https://db.gcve.eu/sightings/feed 2026-07-22T21:34:36.340272+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d/export 2026-07-22T21:34:36.361670+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "ed89ba7b-8a45-46ab-82a5-2a6fb1f17d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28851", "type": "seen", "source": "https://t.me/cibsecurity/21511", "content": "\u203c CVE-2020-28851 \u203c\n\nIn x/text in Go 1.15.4, an \"index out of range\" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:56.000000Z"} 2021-01-02T12:33:56+00:00 https://db.gcve.eu/sighting/6fa9c935-0412-42c7-a424-fe7f12780d24/export 2026-07-22T21:34:36.363794+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "6fa9c935-0412-42c7-a424-fe7f12780d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28852", "type": "seen", "source": "https://t.me/cibsecurity/21510", "content": "\u203c CVE-2020-28852 \u203c\n\nIn x/text in Go 1.15.4, a \"slice bounds out of range\" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-02T12:33:55.000000Z"} 2021-01-02T12:33:55+00:00 https://db.gcve.eu/sighting/3b8bb0a4-8531-459f-a88a-ffffaed7a318/export 2026-07-22T21:34:36.363938+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "3b8bb0a4-8531-459f-a88a-ffffaed7a318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28859", "type": "seen", "source": "https://t.me/cibsecurity/20775", "content": "\u203c CVE-2020-28859 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:38.000000Z"} 2020-12-14T22:39:38+00:00 https://db.gcve.eu/sighting/188944ab-2611-4289-9fd4-815f69c84eec/export 2026-07-22T21:34:36.364034+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "188944ab-2611-4289-9fd4-815f69c84eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28858", "type": "seen", "source": "https://t.me/cibsecurity/20773", "content": "\u203c CVE-2020-28858 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:36.000000Z"} 2020-12-14T22:39:36+00:00 https://db.gcve.eu/sighting/18a2b4c6-c1f2-4af1-8fd7-a106c3624c05/export 2026-07-22T21:34:36.364129+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "18a2b4c6-c1f2-4af1-8fd7-a106c3624c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28857", "type": "seen", "source": "https://t.me/cibsecurity/20765", "content": "\u203c CVE-2020-28857 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T22:39:21.000000Z"} 2020-12-14T22:39:21+00:00 https://db.gcve.eu/sighting/d3c9c784-a35d-46fd-9e6a-5c3c82cde439/export 2026-07-22T21:34:36.364242+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "d3c9c784-a35d-46fd-9e6a-5c3c82cde439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28856", "type": "seen", "source": "https://t.me/cibsecurity/20752", "content": "\u203c CVE-2020-28856 \u203c\n\nOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-14T20:39:52.000000Z"} 2020-12-14T20:39:52+00:00