, network-based attacker sending specific mismatching parameters as part of the IPsec negotiation to trigger an iked crash leading to Denial of Service (DoS).  \n  \nThis issue is applicable to all platforms that run iked.\u00a0This issue affects Junos OS on SRX Series, MX Series with SPC3 and NFX350:\u00a0  \n  \n  \n  \n  *  All versions before 21.2R3-S8,\u00a0  \n  *  from 21.4 before 21.4R3-S7,\u00a0  \n  *  from 22.1 before 22.1R3-S2,\u00a0  \n  *  from 22.2 before 22.2R3-S1,\u00a0  \n  *  from 22.3 before 22.3R2-S1, 22.3R3,\u00a0  \n  *  from 22.4 before 22.4R1-S2, 22.4R2, 22.4R3. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T20:00:03.000000Z"}, {"uuid": "aa30e434-71a2-4d14-bf47-dfa70555195d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39541", "type": "seen", "source": "https://t.me/arpsyndicate/3851", "content": "#ExploitObserverAlert\n\nCVE-2023-39541\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-39541. A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv6 ICMPv6 packet.\n\nNVD-IS: 3.6\nNVD-ES: 2.2", "creation_timestamp": "2024-02-21T15:37:05.000000Z"}, {"uuid": "8c2d2c89-c287-496e-ba6f-19ad0068e5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "https://t.me/arpsyndicate/3840", "content": "#ExploitObserverAlert\n\nCVE-2023-39540\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-39540. A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.\n\nNVD-IS: 3.6\nNVD-ES: 2.2", "creation_timestamp": "2024-02-21T15:20:48.000000Z"}, {"uuid": "9f7b3492-06bc-4707-9216-b0022efda86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-13954", "type": "seen", "source": "https://t.me/arpsyndicate/132", "content": "#ExploitObserverAlert\n\nCVE-2020-13954\n\nDESCRIPTION: Exploit Observer has 17 entries related to CVE-2020-13954. By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web page. This vulnerability affects all versions of Apache CXF prior to 3.4.1 and 3.3.8. Please note that this is a separate issue to CVE-2019-17573.\n\nFIRST-EPSS: 0.165290000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2023-11-12T19:05:42.000000Z"}, {"uuid": "9a7e724b-43aa-4409-aac4-a8b6a3120e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39541", "type": "seen", "source": "https://t.me/ctinow/203397", "content": "https://ift.tt/UZXqmji\nCVE-2023-39541 | Weston Embedded uC-TCP-IP 3.06.01/4.3.1.0 ICMPv6 Parser buffer over-read (TALOS-2023-1828)", "creation_timestamp": "2024-03-08T15:51:45.000000Z"}, {"uuid": "f3d825b8-c9dc-4beb-bb83-2ae9d01c2b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "https://t.me/ctinow/203396", "content": "https://ift.tt/5OdyNBt\nCVE-2023-39540 | Weston Embedded uC-TCP-IP 3.06.01/4.3.1.0 ICMPv6 Parser buffer over-read (TALOS-2023-1828)", "creation_timestamp": "2024-03-08T15:51:44.000000Z"}, {"uuid": "d9b96325-ee18-4421-a01c-a91f68911a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39541", "type": "seen", "source": "https://t.me/ctinow/188682", "content": "https://ift.tt/3iNQlbH\nCVE-2023-39541", "creation_timestamp": "2024-02-20T16:37:16.000000Z"}, {"uuid": "762ee2c9-2cee-4acf-bd87-6a689dae66cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "https://t.me/ctinow/188681", "content": "https://ift.tt/lTGBHh0\nCVE-2023-39540", "creation_timestamp": "2024-02-20T16:37:12.000000Z"}, {"uuid": "2ee87948-2fed-4ed3-b491-10a203fa15f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39541", "type": "seen", "source": "https://t.me/ctinow/188673", "content": "https://ift.tt/3iNQlbH\nCVE-2023-39541", "creation_timestamp": "2024-02-20T16:37:04.000000Z"}, {"uuid": "5058effe-fb62-4073-8a94-556b00fdfcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39540", "type": "seen", "source": "https://t.me/ctinow/188672", "content": "https://ift.tt/lTGBHh0\nCVE-2023-39540", "creation_timestamp": "2024-02-20T16:36:59.000000Z"}, {"uuid": "4039860e-2131-49d0-9bbf-2e7ed0d9f017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-3954", "type": "seen", "source": "https://t.me/cibsecurity/68897", "content": "\u203c CVE-2023-3954 \u203c\n\nThe MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-21T20:41:13.000000Z"}, {"uuid": "b1a3138c-c2ec-4412-9635-04707a54fa11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39543", "type": "seen", "source": "https://t.me/cibsecurity/68873", "content": "\u203c CVE-2023-39543 \u203c\n\nCross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-21T12:40:51.000000Z"}, {"uuid": "230809fb-07fe-4f48-aaee-10df6a04ca0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-39549", "type": "seen", "source": "https://t.me/cibsecurity/67951", "content": "\u203c CVE-2023-39549 \u203c\n\nA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted DWG file. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19562)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T14:14:19.000000Z"}, {"uuid": "0867de68-e020-413a-be8c-2ec7889f6536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23954", "type": "seen", "source": "https://t.me/cibsecurity/64838", "content": "\u203c CVE-2023-23954 \u203c\n\nAdvanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-01T07:25:04.000000Z"}, {"uuid": "4ac2c022-b9e7-41ea-b2a4-e18fb2a92f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-23954", "type": "seen", "source": "https://t.me/cibsecurity/38327", "content": "\u203c CVE-2022-23954 \u203c\n\nPotential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T00:25:19.000000Z"}, {"uuid": "082eade7-94bb-4288-b2a0-130cc41c793f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-39545", "type": "seen", "source": "https://t.me/cibsecurity/29131", "content": "\u203c CVE-2021-39545 \u203c\n\nAn issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function rice::RiceDecoder::process() located in rice_decoder.c. It allows an attacker to cause Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-20T20:27:17.000000Z"}, {"uuid": "639ad5c1-3e50-4d05-a3cb-5ae031fb0be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23954", "type": "seen", "source": "https://t.me/cibsecurity/24194", "content": "\u203c CVE-2021-23954 \u203c\n\nUsing the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T07:38:27.000000Z"}, {"uuid": "3334ed15-2b4d-4035-9de3-e7e84165c6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2015-3954", "type": "seen", "source": "https://t.me/cibsecurity/3329", "content": "ATENTION\u203c New - CVE-2015-3954\n\nHospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-03-25T19:27:40.000000Z"}, {"uuid": "57ca2211-0b3d-4882-bf6b-823b45688700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-13954", "type": "seen", "source": "https://t.me/cibsecurity/16206", "content": "\u203c CVE-2020-13954 \u203c\n\nBy default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web page. This vulnerability affects all versions of Apache CXF prior to 3.4.1 and 3.3.8. Please note that this is a separate issue to CVE-2019-17573.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-12T16:31:39.000000Z"}, {"uuid": "d9d096a6-8dbc-4fd4-8b8e-8b9da1487921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-13954", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T07:47:10.879127Z"}, {"uuid": "2a49706c-8c1a-432e-bfd4-3e398b5e7bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-13954", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T07:19:52.859378Z"}, {"uuid": "383d3f6c-bd75-4e41-8c6f-672041f47575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-73954", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0381", "content": "", "creation_timestamp": "2026-09-16T16:00:43.143725Z"}, {"uuid": "49f9afa3-c614-4c6e-ad60-342642de147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-73954", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T09:50:37.968902Z"}, {"uuid": "9d0d2e1b-cfae-4377-a49d-70cc455f764f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-73954", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u", "content": "", "creation_timestamp": "2026-09-16T12:00:30.217377Z"}, {"uuid": "139c2521-2c22-4933-9297-78d52637a25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-83954", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T10:49:36.274141Z"}, {"uuid": "2ca37204-5a71-4a7a-832a-3a3a6b426298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-83954", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "", "creation_timestamp": "2026-09-08T22:04:51.253890Z"}, {"uuid": "1669e94d-4bb3-48f6-9287-f2429d4a2fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2026-23954", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7", "content": "", "creation_timestamp": "2026-01-22T19:07:39.000000Z"}]}