https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 23 Jul 2026 07:36:33 +0000 https://db.gcve.eu/sighting/5a33e30b-11ea-4599-aff5-5933a7317129/export {"uuid": "5a33e30b-11ea-4599-aff5-5933a7317129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-25638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.\n\ud83d\udccf Published: 2020-12-02T14:36:24.000Z\n\ud83d\udccf Modified: 2025-04-23T19:47:38.454Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=1881353\n2. https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html\n3. https://www.debian.org/security/2021/dsa-4908\n4. https://www.oracle.com//security-alerts/cpujul2021.html\n5. https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E\n6. https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df%40%3Ccommits.turbine.apache.org%3E\n7. https://www.oracle.com/security-alerts/cpuapr2022.html\n8. https://www.oracle.com/security-alerts/cpujul2022.html", "creation_timestamp": "2025-04-23T20:04:51.000000Z"} {"uuid": "5a33e30b-11ea-4599-aff5-5933a7317129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-25638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.\n\ud83d\udccf Published: 2020-12-02T14:36:24.000Z\n\ud83d\udccf Modified: 2025-04-23T19:47:38.454Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=1881353\n2. https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html\n3. https://www.debian.org/security/2021/dsa-4908\n4. https://www.oracle.com//security-alerts/cpujul2021.html\n5. https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E\n6. https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df%40%3Ccommits.turbine.apache.org%3E\n7. https://www.oracle.com/security-alerts/cpuapr2022.html\n8. https://www.oracle.com/security-alerts/cpujul2022.html", "creation_timestamp": "2025-04-23T20:04:51.000000Z"} https://db.gcve.eu/sighting/5a33e30b-11ea-4599-aff5-5933a7317129/export Wed, 23 Apr 2025 20:04:51 +0000 https://db.gcve.eu/sighting/c8a33b6f-7330-4a1e-bfe9-2253e2d666f7/export {"uuid": "c8a33b6f-7330-4a1e-bfe9-2253e2d666f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25631", "type": "seen", "source": "https://t.me/cibsecurity/17230", "content": "\u203c CVE-2020-25631 \u203c\n\nA vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the \"Add new chapter\" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:43.000000Z"} {"uuid": "c8a33b6f-7330-4a1e-bfe9-2253e2d666f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25631", "type": "seen", "source": "https://t.me/cibsecurity/17230", "content": "\u203c CVE-2020-25631 \u203c\n\nA vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the \"Add new chapter\" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:43.000000Z"} https://db.gcve.eu/sighting/c8a33b6f-7330-4a1e-bfe9-2253e2d666f7/export Tue, 08 Dec 2020 07:30:43 +0000 https://db.gcve.eu/sighting/6ed0a291-c3ac-4c06-b4cf-117fab83d3ff/export {"uuid": "6ed0a291-c3ac-4c06-b4cf-117fab83d3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25630", "type": "seen", "source": "https://t.me/cibsecurity/17225", "content": "\u203c CVE-2020-25630 \u203c\n\nA vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:36.000000Z"} {"uuid": "6ed0a291-c3ac-4c06-b4cf-117fab83d3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25630", "type": "seen", "source": "https://t.me/cibsecurity/17225", "content": "\u203c CVE-2020-25630 \u203c\n\nA vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:36.000000Z"} https://db.gcve.eu/sighting/6ed0a291-c3ac-4c06-b4cf-117fab83d3ff/export Tue, 08 Dec 2020 07:30:36 +0000 https://db.gcve.eu/sighting/304887f1-55d1-43bf-ae64-aa6e1d7ba6d5/export {"uuid": "304887f1-55d1-43bf-ae64-aa6e1d7ba6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25638", "type": "seen", "source": "https://t.me/cibsecurity/17030", "content": "\u203c CVE-2020-25638 \u203c\n\nA flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-02T18:55:05.000000Z"} {"uuid": "304887f1-55d1-43bf-ae64-aa6e1d7ba6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25638", "type": "seen", "source": "https://t.me/cibsecurity/17030", "content": "\u203c CVE-2020-25638 \u203c\n\nA flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-02T18:55:05.000000Z"} https://db.gcve.eu/sighting/304887f1-55d1-43bf-ae64-aa6e1d7ba6d5/export Wed, 02 Dec 2020 18:55:05 +0000 https://db.gcve.eu/sighting/004cc611-0b84-4c85-a772-96e68c69a2ee/export {"uuid": "004cc611-0b84-4c85-a772-96e68c69a2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25635", "type": "seen", "source": "https://t.me/cibsecurity/15050", "content": "\u203c CVE-2020-25635 \u203c\n\nA flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-05T18:27:11.000000Z"} {"uuid": "004cc611-0b84-4c85-a772-96e68c69a2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25635", "type": "seen", "source": "https://t.me/cibsecurity/15050", "content": "\u203c CVE-2020-25635 \u203c\n\nA flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-05T18:27:11.000000Z"} https://db.gcve.eu/sighting/004cc611-0b84-4c85-a772-96e68c69a2ee/export Mon, 05 Oct 2020 18:27:11 +0000 https://db.gcve.eu/sighting/1c566b39-1dca-4ae9-b278-52d26d130331/export {"uuid": "1c566b39-1dca-4ae9-b278-52d26d130331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25636", "type": "seen", "source": "https://t.me/cibsecurity/15046", "content": "\u203c CVE-2020-25636 \u203c\n\nA flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-05T16:27:27.000000Z"} {"uuid": "1c566b39-1dca-4ae9-b278-52d26d130331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25636", "type": "seen", "source": "https://t.me/cibsecurity/15046", "content": "\u203c CVE-2020-25636 \u203c\n\nA flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-05T16:27:27.000000Z"} https://db.gcve.eu/sighting/1c566b39-1dca-4ae9-b278-52d26d130331/export Mon, 05 Oct 2020 16:27:27 +0000