{"vulnerability": "cve-2021-3642", "sightings": [{"uuid": "d08cd471-028c-470b-ba8f-199f10504f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-36424", "type": "seen", "source": "https://t.me/cibsecurity/57490", "content": "\u203c CVE-2021-36424 \u203c\n\nAn issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T20:21:12.000000Z"}, {"uuid": "239e34c6-6820-4c9c-917e-81e6430f729e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-3642", "type": "seen", "source": "https://t.me/cibsecurity/26904", "content": "\u203c CVE-2021-3642 \u203c\n\nA flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-06T00:31:46.000000Z"}]}