https://db.gcve.eu/sightings/feed 2026-07-25T12:56:30.596230+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/ecdc720e-5cb4-487c-badb-1c1abd206a01/export 2026-07-25T12:56:30.609787+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "ecdc720e-5cb4-487c-badb-1c1abd206a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29453", "type": "seen", "source": "https://t.me/cKure/6756", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Pre-Authorization Limited Arbitrary File Read in Jira Server - CVE-2020-29453.\n\nhttps://jira.atlassian.com/browse/JRASERVER-72014", "creation_timestamp": "2021-08-24T16:41:19.000000Z"} 2021-08-24T16:41:19+00:00 https://db.gcve.eu/sighting/0a1dfab7-0583-4b51-8268-5ce7c14dbbeb/export 2026-07-25T12:56:30.610781+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "0a1dfab7-0583-4b51-8268-5ce7c14dbbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29453", "type": "seen", "source": "https://t.me/cibsecurity/23953", "content": "\u203c CVE-2020-29453 \u203c\n\nThe CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-23T00:33:55.000000Z"} 2021-02-23T00:33:55+00:00 https://db.gcve.eu/sighting/f9b4c1b6-2f01-4b46-9f5c-230ed79292df/export 2026-07-25T12:56:30.610865+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "f9b4c1b6-2f01-4b46-9f5c-230ed79292df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29457", "type": "seen", "source": "https://t.me/cibsecurity/23682", "content": "\u203c CVE-2020-29457 \u203c\n\nA Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-16T22:48:15.000000Z"} 2021-02-16T22:48:15+00:00 https://db.gcve.eu/sighting/d994a43d-9f20-4fbc-9bcc-44b9744f67b7/export 2026-07-25T12:56:30.610927+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "d994a43d-9f20-4fbc-9bcc-44b9744f67b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29451", "type": "seen", "source": "https://t.me/cibsecurity/23583", "content": "\u203c CVE-2020-29451 \u203c\n\nAffected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.14.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-15T07:46:07.000000Z"} 2021-02-15T07:46:07+00:00 https://db.gcve.eu/sighting/b2b415e7-34d0-4623-ae52-41ef14bf8760/export 2026-07-25T12:56:30.610982+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "b2b415e7-34d0-4623-ae52-41ef14bf8760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29450", "type": "seen", "source": "https://t.me/cibsecurity/22250", "content": "\u203c CVE-2020-29450 \u203c\n\nAffected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the avatar upload feature. The affected versions are before version 7.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-19T07:55:31.000000Z"} 2021-01-19T07:55:31+00:00 https://db.gcve.eu/sighting/4d4213da-c4dc-4e1e-982f-394642adff84/export 2026-07-25T12:56:30.611040+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "4d4213da-c4dc-4e1e-982f-394642adff84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29455", "type": "seen", "source": "https://t.me/cibsecurity/20630", "content": "\u203c CVE-2020-29455 \u203c\n\nA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-12T02:25:14.000000Z"} 2020-12-12T02:25:14+00:00 https://db.gcve.eu/sighting/bf42a118-814c-456b-b378-cda0e8985f04/export 2026-07-25T12:56:30.611094+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "bf42a118-814c-456b-b378-cda0e8985f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29455", "type": "seen", "source": "https://t.me/cibsecurity/20610", "content": "\u203c CVE-2020-29455 \u203c\n\nA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-12T01:25:08.000000Z"} 2020-12-12T01:25:08+00:00 https://db.gcve.eu/sighting/c38c6363-d27c-4df2-bb00-3a525dfe141b/export 2026-07-25T12:56:30.611148+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "c38c6363-d27c-4df2-bb00-3a525dfe141b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29455", "type": "seen", "source": "https://t.me/cibsecurity/20590", "content": "\u203c CVE-2020-29455 \u203c\n\nA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-12T01:04:58.000000Z"} 2020-12-12T01:04:58+00:00 https://db.gcve.eu/sighting/19c85ef8-dfbf-4191-8a1f-221ebf71f55d/export 2026-07-25T12:56:30.611207+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "19c85ef8-dfbf-4191-8a1f-221ebf71f55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29455", "type": "seen", "source": "https://t.me/cibsecurity/20571", "content": "\u203c CVE-2020-29455 \u203c\n\nA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-12T00:45:40.000000Z"} 2020-12-12T00:45:40+00:00 https://db.gcve.eu/sighting/91e3a2f3-9fb5-4b6f-af01-efde4be0fbb9/export 2026-07-25T12:56:30.611258+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "91e3a2f3-9fb5-4b6f-af01-efde4be0fbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29455", "type": "seen", "source": "https://t.me/cibsecurity/20551", "content": "\u203c CVE-2020-29455 \u203c\n\nA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-12T00:35:46.000000Z"} 2020-12-12T00:35:46+00:00