<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-22T23:28:29.744523+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/3e588c08-5f44-43e2-b60e-9fff40610782/export</id>
    <title>3e588c08-5f44-43e2-b60e-9fff40610782</title>
    <updated>2026-07-22T23:28:29.758760+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "3e588c08-5f44-43e2-b60e-9fff40610782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26208", "type": "seen", "source": "https://t.me/cibsecurity/36699", "content": "\u203c CVE-2020-26208 \u203c\n\nJHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-02T14:28:25.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/3e588c08-5f44-43e2-b60e-9fff40610782/export"/>
    <published>2022-02-02T14:28:25+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/9e86dbe5-7ee1-4808-b7b0-838425925182/export</id>
    <title>9e86dbe5-7ee1-4808-b7b0-838425925182</title>
    <updated>2026-07-22T23:28:29.760028+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "9e86dbe5-7ee1-4808-b7b0-838425925182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26200", "type": "seen", "source": "https://t.me/cibsecurity/24215", "content": "\u203c CVE-2020-26200 \u203c\n\nA component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T17:08:51.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/9e86dbe5-7ee1-4808-b7b0-838425925182/export"/>
    <published>2021-02-26T17:08:51+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/01b3f370-90ad-43bb-9c77-1966e5dd0f3d/export</id>
    <title>01b3f370-90ad-43bb-9c77-1966e5dd0f3d</title>
    <updated>2026-07-22T23:28:29.760142+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "01b3f370-90ad-43bb-9c77-1966e5dd0f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19764", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T07:25:38.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/01b3f370-90ad-43bb-9c77-1966e5dd0f3d/export"/>
    <published>2020-12-11T07:25:38+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/cf1ded84-36d7-42ee-804f-b8120286d4d5/export</id>
    <title>cf1ded84-36d7-42ee-804f-b8120286d4d5</title>
    <updated>2026-07-22T23:28:29.760241+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "cf1ded84-36d7-42ee-804f-b8120286d4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19744", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T06:25:30.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/cf1ded84-36d7-42ee-804f-b8120286d4d5/export"/>
    <published>2020-12-11T06:25:30+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/147691c4-8bc3-4b53-b68b-d0e23f4ae5f8/export</id>
    <title>147691c4-8bc3-4b53-b68b-d0e23f4ae5f8</title>
    <updated>2026-07-22T23:28:29.760322+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "147691c4-8bc3-4b53-b68b-d0e23f4ae5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19724", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T05:25:25.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/147691c4-8bc3-4b53-b68b-d0e23f4ae5f8/export"/>
    <published>2020-12-11T05:25:25+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/565ca4dd-c1bf-49d1-9d19-da8226b73a10/export</id>
    <title>565ca4dd-c1bf-49d1-9d19-da8226b73a10</title>
    <updated>2026-07-22T23:28:29.760401+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "565ca4dd-c1bf-49d1-9d19-da8226b73a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19704", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T04:25:28.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/565ca4dd-c1bf-49d1-9d19-da8226b73a10/export"/>
    <published>2020-12-11T04:25:28+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ea50653e-3736-4780-ba67-6ad949e09d6f/export</id>
    <title>ea50653e-3736-4780-ba67-6ad949e09d6f</title>
    <updated>2026-07-22T23:28:29.760485+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ea50653e-3736-4780-ba67-6ad949e09d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19684", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T03:25:33.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ea50653e-3736-4780-ba67-6ad949e09d6f/export"/>
    <published>2020-12-11T03:25:33+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6b090871-c42e-4c2d-8507-3b6112de540f/export</id>
    <title>6b090871-c42e-4c2d-8507-3b6112de540f</title>
    <updated>2026-07-22T23:28:29.760569+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6b090871-c42e-4c2d-8507-3b6112de540f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19664", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T02:37:45.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6b090871-c42e-4c2d-8507-3b6112de540f/export"/>
    <published>2020-12-11T02:37:45+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6fd69b98-382a-47d3-985f-5ecacc84131d/export</id>
    <title>6fd69b98-382a-47d3-985f-5ecacc84131d</title>
    <updated>2026-07-22T23:28:29.760650+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6fd69b98-382a-47d3-985f-5ecacc84131d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26201", "type": "seen", "source": "https://t.me/cibsecurity/19644", "content": "\u203c CVE-2020-26201 \u203c\n\nAskey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-11T02:34:39.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6fd69b98-382a-47d3-985f-5ecacc84131d/export"/>
    <published>2020-12-11T02:34:39+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6a3c0ac2-830e-4371-a260-b8217644a6e6/export</id>
    <title>6a3c0ac2-830e-4371-a260-b8217644a6e6</title>
    <updated>2026-07-22T23:28:29.760730+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6a3c0ac2-830e-4371-a260-b8217644a6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26207", "type": "seen", "source": "https://t.me/cibsecurity/15850", "content": "\u203c CVE-2020-26207 \u203c\n\nDatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-05T00:42:45.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6a3c0ac2-830e-4371-a260-b8217644a6e6/export"/>
    <published>2020-11-05T00:42:45+00:00</published>
  </entry>
</feed>
