<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-01T04:46:01.167050+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/43d90fb2-9581-40cb-bad8-983250d59d06/export</id>
    <title>43d90fb2-9581-40cb-bad8-983250d59d06</title>
    <updated>2026-06-01T04:46:01.641279+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "43d90fb2-9581-40cb-bad8-983250d59d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-36313", "type": "seen", "source": "https://t.me/cibsecurity/46757", "content": "\u203c CVE-2022-36313 \u203c\n\nAn issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-21T20:18:15.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/43d90fb2-9581-40cb-bad8-983250d59d06/export"/>
    <published>2022-07-21T20:18:15+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2772e1ca-97fe-4488-86ea-ea9af99b7954/export</id>
    <title>2772e1ca-97fe-4488-86ea-ea9af99b7954</title>
    <updated>2026-06-01T04:46:01.641209+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2772e1ca-97fe-4488-86ea-ea9af99b7954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-36312", "type": "seen", "source": "https://t.me/cibsecurity/48195", "content": "\u203c CVE-2022-36312 \u203c\n\nAirspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:33.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2772e1ca-97fe-4488-86ea-ea9af99b7954/export"/>
    <published>2022-08-16T07:38:33+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/f76ba1a4-c6b9-40f1-abbb-f31833644b71/export</id>
    <title>f76ba1a4-c6b9-40f1-abbb-f31833644b71</title>
    <updated>2026-06-01T04:46:01.641119+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "f76ba1a4-c6b9-40f1-abbb-f31833644b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-36310", "type": "seen", "source": "https://t.me/cibsecurity/48196", "content": "\u203c CVE-2022-36310 \u203c\n\nAirspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:34.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/f76ba1a4-c6b9-40f1-abbb-f31833644b71/export"/>
    <published>2022-08-16T07:38:34+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/97bcdb8e-551a-4f86-a8bf-446c6bc2884b/export</id>
    <title>97bcdb8e-551a-4f86-a8bf-446c6bc2884b</title>
    <updated>2026-06-01T04:46:01.640343+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "97bcdb8e-551a-4f86-a8bf-446c6bc2884b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-36311", "type": "seen", "source": "https://t.me/cibsecurity/48201", "content": "\u203c CVE-2022-36311 \u203c\n\nAirspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:40.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/97bcdb8e-551a-4f86-a8bf-446c6bc2884b/export"/>
    <published>2022-08-16T07:38:40+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/0d410477-d957-4167-94b4-85d265fb818c/export</id>
    <title>0d410477-d957-4167-94b4-85d265fb818c</title>
    <updated>2026-06-01T04:46:01.638294+00:00</updated>
    <author>
      <name>sync_user</name>
      <uri>https://db.gcve.eu/user/sync_user</uri>
    </author>
    <content>{"uuid": "0d410477-d957-4167-94b4-85d265fb818c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2022-36313", "type": "seen", "source": "https://gist.github.com/podhmo/d72566411eddd2d13a2e11b9b06e9d7c", "content": "", "creation_timestamp": "2026-04-09T09:46:45.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/0d410477-d957-4167-94b4-85d265fb818c/export"/>
    <published>2026-04-09T09:46:45+00:00</published>
  </entry>
</feed>
